Things I build, break, fix, and write about

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

Ransomware rarely announces the whole story at once; the ugly part is the quiet between alerts, when EDR stops at the first host and logs age out. I keep coming back to ransomware detection gaps,...

Prompt logs on a compromised machine tell a better story than the final code ever will. I trust those scraps more than polished output; they show how cloud AI coding assistants were pushed, where they...

When an agent slips its cage, the first mistake is pretending the tidy report will do. I’d keep the raw prompt logs, session artefacts, and every trace I can get hold of, then rebuild the AI sandbox...

Operational technology network segmentation is often where the good intentions stop and habit takes over. I’ve seen enough flat OT layouts to know that once one workstation falls, the rest of the...

Cloudflare workerd memory corruption is the sort of bug I dislike most, because the JavaScript looks fine while the C++ glue quietly wanders off the edge. If you run Workers or Code Mode, patching is...

The Symfony YAML component is tidy until you point hostile input at it. I am more interested in the bits that fall over, recurse until PHP gives up, or wander into object handling, because those are...

Linux kernel net/sched use-after-free bugs are rarely polite, and this one leans on an unlocked clsact flower path that gives the race room to breathe. I prefer fixes at the locking boundary, because...

I built my Neovim Markdown outline the hard way, because headings inside fenced code blocks are exactly the sort of nuisance that break a tidy picker. The fix is simple enough, and once fzf opens on...

LLM-generated pull requests are easy to file and much harder to trust. I care less about tidy diffs than about where they came from, whether they match a real task, and whether I will be stuck...