Things I build, break, fix, and write about

11 July 2026
Heap overflow in ngx_http_script_copy_capture_code()

I spent too long trusting rewrite logic that looked harmless, and that is usually when nginx rewrite module is_args bites back. Escaped input, stale state, and a buffer sized on the wrong assumption are enough to turn a routine rule into heap corruption.

11 July 2026
Cloudflare Managed WAF rules: watch action changes

Cloudflare Managed WAF rules are easy to misread if you only skim the release notes. I look at the Security Events dashboard instead, because that is...

10 July 2026
Handling backend restarts in Cloudflare Realtime SFU

Cloudflare Realtime WebSocket adapter handles brief backend restarts better than I expected, but only within a hard five-second window. That is enough...

9 July 2026
Detect Split ClientHello failures in TLS 1.3

Split ClientHello failures are exactly the sort of thing that waste an afternoon, because the server looks fine until a fragmented post-quantum...

Latest blog posts you might like

11 February 2024
The Wonders of Diversified Technology in 2024

Explore the latest in tech trends for 2024, from Generative AI to the Metaverse. Learn how datafication and 3D printing are shaping our digital future.

2 February 2024
Advanced Linux System Administration: Tips and Tricks

Linux system administration requires a deep understanding of the operating system and the various tools available to manage it effectively.

15 January 2024
How to Install WordPress with Apache, MySQL, and SSL

Setting up WordPress on an Ubuntu 20.04 server with Apache, MySQL, and an SSL certificate ensures your website is secure and performant.