Writing
Notes on web infrastructure, hosting, and the tools that keep sites online. Write-ups, breakdowns, and the occasional post-mortem.
Follow on X.
2026
The RubyGems GemStuffer attack shows how AI agents abused yardopts to get RCE on RubyDoc.info and turn gem builds into a supply chain threat.
Explore how AI agents cryptanalysis threatens encryption and why post-quantum algorithms are essential against quantum computing risks.
AWS Pizza Bot self-hosted keeps background AI agents working after you quit the desktop app. Learn how to run it reliably.
Google Business Profile post views show why a UK news site lost 98% visibility after switching to .com. Lessons for recovery.
Learn how LLM API key harvesting targets OpenAI-compatible gateways and how to secure V2Board and New-API endpoints from stolen inference abuse.
Self-host the AWS Pizza Bot to collect background AI agent alerts into one open source inbox. Cut notification noise with deduplication and a simple queue.
Learn AI-generated HTML security using browser identity, origin, and capability boundaries. Secure your untrusted HTML hosting strategy with this guide.
Learn why AI security vulnerabilities prioritization requires human context to be effective, reducing alert fatigue and improving risk management.
Explore the Google Cloud Developer Plugin for AI agents: install it, use it with MCP servers, and streamline your cloud workflows. Try it today.
Learn how to build an AI SEO agent using Semrush MCP and APIs for keyword clustering and content briefs. Streamline your SEO automation workflow.