I work directly on live Linux server incidents — from compromised systems and malware infections to high CPU usage, service crashes, and production outages. My focus is fast diagnosis, controlled recovery, and long-term hardening.
Linux
The most maddening thing about regular expressions isn't the syntax — it's that the syntax changes depending on what you run it through. A feature that works in one tool is missing in another, or present but spelled differently. You write a pattern that works perfectly in
Self-Hosting
Most blog engines want a database, a runtime, a package manager, and a list of dependencies longer than the content you're trying to publish. Carlos Fenollosa went the other direction and built bashblog: a complete static blog generator that lives in a single Bash script of roughly a
Linux
A process with a steady workload shouldn't keep growing its resident memory. When it does, the first question isn't "how much RAM is free." It's "where did allocations stop being released." And on Linux that's rarely obvious from
Self-Hosting
The appeal of a tunnel is that it flips the usual exposure model. Instead of poking a hole in your firewall and accepting inbound traffic, the tunnel client opens an outbound connection to a relay, and public requests come back down that pipe. No open ports on the origin, no
System Design
A benchmark number drops, and within a day half your feed is repeating it: engine X demolished engine Y, here's the chart, end of discussion. The number feels objective. It's a measurement, after all. The trouble is that a database benchmark almost never measures the one
DevOps
Here's a question worth sitting with: what happens if you just point a git server at an object storage bucket? Xe Iaso actually built it — a project called objgit, a git server with no local disk, no /usr/bin/git, and no database. The writeup is one of
DevSecOps
In Omdia's 2026 software supply chain security report, 73% of organizations that generate SBOMs say they enable more efficient vulnerability mitigation — yet 86% still find the generation process challenging. That gap between recognized value and operational difficulty is where most teams are stuck. If you build or secure
AI Security
If you've clicked every traffic light, bus, and crosswalk in a blurry image grid, you've taken part in one of the internet's longest-running security experiments. Those clicks were solving CAPTCHAs — tests of whether you're human. As websites grew popular in the
AI Security
When Anthropic abruptly pulled Fable 5 and Mythos 5 offline for every customer worldwide on June 12, the public reason was narrow and procedural: a government directive barring foreign-national access, which the company could only enforce by shutting the models off entirely. The "why now" was thinner
Threat Intel
Another week, another way for a local user to become root on Linux without ever touching the disk. DirtyClone — tracked as CVE-2026-43503, CVSS 8.8 — is the newest member of the DirtyFrag family, and JFrog Security Research published a working exploit walkthrough on June 25, the first public
Threat Intel
There is a fresh local privilege-escalation bug in the Linux kernel, and it has a nasty property: the attack leaves the file on disk completely untouched. Your integrity checks pass, your file hashes match, and a root shell is already open. Tracked as CVE-2026-46331 and nicknamed "
Self-Hosting
OpenClaw is a self-hosted autonomous AI agent — it manages email, schedules events, and runs terminal commands on the host it lives on. That last capability is the whole reason the install needs more care than the average web app. An agent that executes shell commands is, functionally, a remote