Threat models, hardening and secure defaults.
25 items
cfsolve claims to solve Cloudflare Turnstile with no headless browser. Reading its source offline shows it replays recordings of a real browser, and what that means for a site owner.
GitHub, npm and Open VSX all skip 2.1.313, yet Cursor says a malicious build with that number was served for 11 hours. What the reports agree on, where they conflict, and a read-only check of one PC.
I modeled the KV-cache page reuse behind Cloudflare's GLM-5.3 leak. A fresh pool leaks nothing, a warm one hands over other customers' pages, and every reply still returns HTTP 200.
Node, .NET, curl and others each carry their own Brotli decoder. I counted the places on one Windows PC and tested which clients decode Brotli they never asked for.
I sent three AI user-agent strings to 66 sites and compared robots.txt with what the server did. Sephora allows them on paper and returns 403. BBC denies them and serves the page.
I graded the REA reverse-engineering tool against four tiny Electron apps with known answers. It got the main process right, missed script written inside HTML, and returned 125k tokens.
claude plugin validate rejects every way I tried to hide a mods API call, and the runtime blocks raw JavaScript escapes. But its output is a capability list, not a verdict.
DEDA decodes the hidden tracking dots laser printers stamp on pages. I generated my own pattern, decoded it, then corrupted one dot and watched the checksum fail while the decoder answered anyway.
Cloudflare launched an OHTTP gateway that hides IPs from app servers. The RFC and Cloudflare both say privacy depends on relay and gateway never sharing an operator, a rule no cryptography enforces.
Git is replacing SHA-1 with SHA-256 for every commit and file it tracks. A GitHub co-founder argues the attacks motivating the switch do not threaten how Git actually works.
Netlify replaced the lightweight sandbox running its edge functions with full virtual machines, and median latency dropped from about 30ms to 5 to 6ms.
Gambit Security recovered the staging server behind a three-agent breach of 27 companies. The same ungated pipeline destroyed its own stolen data — the exact failure mode this blog already mapped.
Docker Sandboxes isolates AI agents in microVMs, not containers. Two bugs patched in the same release both broke it at the one place the guest is allowed to talk back to the host.
Three companies shipped a standalone agent browser. One matched Windows to macOS day one. One took 83 days. One never got there, shut down, and retreated into an extension.
Umami is MIT-licensed, so the identification path is readable. Where, who and when turn out to be a CDN header, a hash that expires on the 1st, and a bucket quantized to the clock hour.
The web's oldest isolation guarantee is a string comparison. Put an agent inside the browser and it becomes a model's ability to resist a prompt injection.
Before reading CVE-2026-98432 you need one picture: what the kernel keeps for a half-open TCP connection, who touches it, and why a retransmitted SYN can race with the final ACK.
Read-copy-update and the grace period in plain language, and the difference between freeing memory now and freeing it after every reader has left, which is the whole CVE-2026-98432 fix.
CVE-2026-98432 put together: the exact race, a timeline from 2015 to the 2026 fix, why the severity scores disagree, which claims I could not verify, and how to check a machine.
Claude Duet is Anthropic's proactive personal agent. This guide explains what it does, how it asks for approval, and how it differs from Meta Muse and OpenAI dots, using the vendors' own pages.
A reference for robots.txt: the syntax, how a crawler picks a group and a rule, what happens when the file fails to load, how to write rules for AI bots, and what it cannot enforce.
How to create a SHA-256 Git repository, move an existing SHA-1 history into one with fast-export, and the exact errors you hit when the two formats meet. Every command was run on Git 2.55.
Tailscale, Gitea, Hermes Agent and Orca headless, wired into one home server on a single mini PC: a private network, a git remote, and two complementary AI coding agents as systemd services.
A hands-on guide to muse-gadget-sdk, Meta's open-source SDK for building personal AI agent hardware: setup, what commands the agent can actually run, and how pairing security works.
How the OAuth 2.0 authorization code grant works end to end: the request/response shapes, PKCE, refresh token rotation, error responses, and where RFC 10017 now says to actually store the tokens.