Writing
Notes from the workshop.
What I'm learning while building: Go, self-hosting, identity, and the quiet craft of shipping software that lasts. Take whatever helps.
Node.js
Node2Shell: the Brotli bug reaches beyond Node
The decompression flaw fixed in Node.js on 21 October lives in Google's Brotli library, so Bun, Python, Envoy and Istio are affected too. A public proof of concept exists. Here is what to patch.
Node.js
Node.js: ten fixes in one day
Node.js shipped ten security fixes on 21 October, four rated high. What they cover, what they could mean for your servers, and the update to make.
Stuck on something I've written about? Tell me where it hurts.