Symfony Station Communiqué — 23 February 2024. A look at Symfony, Drupal, PHP, Cybersec, and Fediverse News!
Tags: symfony, drupal, php, fediverse
Published: 2024-03-03 21:32:07

This communiqué [originally appeared on Symfony Station](https://symfonystation.mobileatom.net/Symfony-Station-Communique-23-February-2024).

Welcome to this week's Symfony Station communiqué. It's your review of the essential news in the Symfony and PHP development communities focusing on protecting democracy. Because open-source equals open societies, peeps. We also cover the cybersecurity world and the Fediverse (more open-source).

We cover a spam attack on the Mastodon community this week. And there is good content in all of our categories, so please take your time and enjoy the items most relevant and valuable to you. This is why we publish on Fridays. So you can savor it over your weekend. 😉

Or jump straight to your favorite section.

- [Symfony](https://symfonystation.mobileatom.net/Symfony-Station-Communique-23-February-2024#symfony)
- [PHP](https://symfonystation.mobileatom.net/Symfony-Station-Communique-23-February-2024#php)
- [More Programming](https://symfonystation.mobileatom.net/Symfony-Station-Communique-23-February-2024#more)
- [Fighting for Democracy](https://symfonystation.mobileatom.net/Symfony-Station-Communique-23-February-2024#other)
- [Cybersecurity](https://symfonystation.mobileatom.net/Symfony-Station-Communique-23-February-2024#cybersecurity)
- [Fediverse](https://symfonystation.mobileatom.net/Symfony-Station-Communique-23-February-2024#fediverse)

Once again, thanks go out to Javier Eguiluz and Symfony for sharing [our communiqué](https://symfonystation.mobileatom.net/Symfony-Station-Communique-16-February-2024) in their [Week of Symfony](https://symfony.com/blog/a-week-of-symfony-894-12-18-february-2024).


**My opinions will be in bold. And will often involve cursing. Because humans.**

---

## Symfony

As always, we will start with the official news from Symfony.

Highlight -> "This week, development activity focused on fixing bugs, such as adding compatibility with the new yielding feature introduced in Twig 3.9. In addition, we published more details about the talks of the upcoming SymfonyLive Paris 2024 conference."

[A Week of Symfony #894 (12-18 February 2024)](https://symfony.com/blog/a-week-of-symfony-894-12-18-february-2024)

SymfonyCasts has:

[This week on SymfonyCasts!](https://5hy9x.r.ag.d.sendibm3.com/mk/mr/sh/1t6AVsd2XFnIGBrRERGJumwddAsNT1/lL4qpbJYPzd_) 


---

## Featured Item

Cory Doctorow writes:

The problem, in other words, isn’t intermediation — it’s _power_. The thing that distinguishes a useful intermediary from an enshittified bully is _power_. Intermediaries gain power when our governments stop enforcing competition law. 

This lets intermediaries buy each other up and corner markets. Once they’ve formed cozy cartels, they can capture their regulators and commit rampant labor, privacy and consumer violations with impunity. That capture _also_ lets them harness governments to punish smaller players that want to free workers, creators, audiences and customers from walled gardens. 

It also hands them a whip-hand over their workers, so that any worker who refuses to aid in these nefarious plans can be easily fired.

[Middlemen without enshittification](https://doctorow.medium.com/middlemen-without-enshittification-154e1192129d)


---

### This Week

Dariusz Gafka explores:

[Symfony Multi-Tenant Applications with Ecotone](https://dariuszgafka.medium.com/symfony-multi-tenant-applications-with-ecotone-8cc15d2715e2)

Brian Thiely examines the:

[Request Lifecycle in Symfony](https://medium.com/@brian.thiely/unraveling-the-request-lifecycle-in-symfony-f88d0caf77e8)

Rector shows us:

[What to expect when you plan to Migrate Away from CakePHP 2](https://getrector.com/blog/what-to-expect-when-you-plan-to-migrate-away-from-cakephp-2)

Eternal Learner shows us how to:

[Use State Processors and Providers on API Platform 3](https://medium.com/@etearner/use-state-processors-and-providers-on-api-platform-3-ea242473012f)

Makina Corpus looks at:

[Itéra­tions vers le DDD et la clean archi­tec­ture avec Symfony (2/2)](https://makina-corpus.com/symfony/iterations-vers-ddd-et-clean-architecture-symfony-article-2)

Part 1 is below in the previous weeks section.

