Leaving PHP Doesn’t Make You Immune to the Next PHP2Shell
PHP2Shell is one of several recent critical vulnerabilities across different technology stacks. The bigger question is how we prepare for the next one.
Technical notes for the parts that never fit in the docs.
A personal archive of ideas, lessons, and instructions learned while building software.
Selected note
PHP2Shell shows how AI can help researchers find and investigate vulnerabilities, but it isn't an isolated event.
Read the note
Recent notes
Short guides, implementation details, and things worth keeping close.
01
Leaving PHP Doesn’t Make You Immune to the Next PHP2Shell
PHP2Shell is one of several recent critical vulnerabilities across different technology stacks. The bigger question is how we prepare for the next one.
02
How to Set Up Headless OpenClaw with Docker Compose
Run the prebuilt OpenClaw image headlessly using only Docker Compose, managed environment variables, named volumes, and a container console.
03
The Best Headless and Hybrid CMS in 2026 by Tech Stack and Budget
Compare the best headless CMS platforms for ecommerce, enterprise, and open-source projects in 2026 by architecture, hosting, features, and budget.
04
How to Host and Deploy Blazor WebAssembly with Netlify and Azure Pipelines
Build a standalone Blazor WebAssembly app in Azure Pipelines and deploy its static publish output to Netlify with secure CI variables.
05
List of Free Private Docker Registries and Repositories
Compare useful free options for private container images across GitHub, Docker Hub, GitLab, and Google Cloud, with current caveats.
Find a thread
Start with a subject. Use tags to find a specific tool or technology.
