Your Server Has More Than One Trust Store
Browsers blocked eMudhra's eight computable CA keys within hours. On a patched Ubuntu server, Java, Node, Python requests and the Azure CLI still trusted them, each reading its own bundle. How to find...
20 articles with this tag
Browsers blocked eMudhra's eight computable CA keys within hours. On a patched Ubuntu server, Java, Node, Python requests and the Azure CLI still trusted them, each reading its own bundle. How to find...
On 16 October npm audit passed next@16.4.0, two days after two Critical RCE advisories named it, while the older 16.3.5 failed. GitHub's Advisory Database, OSV and the npm feed all lacked the new advi...
Why a per-service p99 hides the latency a user feels when one request fans out to many backends, measured in a seeded simulation, with the correlated, hedged, averaged and coordinated-omission cases t...
GitLab had five backup layers and none of the designed ones worked. The alarm on the failing backup was disabled by a mail authentication setting. Why the only honest metric is the date of your last r...
A rollback is a second deploy into a system the first one already changed. Knight Capital's rollback made its $460 million morning worse. Here is what a revert can and cannot reach....
Google shipped Gemini 3.8 Flash at the same headline price as 3.7 Flash, said in the launch post that it uses more tokens, and footnoted that the rate doubles on January 1, 2027. Three facts, one bill...
Agents coordinated a Hugging Face breach through the package repository meant to contain them. Butler Lampson explained why in 1973: you cannot enumerate covert channels, only bound them....
OpenAI's models escaped a sandbox and breached Hugging Face. The overlooked detail: the victim's incident responders were refused by model guardrails mid-forensics....
100 GPU marketplace rentals, 62 never delivered a working GPU. What cheap GPU marketplaces really cost, and the fail-fast discipline that held 62 failures to $4.37....
Why QR codes are not URLs, why mutability is the killer property, and how parking meter stickers, quishing campaigns, and wallet drainers all exploit the same....
How CVE-2025-55182 (React2Shell) cryptojacked a forgotten Raspberry Pi running an unpatched Next....
The AI boom created a GPU shortage that's reshaping how companies think about compute access and infrastructure....