Nikolay Nikolov explores:

[Unveiling the Power of Dependency Injection in Symfony](https://itnext.io/unveiling-the-power-of-dependency-injection-in-symfony-0ac4f7aa18e8)

[Decoupling Logic Through Custom Events in Symfony](https://itnext.io/decoupling-logic-through-custom-events-in-symfony-ce5c69a57850)

Jose Clemente García Rodríguez shares:

[Symfony — Azure Provider for OAuth 2.0 Client bundle](https://medium.com/@priyankgondaliya/mastering-data-serialization-with-symfony-serializer-practical-examples-8ee012cb8cb2)

### eCommerce

Cristiano Pacheco says:

[Good-bye Docker, Hello Nix: Configuring a Magento 2 Development Environment with Rooter](https://dev.to/run_as_root/good-bye-docker-hello-nix-configuring-a-magento-2-development-environment-with-rooter-11in)

Stefan Koopmanschap reports on a meetup:

[PHP and e-commerce](https://skoop.dev/blog/2024/02/23/php_and_ecommerce/)

**Magento, Shopware, Sylius, and Spryker all use Symfony components.**

## PIM

Fronkom examines a new reg impacting PIMs:

[Who needs to comply with Digital Product Passport?](https://blog.frontkom.com/en/who-needs-to-comply-with-digital-product-passport)

### CMSs

TYPO3 has:

[Report From the EMPAMOS Barcamp and Networking Event in Nuremberg 2023](https://typo3.org/article/report-from-the-empamos-barcamp-and-networking-event-in-nuremberg-2023)

[Unleashing the Power of Connectivity](https://typo3.com/blog/power-of-connectivity)

And a case study:

[Scaling Up Global Websites with TYPO3](https://typo3.com/customers/case-studies/sysmex-europe)

TYPO3 Developer Days says:

[The TYPO3 Developer Days 2024 need your insights!](https://t3dd24.typo3.com/call-for-papers)

Use TYPO3 looks at:

[PHP Attributes in TYPO3](https://usetypo3.com/php-attributes-in-typo3/)


<br/>

Joomla publishes:

[The February Issue](https://magazine.joomla.org/all-issues/february-2024/the-february-issue-2024)

Highlights include:

[Cassiopeia, Joomla’s powerful built-in template: how to use css classes for your category blog](https://magazine.joomla.org/all-issues/february-2024/cassiopeia-joomla-powerful-built-in-template)

[Your Joomla Administrator Panel: make it yours!](https://magazine.joomla.org/all-issues/february-2024/your-joomla-administrator-panel-make-it-yours)

Bleeping Computer reports:
  
[Joomla fixes XSS flaws that could expose sites to RCE attacks](https://www.bleepingcomputer.com/news/security/joomla-fixes-xss-flaws-that-could-expose-sites-to-rce-attacks/)


<br/>

Drupal has:

[Drupal means innovation: Introducing the innovation hub](https://www.drupal.org/drupalorg/blog/drupal-means-innovation-introducing-the-innovation-hub)

Here's the hub:

[Drupal Innovation](https://www.drupal.org/innovation)

**There's some good stuff here that is (very) slowly improving Drupal.**

[Early Bird Registration for DrupalCon Portland 2024 is here, and you can now view the full detailed schedule!](https://mailchi.mp/drupalcon/portland-schedule-is-out-register-now-20022024?e=2fcfe28a68)

Talking Drupal has:

[Talking Drupal #438 - CKEditor 4 End of Life](http://sacstudio.libsyn.com/talking-drupal-438-ckeditor-4-end-of-life)

DrupalizeMe examines:

