Notes
What the path looked like up close.
Security Research
Go Knock on That Door for Me: My Blind CVE Story
A quiet story about CVE-2026-23603, a low-severity blind SSRF in Gitea, where a helpful avatar fetcher would knock on any internal door you pointed it at — and, once in a while, bring a picture back.
Security Research
The Name Tag That Said 'Admin': My CVE Story
A small story about CVE-2026-61549, a privilege escalation in Woodpecker CI's Kubernetes backend, where a pipeline could hand its Pod any identity it liked — and nobody checked the name tag.
Security Research
The Tiny Colon That Moved a File: My CVE Story
A simple story about CVE-2026-40893, a small ExifTool metadata bypass in Gotenberg where one tiny colon made a security blocklist look the other way.
Networking
The Internet Is Running on Fumes. Someone Just Proposed IPv8.
And no, they didn't skip IPv6 -- they just think it failed. A deep dive into the IETF Internet-Draft proposing IPv8 and why it might actually succeed where IPv6 didn't.
Nothing here yet under that filter.