https://stevegrunwell.com/about/
Steve is a Senior Software Engineer, open-source contributor, and speaker that is passionate about helping people build better software.
21 Oct 2026
https://stevegrunwell.com/blog/php2shell/
A major PHP security vulnerability, dubbed "php2shell", was disclosed today, which can allow an attacker to execute Remote Code Execution (RCE) by exploiting vulnerable versions of PHP—pretty much any version released in the last twenty years leading up until today. If you're running an unpatched version of PHP 8.2 or newer, stop reading now and upgrade immediately; if you're running any version of PHP 8.2 or higher, the latest release should be available via your package manager (apt, yum, etc...
06 Sep 2026
https://stevegrunwell.com/blog/typesnitch/
When I was at Mailchimp, one of the hardest parts of making meaningful contributions was the total lack of type-safety; after all, it’s a decades-old monolith that predates things like scalar type-hints, enums, union & intersection types, etc. However, things broke more than once as a result of trying to add type-hints to even the […]