Blog

Writing

Security writeups, tool deep-dives, and lessons learned from real-world pentesting and DevSecOps work.

May 8, 2026

The Tiny Colon That Moved a File: My CVE Story

A simple story about CVE-2026-40893, a small ExifTool metadata bypass in Gotenberg where one tiny colon made a security blocklist look the other way.

Apr 28, 2026

Networking

The Internet Is Running on Fumes. Someone Just Proposed IPv8.

And no, they didn't skip IPv6 -- they just think it failed. A deep dive into the IETF Internet-Draft proposing IPv8 and why it might actually succeed where IPv6 didn't.