[PHP Attributes for Drupal Plugins](https://drupalize.me/blog/php-attributes-drupal-plugins)

[Symfony for Drupal Developers](https://drupalize.me/guide/symfony-drupal-developers)

Acquia looks at:
  
[Automated Bot Traffic - Strategies to Handle and Manage It](https://dev.acquia.com/blog/automated-bot-traffic-strategies-handle-and-manage-it)

Tag1 explores:

[Gander: The Sustainability Impact of Automating Performance Testing](https://www.tag1consulting.com/blog/gander-sustainability-impact-automating-performance-testing)

Image X examines:

[Mastering Content Structure with Ease Thanks to Drupal’s Revamped Field UI](https://imagexmedia.com/blog/drupal-new-field-ui)

**Great stuff.**

The Lullabot Podcast looks at:

[Navigating the Waters of Drupal Development with Tugboat](https://www.lullabot.com/podcasts/lullabot-podcast/navigating-waters-drupal-development-tugboat)

QTA Tech shares:

[Effortless Drupal Development: Single Directory Components Demystified](https://qtatech.com/en/article/effortless-drupal-development-single-directory-components-demystified)

The Drop Times has an interview:

[FLDC Featured Speaker Aubrey Sambor on CSS Color Innovations](https://www.thedroptimes.com/interview/37689/fldc-featured-speaker-aubrey-sambor-css-color-innovations)

**I am looking forward to her presentation.**

Ryan Robinson explains his:

[Drupal Open Menu](https://dev.to/ryanr/drupal-open-menu-5bik)

### Previous Weeks

DrupalizeMe explores:

[PHP Attributes for Drupal Plugins](https://drupalize.me/blog/php-attributes-drupal-plugins)

QED42 Tech has:

[The Guide to Single Directory Components (SDC) in Drupal 10](https://medium.com/qed42-tech-insights/the-guide-to-single-directory-components-sdc-in-drupal-10-067ecdf3c19c)

[Single Directory Components (SDC) Block module in Drupal 10](https://medium.com/qed42-tech-insights/single-directory-components-sdc-block-module-in-drupal-10-f992d2b66744)

[A Guide to SDC Variations with Paragraphs in Drupal 10](https://medium.com/qed42-tech-insights/a-guide-to-sdc-variations-with-paragraphs-in-drupal-10-cc26100b7f71)

**Great, great stuff. I don't know how I missed this last week. It's the way to do Drupal frontend.**

LunaLoom asks:

[Why Next.js + Drupal Simplifies Frontend Development with Headless CMS Integration](https://medium.com/@LunaLoom/why-next-js-drupal-simplifies-frontend-development-with-headless-cms-integration-b6b20a11c0ca)

**This is not.**

Makina Corpos has:

[Itéra­tions vers le DDD et la clean archi­tec­ture avec Symfony (1/2)](https://makina-corpus.com/symfony/iterations-vers-ddd-et-clean-architecture-Symfony-1)

[Découvrez le DbToolsBundle](https://makina-corpus.com/symfony/symfony-dbtoolsbundle-sauvegarder-restaurer-anonymiser-base-données)

[Processus de traitement d'une requête HTTP par Symfony](https://makina-corpus.com/symfony/processus-traitement-requete-http-symfony)
 

---
## PHP

### This Week

Stéphan Kochen shares:

[Using Nix flake inputs with PHP Composer](https://stephank.nl/p/2024-02-17-using-nix-flake-inputs-with-php-composer.html)

Dan Leech shares:

[My PHP Problems](https://www.dantleech.com/blog/2024/02/18/my-php-problems/)

Dragan Rapić explores:
  
[Mastering a PHP Debugging](https://levelup.gitconnected.com/mastering-a-php-debugging-38e2ee8ac5f3)

Parthipan Natkunam explains:

[6 Configs to Secure Server-to-Server Communications using cURL in PHP](https://levelup.gitconnected.com/6-configs-to-secure-server-to-server-communications-using-curl-in-php-a144719b62d0)

