Writing
Notes from the workshop.
What I'm learning while building: Go, self-hosting, identity, and the quiet craft of shipping software that lasts. Take whatever helps.
PHP
PHP2Shell: the unpatched majority
Four days after PHP2Shell was patched, most internet-facing PHP hosts report a version that never got an official fix. What that means, what the attacks look like, and your options.
PHP
PHP2Shell, explained
A critical remote-code-execution flaw in PHP, a language behind roughly seven in ten websites. What it is, why details leaked a day early, and what to do about it now.
Stuck on something I've written about? Tell me where it hurts.