The Curious Engineer

All blogs / Security

SudoSecurity

sudosecurity.org

SudoSecurity is a developer blog covering programming, databases, security, cloud infrastructure, and AI — technically grounded, no filler.

SecurityLinux / UnixAI / MLPHP

’21’22’23’24’25’26
Posts
186 from 16 Apr 2021 to 31 Oct 2026
Posting
weekly (97 in the last year)
Kind
magazine
Feed
https://sudosecurity.org/rss/

2026 97

  1. Forum Archaeology: Nulled vBulletin, XenForo, and the Missing Footer
  2. Hardening the Box: Minecraft Server Security Below the Game
  3. A Fake GTA 6 ISO Didn’t Install a Game. It Installed a Wiper.
  4. How AI Actually Works in Modern Video Games: FSMs to LLMs
  5. STRIPS: The 1971 Paper That's Still the Ancestor of Every Game AI Planner
  6. Self-Hosted Email in 2026: Mailcow vs Mailu vs Stalwart — Which Mail Server Should You Trust?
  7. Your AI Assistant Doesn't Need to Remember Everything — It Needs to Know What to Forget
  8. Zero-Trust Access for Homelabbers: Teleport vs. Tailscale vs. WireGuard vs. Cloudflare Tunnel
  9. The SSO Tax: Why Self-Hosted Projects Are Gating Login Behind a Paywall
  10. An AI Store Manager Just Recommended Firing a Human Employee
  11. phpBB vs. SMF vs. MyBB: Three Very Different Fates
  12. What Self-Hosters Are Ripping Out of Their Stacks in 2026
  13. The .self TLD Is Real Now: ICANN Application Filed
  14. A Password-Free Path to Root: Inside the macOS Screen Sharing Vulnerability Now Under Attack
  15. MSVC's August Preview Clears 40 Bug Reports and Preps ARM64 for LUTI2
  16. Hacktivism, 2021 to Today: From Steel Mills to Power Grids
  17. Why Minecraft Runs on One Thread, and What Folia Does
  18. Oracle Free Tier ARM Cutoff: What to Do Before Aug 18
  19. Python 3.15: Lazy Imports, Frozendict, and a Faster JIT
  20. PHP API Performance: N+1 Queries, cURL, and Connection Pools
  21. Codeberg Bans Vibe-Coded Projects: What Actually Changed
  22. Twelve Years in the Making: JDK 28 Ships Value Classes Preview
  23. Cloudflare OS: Inside the Open-Source Agent Sandbox
  24. Why Your PHPDoc Blocks Are Recipe Cards Nobody Can Use
  25. PHP OOP Explained Through a Real Kitchen Brigade System
  26. What a 1-Star Kitchen Taught Me About PHP Fundamentals
  27. Claude Opus 5 Force-Deleted a User's Entire File System After a Failed Backup
  28. The Slow Death of vBulletin, and Why It Isn't Over
  29. Januscape: A 16-Year-Old Linux KVM Escape Bug
  30. Minecraft Bedrock Server RCE: CVE-2026-55010
  31. What You Can Self-Host on Oracle Cloud Free Tier (2026)
  32. How to Self-Host a Discord Bot: Building and Running Your Own Bot 24/7
  33. The Complete Self-Hosted AI Stack for 2026
  34. RSA Is Simple. Deploying RSA Correctly Almost Never Is.
  35. Claude Mythos vs. HAWK and AES: What It Found
  36. JDK 27 New Features Explained: What Actually Changes
  37. Self-Host OpenClaw: VPS Setup to Production (2026)
  38. OpenClaw Is Running on Your Machine Right Now. Here's What to Lock Down Before It Eats Your Credentials.
  39. Claude Opus 5 Launches at Half the Price of Fable 5, and Anthropic's Efficiency Claims Have a Track Record Problem
  40. Your npm Install Just Ran Someone Else's Code: Why Dependency Security Has to Start Before CI
  41. Self-Hosting Prometheus and Grafana: Infrastructure Monitoring That Actually Works
  42. Zero Trust Everything: The Complete Guide to Self-Hosting Teleport for Secure Infrastructure Access
  43. Inside TypeScript 7: What a Year-Long Rewrite in Go Actually Bought Developers
  44. TypeScript 7.0 Is Officially Here: What Changed and How to Upgrade
  45. MySQL, PostgreSQL, Redis, and MongoDB End-of-Life Dates in 2026
  46. Microsoft's 2011 Secure Boot Certificates Are Expiring and Most Windows Users Don't Know It
  47. CVE-2026-41940: The cPanel Authentication Bypass That Runs 70 Million Domains and Is Being Weaponized Right Now