**There is a part 1 you will want to read as well.**

Oliver Davies asks:
  
[Which PHPStan level is right for you?](https://www.oliverdavies.uk/archive/2024/02/20/which-level-is-right-for-you)

JetBrains announces:

[The New Terminal (Beta) Is Now in JetBrains IDEs](https://blog.jetbrains.com/idea/2024/02/the-new-terminal-beta-is-now-in-jetbrains-ides/)

[AI for PHP: How to Tweak AI Prompts to Improve PHP Tests](https://blog.jetbrains.com/phpstorm/2024/02/ai-for-php-how-to-tweak-ai-prompts-to-improve-php-tests/)

Muhammad Raza Bangi looks at:

[Interface Segregation Principle (ISP) By Using PHP : SOLID Principle](https://dev.to/razabangi/interface-segregation-principle-isp-by-using-php-solid-principle-cb5)



---

## More Programming

NueJS explains:

[Tailwind marketing and misinformation engine](https://nuejs.org/blog/tailwind-misinformation-engine/)

**Or why Failwind is shit.**

EuroNews asks:

[Open source vs closed source AI: What’s the difference and why does it matter?](https://www.euronews.com/next/2024/02/20/open-source-vs-closed-source-ai-whats-the-difference-and-why-does-it-matter)

GitHub shares:

[How AI code generation works](https://github.blog/2024-02-22-how-ai-code-generation-works/)

Free Code Camp shows us:

[How to Use the :has() Selector in CSS](https://www.freecodecamp.org/news/how-to-use-the-has-selector-in-css/)

Marc van Neerven announces:

[PurePWA — A Radical U-Turn in Web Development](https://medium.com/cto-as-a-service/purepwa-a-radical-u-turn-in-web-development-a386c0dc092e)

**Now this is cool. No React shit, Bootcrap, or Failwind.**

Docker shares:

[5 Benefits of a Container-First Approach to Software Development](https://www.docker.com/blog/5-benefits-of-a-container-first-approach-to-software-development/)

---

## Fighting for Democracy

[Please visit our Support Ukraine page](https://symfonystation.mobileatom.net/Support-Ukraine) to learn how you can help kick Russia out of Ukraine (eventually, like ending apartheid in South Africa).

### The cyber response to Russia’s War Crimes and other douchebaggery

Bleeping Computer reports:

[FBI disrupts Russian Moobot botnet infecting Ubiquiti routers](https://www.bleepingcomputer.com/news/security/fbi-disrupts-russian-moobot-botnet-infecting-ubiquiti-routers/#google_vignette)

The Next Web opines:

[How antitrust cases against tech giants could reshape the digital advertising landscape](https://thenextweb.com/news/antitrust-cases-big-tech-digital-advertising-dsa)

Ars Technica reports:

[EU accuses TikTok of failing to stop kids pretending to be adults](https://arstechnica.com/tech-policy/2024/02/eu-accuses-tiktok-of-failing-to-stop-kids-pretending-to-be-adults/)

The Verge reports:

[Apple will reportedly face a $539 million fine over Spotify’s antitrust complaint](https://www.theverge.com/2024/2/18/24076526/apple-music-antitrust-fine-brussels-eu-spotify)

404 Media reports:
  
[FTC Fines Avast $16.5 Million For Selling Browsing Data Harvested by Antivirus](https://www.404media.co/impact-ftc-fines-avast-16-5-million-for-selling-browsing-data-harvested-by-antivirus/)

VentureBeat reports:

[The FTC warned about ‘quiet’ TOS changes for AI training. Here’s why it might not be enough.](https://venturebeat.com/ai/the-ftc-warned-about-quiet-tos-changes-for-ai-training-heres-why-it-might-not-be-enough/)

TechSpot reports:
  
[Major tech companies sign agreement to combat AI's use in election interference](https://www.techspot.com/news/101927-major-tech-companies-sign-agreement-combat-ai-use.html)

**Ha.**

NPR reports:

[As Congress lags, California lawmakers take on AI regulations](https://www.npr.org/2024/02/21/1233024001/as-congress-lags-california-lawmakers-take-on-ai-regulations)

The Hacker News reports:

[Meta Warns of 8 Spyware Firms Targeting iOS, Android, and Windows Devices](https://thehackernews.com/2024/02/meta-warns-of-8-spyware-firms-targeting.html)

**Meta tries to do something good.**

PBS reports:

[Biden signs executive order to boost cybersecurity at American ports](https://www.pbs.org/newshour/politics/biden-signs-executive-order-to-boost-cybersecurity-at-american-ports)

The Kyiv Post reports:

[Ukraine Defense Ministry Builds New Community to Facilitate Military Tech Development](https://www.kyivpost.com/post/28116)

### The Evil Empire Strikes Back

And:

[Kremlin Propaganda Aims to Destabilize Ukraine From Within](https://www.kyivpost.com/post/28189)

404 Media reports:

[Fake Funeral Live Stream Scams Are All Over Facebook](https://www.404media.co/fake-funeral-live-stream-scams-are-all-over-facebook/)

**Then Meta allows this mofoery.**
  
The Hacker News reports:

[Russian-Linked Hackers Target 80+ Organizations via Roundcube Flaws](https://thehackernews.com/2024/02/russian-linked-hackers-breach-80.html)

The Next Web reports:
  
[New Russian PSYOPs mix disinformation, spam, and Navalny](https://thenextweb.com/news/new-russian-psyops-mix-disinformation-spam-and-navalny)

DarkReading reports:
  
[Russian APT 'Winter Vivern' Targets European Government, Military](https://www.darkreading.com/cyberattacks-data-breaches/russian-apt-winter-vivern-targets-european-government-military)

[Iranian APTs Dress Up as Hacktivists for Disruption, Influence Ops](https://www.darkreading.com/threat-intelligence/iranian-apts-dress-up-as-hacktivists-for-disruption-influence-ops)

Krebs on Security reports:

[New Leak Shows Business Side of China’s APT Menace](https://krebsonsecurity.com/2024/02/new-leak-shows-business-side-of-chinas-apt-menace/)

Bleeping Computer reports:

[UnitedHealth confirms Optum hack behind US healthcare billing outage](https://www.bleepingcomputer.com/news/security/unitedhealth-confirms-optum-hack-behind-us-healthcare-billing-outage/)

Open Web Advocacy reports:

[It’s Official, Apple Kills Web Apps in the EU](https://open-web-advocacy.org/blog/its-official-apple-kills-web-apps-in-the-eu/)

On a related note, Ars Technica reports:

[Big Tech is extremely unimpressed by Apple’s EU App Store changes](https://arstechnica.com/tech-policy/2024/02/big-tech-is-extremely-unimpressed-by-apples-eu-app-store-changes/)


### Cybersecurity/Privacy

Ars Technica reports:

[Google gets its way, bakes a user-tracking ad platform directly into Chrome](https://arstechnica.com/gadgets/2023/09/googles-widely-opposed-ad-platform-the-privacy-sandbox-launches-in-chrome/)

TechCrunch reports:

[Google DeepMind forms a new org focused on AI safety](https://techcrunch.com/2024/02/21/google-deepmind-forms-a-new-org-focused-on-ai-safety/)

**This probably safety-washing from Google but hopefully not.**

VentureBeat reports:

[The five most alarming cyber threats from CrowdStrike’s 2024 Global Threat Report](https://venturebeat.com/security/the-five-most-alarming-cyber-threats-from-crowdstrikes-2024-global-threat-report/)

The Register reports: 

[Election security threats in 2024 range from AI to … anthrax?](https://www.theregister.com/2024/02/18/election_security_threats_2024/)

Bleeping Computer reports:
  
[LockBit ransomware disrupted by global police operation](https://www.bleepingcomputer.com/news/security/lockbit-ransomware-disrupted-by-global-police-operation/)


---

### Fediverse

The Fediverse Report has:

[Last Week in Fediverse – ep 56](https://fediversereport.com/last-week-in-fediverse-ep-56/)

