Personal writing & selected work

Ideas & work.A place to share.

A collection of my writing and work, with room for the thinking and decisions along the way.

Recently written.

October 25, 2026
Zeabur's Breach Report and the Credentials Nobody Rotated
Post
Zeabur and 91APP both published investigations in the past two weeks. In both cases, the attacker used keys that should have been replaced already, or that never belonged where they were stored.
October 25, 2026
PHP2Shell This Week: The Patch Wasn't Out Yet, and the Attacks Had Already Started
Post
From an advance notice of the patch to leaked details and a warning from Japan's prime minister, PHP2Shell showed how dangerous the gap between announcement and fix can be. Node.js and Go also shipped updates the same day.
October 25, 2026
Wait a Day Before Installing New Releases: What This Week's Supply Chain Attacks Have in Common
Post
The malicious LiteLLM release stayed on PyPI for 1 hour 44 minutes; pnpm and GitHub both default to a one-day cooldown for new versions, and this is why

Projects are being prepared and will appear on the Works page.

AI-generated editorial image, not a photograph of my workspace or work.