  48. A Researcher Just Broke a 15-Bit Elliptic Curve Key on a Quantum Computer. Here's Why That Should Concern You.
  49. Microsoft Bought GitHub for $7.5 Billion and Has Been Slowly Wrecking It Ever Since
  50. Zed 1.0 Is Out — And the Guy Who Built Electron Just Proved It Was a Mistake
  51. CVE-2026-31431 "Copy Fail": How a 9-Year-Old Linux Kernel Bug Gives Any Local User Root in 732 Bytes
  52. RSA in JavaScript Part 2: JWT Signatures, PSS and Hybrid
  53. The Complete Self-Hosted Productivity Stack: Nextcloud, Vaultwarden, Immich, Jellyfin, and Paperless in 2026
  54. Stable Diffusion Local Setup: RTX 3090 vs Apple Silicon
  55. TypeScript 7.0 Beta Is Out — The Compiler Is Now Written in Go and It's 10x Faster
  56. Claude Mythos Found 271 Zero-Days in Firefox 150. This Is What the New World Looks Like.
  57. Google and Cloudflare Set a 2029 PQC Deadline. The Rest of Big Tech Did Not.
  58. One Employee. One OAuth Token. The Vercel Breach Explained
  59. What is OAuth?
  60. Minecraft Server Optimization: The 2026 Guide
  61. Build Your Own AI Coding Assistant With Access to Your Entire Codebase (2026)
  62. Bukkit vs Spigot vs Paper: Minecraft Server Software
  63. CVE-2026-33032: The nginx-ui MCP Vulnerability That Hands Attackers Full Server Control
  64. Linux 7.1 MMC Changes Finally Land After Linus Called the 7.0 Submission "Complete Garbage"
  65. Anthropic's Claude Now Requires Government ID and a Selfie — Users Are Furious
  66. AI Agents Are Breaking the Internet. The Numbers Are Staggering.
  67. Claude Mythos Hacked Every Major OS, Escaped Its Sandbox, and Emailed a Researcher Eating a Sandwich. We Need to Talk.
  68. Anthropic Just Wrote Apache a $1.5M Check. Here's Why That Number Is Both Impressive and Embarrassing
  69. Run a Local LLM on Your PC: The 2026 Guide
  70. CVE-2025-62718: Critical Axios SSRF Vulnerability Explained
  71. OpenClaw: The Lobster That Broke the Internet, Burned Through Every LLM's Compute Budget, and Started a War Between Anthropic and OpenAI
  72. AI Agents Are Breaking the Internet — And Nobody's Ready for the Bill
  73. Python's frozendict Is Finally Happening — And It's More Important Than You Think
  74. Implementing RSA, AES-GCM, and a TLS 1.3 Handshake from Scratch in Python
  75. Markdown Is a Programming Language. Fight Me.
  76. r/programming Just Banned LLM Discussions. I Understand Why. I Still Disagree with it.
  77. PEP 816: Python Finally Gets Serious About WebAssembly
  78. Anthropic Accidentally Shipped Claude Code's Entire Source to npm — and the Internet Read Every Line
  79. Linux 7.0 RC6 Is Busier Than It Should Be, and Torvalds Isn't Happy About It
  80. The CPU-ocalypse Is Here, and the AI Industry Walked Right Into It
  81. TypeScript 6.0 Is Out, and It's the End of an Era
  82. Microsoft vs. OpenAI: The $50 Billion Betrayal
  83. Amazon's Mass Layoffs, Kiro AI, and Why Shipping AI-Generated Code to Production Should Terrify You
  84. Bun v1.3.11: Cron Jobs, ANSI Slicing, Markdown Rendering, and What Changed Under the Hood
  85. Build Your Own Stack-Based Bytecode Virtual Machine in C
  86. ChatGPT Is Building Its Own Code Repository — And I Have a Lot of Thoughts
  87. How to Use AI Coding Tools to Speed Up Development (Without Losing Your Mind or Your Skills)
  88. The Complete History of OpenAI and ChatGPT: From a Nonprofit Dream to a $730 Billion Corporate Machine
  89. How to Debug Minecraft Server Lag with Spark Profiler (2026 Guide)
  90. What is an Infostealer?
  91. MariaDB vs MySQL: What Developers Need to Know in 2026
  92. C# 14 New Features: What Actually Changed and Why It Matters
  93. Minecraft Server Java Version: 21, 25 or 26?
  94. Java 26 Is Here, And It's Finally Finishing What It Started
  95. Your HTTPS Is Toast (But Google Has a Plan): Merkle Tree Certificates and the Post-Quantum Web
  96. How AI Is Driving Up VPS and Hosting Costs in 2026
  97. Why Stack Overflow Is Dying and What Replaced It