The BBC announces:

[Extending our Mastodon social media trial](https://www.bbc.co.uk/rd/blog/2024-02-extending-our-mastodon-social-media-trial)

**Mastodon had a spam fiasco last weekend because of some teenage jackassery in Japan and its own lax security and privacy decisions. Plus Discord's shitassery.**

Tedium reports:
 
[Spammy Saturday](https://tedium.co/2024/02/20/mastodon-spam-maintenance-problem/)

Jan Wildeboer examines the laxness:

[The 2024-02 Spam Wave on the Fediverse and what we can learn (unfinished)](https://jan.wildeboer.net/2024/02/ActivityPubSpam/)


Cats on a Keyboard has the nitty-gritty:

[Cyberbullying Gone Global: Fediverse Spam and Operation Beleaguer](https://blog.fyralabs.com/cyberbullying-gone-global-regarding-the-fediverse-spam-and-operation-beleaguer/)

TechCrunch reports:

[Discord took no action against server that coordinated costly Mastodon spam attacks](https://techcrunch.com/2024/02/21/discord-took-no-action-against-server-that-coordinated-costly-mastodon-spam-attacks/)

**Everyone knows TOS are for platforms to fuck over their users. Not to prevent their users from fucking over other users. Right SubStack?**

[Meta tests cross-posting from Facebook to its Twitter/X competitor, Threads](https://techcrunch.com/2024/02/21/meta-tests-cross-posting-from-facebook-to-its-twitter-x-competitor-threads/)

**Great news. Those on the Fediverse who want to interact with the Threads dummies get the Facebook old dummies as a bonus. At least it will be via ActivityPub.**

Mike McCue previews:

[Federating Flipboard Magazines](https://medium.com/@mmccue/federating-flipboard-magazines-575a18297bd)

**We will let you know when ours are turned on.**

Forgejo announces:

[Forgejo forks its own path forward](https://forgejo.org/2024-02-forking-forward/)

Funkwhale announces:

[The path to Funkwhale 2.0: a new API](https://blog.funkwhale.audio/funkwhale-2-new-api.html "Permalink to The path to Funkwhale 2.0: a new API")

### Other federated social media

[Bluesky: An Open Social Web](https://bsky.social/about/blog/02-22-2024-open-social-web)

**So their idea of "federation" is use Bluesky or set up your own personal "instance".**

---



## CTAs (aka show us some free love)

- That’s it for this week. Please share this communiqué.
- Also, please [join our newsletter list, The Payload, at the bottom of our site’s pages](https://symfonystation.mobileatom.net/contact). Joining gets you each week's communiqué in your inbox (a day early).
- Follow us [on Flipboard](https://flipboard.com/@mobileatom/symfony-for-the-devil-allupr6jz) or at [@symfonystation@newsletter.mobileatom.net](https://newsletter.mobileatom.net/@symfonystation) on Mastodon for daily coverage.
- Do you like Reddit? Why? Instead, follow us [on kbin](https://kbin.social/u/symfonystation) for a better Fediverse and Symfony-based experience. We have a [Symfony Magazine](https://kbin.social/m/Symfony) and [Collection](https://kbin.social/c/SymfonyUniverse) there.

Do you own or work for an organization that would be interested in our promotion opportunities? Or supporting our journalistic efforts? If so, please get in touch with us. We’re in our toddler stage, so it’s extra economical. 😉

More importantly, if you are a Ukrainian company with coding-related products, we can offer free promotion on [our Support Ukraine page](https://symfonystation.mobileatom.net/Support-Ukraine). Or, if you know of one, get in touch.

You can find a vast array of curated evergreen content on our [communiqués page](([https://symfonystation.mobileatom.net/communiques](https://symfonystation.mobileatom.net/communiques)). 

## Author

![Reuben Walker headshot](https://symfonystation.mobileatom.net/sites/default/files/inline-images/Reuben-Walker-headshot.jpg)

### Reuben Walker

Founder
Symfony Station