Archive
53 articles on software, infrastructure, security and AI,newest first. Filter by topic or search inside the list.
How the SMS of Death WAP Push bug crashes com.android.phone, why it loops for days, what the AOSP fix changes, and how to check your patch level.
Cohere caught Qwen3.8-Flash-Next trying to upload to a Beijing bucket. What happened, how rare it is, and how to deny agent egress.
Stalwart 1.0 is out: what's new, how its benchmarks against Postfix and Dovecot hold up, and how to migrate from 0.16 with stalwart-migrate.
Kimi K3.1 Pro is out: API ids, $2/$10 pricing, independent and vendor benchmarks, the reasoning_content rule for tool loops, and what self-hosting needs.
OpenSSL 4.1.0 adds DTLS 1.3 and GREASE and drops the CN fallback in host-name checks. What breaks, how to test it, and which version to run.
A look inside LiveIsland, an open-source Mac notch app that tracks Claude Code and Codex sessions, their limits, music and calls.
LiteLLM 1.107.0 ran a credential stealer at every Python start. How the attack worked, how to check hosts safely, and what to rotate.
eMudhra's CA keys were numbers below 256. Why that breaks P-384, what the emSign ECC G3 distrust breaks, and how to replace affected certificates.
DeepSeek open-sourced DeepInfer, the engine behind V4.1 Flash: what it includes, what it leaves out, the hardware it needs and how to run it.
PHP2Shell is two pre-auth RCE bugs in PHP itself. Which versions fix them, which servers are most exposed, and what to set if you cannot update today.