2025 45

  1. What is SSRF? Server-Side Request Forgery and the Attack That Breached Capital One
  2. What is Supply Chain Security? Dependencies, SBOMs, and the Attack That Hit 2.6 Billion npm Downloads
  3. What is Privilege Escalation? How Attackers Go From Foothold to Full Control
  4. What is Social Engineering? The Attacks That Bypass Every Technical Control
  5. What is Penetration Testing? The Discipline of Breaking Things Before Attackers Do
  6. What is Cross-Site Scripting (XSS)? The Attack That Turns Your Website Against Your Users
  7. What is SQL Injection? The Attack That's Been Destroying Databases Since 1998
  8. What is a Web Server? Apache, Nginx, and How the Internet Delivers Web Pages
  9. What is Encryption? The Math That Keeps Your Data Private
  10. What is Cybersecurity? The Field That Keeps the Internet From Collapsing
  11. What is Infrastructure as a Service? The Layer That Makes Everything Else Possible
  12. The Hidden Language of Data: How Data Science Is Changing Our World
  13. What is Platform as a Service? The Sweet Spot Between "Too Easy" and "Too Much Work"
  14. What is Software as a Service? Why Paying Someone Else to Deal With Servers Makes Sense
  15. What is Go? Google's Language That Won the Cloud
  16. What is Go? The Language Google Built for Production Engineering
  17. RSA Digital Signatures in Python: Forgery and PSS
  18. What is Rust? The Language That Makes Systems Programming Safe
  19. What is Git? The Version Control System Every Developer Uses
  20. What is Kubernetes? Container Orchestration at Scale
  21. What is Docker? Containers, Images, and Why Every Developer Needs to Know This
  22. What is Redis? The In-Memory Database I Used for Years Before I Understood It
  23. Writing Your Own API From Scratch in TypeScript
  24. What is an API? The Contract That Makes Software Work Together
  25. What is MySQL? The Database That Powers Most of the Web
  26. What is a Database? The Foundation Every Application Is Built On
  27. What is WebAssembly? The Binary Format Eating the Web (and Leaving the Browser)
  28. What is Data Science? The Field That Turned Raw Data Into Billion-Dollar Decisions
  29. What is Java? The Language That Runs Minecraft, Your Bank, and Half the Internet
  30. What is Flask? The Python Micro-Framework That Gets Out of Your Way
  31. What is Django? The Python Framework That Runs Instagram
  32. What is Python? Enterprise, Data Science, and the Backend of the Web
  33. Building a Modern App With React, Vite, and Tailwind CSS: The Complete 2025 Guide
  34. What is Tailwind CSS? The Utility-First CSS Framework Developers Either Love or Hate
  35. What is Vite? The Build Tool That Made Frontend Development Fast Again
  36. JavaScript Event Loop Explained: Call Stack, Task Queue & Microtasks
  37. What is React? The JavaScript Library That Changed Frontend Development
  38. Deep Dive! Using Deno and Bun in Production Environments
  39. Node.js vs Deno vs Bun: Picking the Right JavaScript Runtime in 2026
  40. What is Bun? The JavaScript Runtime That Made npm Install Fast
  41. What is Deno? Ryan Dahl's Second Attempt at a JavaScript Runtime
  42. What is Node.JS? Using JavaScript without the Browser
  43. JavaScript vs TypeScript: Which One Should You Actually Use?
  44. What is TypeScript? Why I Finally Stopped Fighting the Type System
  45. What is JavaScript? From Browser Scripts to Full-Stack Development

