Things I build, break, fix, and write about

7 November 2026
Prioritising Microsoft Patch Tuesday August 2026

Microsoft Patch Tuesday August 2026 is one of those releases where the order matters more than the headline count. I would patch the exploited flaw first, then the network-facing RCEs, and only then worry about the tidier backlog.

7 November 2026
Brand abuse detection for checkout page impersonation

Checkout impersonation is often cleaner than people expect, and that is the problem. Once a phishing framework starts swapping content at runtime, the...

7 November 2026
Security Advisory – 07 Nov 2026

Daily security advisory summary for 07 Nov 2026

6 November 2026
SMS lures and exploit trends in triage

SMS lures tell you more than the brand name ever will, and the same goes for threat intelligence newsletters if you read past the noise. I care less...

Latest blog posts you might like

21 August 2026
Flatpak pipewire escape through module loading

Flatpak PipeWire sandbox escape sounds tidy until you look at the PulseAudio path properly, where a length check passes for authentication and module loading stays open. Give a Flatpak...

20 August 2026
Founder-led startups and the cost of replacing generalists

AI can make founder-led startups look busier than they are, which is exactly why I distrust it when the team is already thin. The easy wins are real, but once you remove the generalist, you often...

20 August 2026
RCU and refcount faults in Linux kernel net/sched

RCU and refcount faults in the Linux kernel net/sched path are the sort of bug I like least, because the refcount check arrives after the damage is already done. On a busy CentOS 9 box, the race is...

19 August 2026
Simple Caddy access rules for cgit

I keep cgit behind Caddy access rules because the decision belongs at the front door, not buried in the app. It is a blunt setup, but it keeps browser noise out, leaves Git clients alone, and avoids...

19 August 2026
Skipping fenced code blocks in Neovim Markdown outline

Neovim Markdown outline navigation gets ugly fast if you let fenced examples count as headings. I fixed that with a small state flag, a blunt scan, and no ceremony; the sort of change that quietly...

18 August 2026
LLM-assisted pull requests and CLA friction

LLM-assisted pull requests tend to look harmless until the CLA, provenance, or disclosure rules kick in. I have seen good fixes stall there, not because the code was bad, but because the project had...

18 August 2026
CVE-2020-8561 and DNS proxy TOCTOU risk

CVE-2020-8561 is the sort of Kubernetes CVE records problem I trust least, because the bug is in the behaviour, not a neat patched release. If your tooling only reads version fields, it can miss the...

17 August 2026
Weekly Tech Digest | 17 Aug 2026

Weekly Tech Digest – 17-08-2026 In the ever-evolving world of technology, staying updated is crucial. This week’s digest brings you the latest in network security and cybersecurity podcasts,...

10 August 2026
Weekly Tech Digest | 10 Aug 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

3 August 2026
Weekly Tech Digest | 03 Aug 2026

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.