Notes from systems, machines, and everything between.
I write about vulnerabilities, infrastructure, software, motorcycles, and the things that become more interesting when examined closely. The subject can change. Curiosity, evidence, and useful detail stay constant.
Latest writing
Technology, machines, observations
Why I build Mattermost Team Edition for 1,000 users.
The v11 free offering changed, but the operational need did not. Here is why I maintain latest-ESR builds for the community and for my own 500-plus-user server.
The 2026 Continental GT 650 changes just enough to matter.
A close look at the new equipment, the much more practical Rocker Red, India pricing, and the mechanical package Royal Enfield wisely left alone.
CVE-2026-53359: JanuScape and the KVM boundary
How nested virtualization reaches a KVM x86 shadow MMU use after free, why both Intel and AMD hosts are exposed, and what operators should patch or disable.
One inference pool. Three accelerator vendors. Twenty accelerators.
My field notes from building and benchmarking one sovereign inference service across NVIDIA H100 NVL, AMD MI325X, and Intel Gaudi 3 hardware.
Caddy 2.11 changed the Host header for HTTPS upstreams.
Why the safer reverse proxy default can break redirects, virtual hosts, and WebSockets, plus the compatibility fix and the checks to make before using it.
CVE-2026-42533, CVE-2026-56434, and CVE-2026-60005
Three nginx memory safety flaws across map processing, SSI proxying, and HTTP slicing. The analysis covers exposure conditions, CVSS v3.1 and v4.0, and a corrected patch path.
Technical articles stay close to primary sources. Product pieces separate confirmed changes from opinion, disclose when they are not road tests, and use market-specific pricing with the proper context.