2024 1

  1. Java 22: The Big Update for Minecraft & Enterprise

2023 12

  1. Understanding Why PassKeys will Replace Passwords
  2. Parallelizing Java Streams with Virtual Threads: Building vtstream
  3. Node.js Garbage Collection Tracing: 4 Methods
  4. RSA in JavaScript: BigInt, Web Crypto and Why Number Fails
  5. Python's async/await: How It Actually Works and Why You Need It
  6. Async Timeouts with CompletableFuture: Fixing Blocking Java Code the Right Way
  7. Lets Build a Web Scraper in PHP and Python
  8. Implementing Your Own Garbage Collector in Java: Memory Allocation, Reference Tracking, and GC Algorithms
  9. Java Cryptography: The Defaults That Will Hurt You
  10. JVM Memory: Your Container Probably Isn't Using G1
  11. Rust Memory Safety: The Unsafe Code Under the Guarantee
  12. Building a Discord Bot in Node, TypeScript, and Eris

2022 3

  1. Hacktivism: Social Justice by Data Leaks and Defacements
  2. RSA Part 3: Timing Attacks, Blinding and Constant Time
  3. The PHP Community and Development Sucks

2021 8

  1. A Small Introduction to RSA Encryption & the Mathematics
  2. Simple Guide to Setting Up an NGINX Reserve Proxy
  3. PHP MVC From Scratch: Routing, DI, and PDO Done Right
  4. Installing LetsEncrypt's CertBot on Ubuntu 20.04+
  5. Installing the NGINX Web Server on Debian & Ubuntu
  6. RSA in Python Part 2: Prime Generation and Encryption
  7. RSA in Python From Scratch: Math, Keys and Real Code
  8. Production REST API With Node.js and Express

Undated 20

  1. Vaultwarden self hosted password manager complete guide 2026
  2. Self hosted ai agent stack n8n flowise qdrant langfuse docker 2026
  3. From wordpress to ghost
  4. Self hosted email server mailcow setup guide 2026
  5. Monthly roundup april 2026
  6. How authentication actually works
  7. Unhackable and bug free coding is a marketing lie
  8. Anthropics mission statement is doing a lot of work lately
  9. Ghost in the shell predicted prompt injection
  10. Quick nginx reference
  11. Introduction to the bsd world
  12. Package source pkgsrc an introduction
  13. Getting started with embedded c
  14. Intuitive method of finding the inverse of a matrix
  15. Bitcoin transaction in go
  16. Java threaded streams
  17. Understanding linux true and false commands
  18. Enums in python
  19. Bluehammer the unpatched windows zero day that weaponizes microsoft defender against your own system
  20. Europol operation poweroff ddos for hire 75000 users 2026