The Curious Engineer

All blogs / Security

SudoSecurity

sudosecurity.org

SudoSecurity is a developer blog covering programming, databases, security, cloud infrastructure, and AI — technically grounded, no filler.

SecurityLinux / UnixAI / MLPHP

’21’22’23’24’25’26
Posts
189 from 16 Apr 2021 to 7 Nov 2026
Posting
weekly (100 in the last year)
Kind
magazine
Feed
https://sudosecurity.org/rss/

2026 100

  1. Self-Hosting Vaultwarden Without Trusting the Defaults
  2. A Certificate Authority's Private Keys Were the Numbers 4, 56 and 66
  3. Forum Archaeology: Nulled vBulletin, XenForo, and the Missing Footer
  4. Hardening the Box: Minecraft Server Security Below the Game
  5. A Fake GTA 6 ISO Didn’t Install a Game. It Installed a Wiper.
  6. How AI Actually Works in Modern Video Games: FSMs to LLMs
  7. STRIPS: The 1971 Paper That's Still the Ancestor of Every Game AI Planner
  8. Self-Hosted Email in 2026: Mailcow vs Mailu vs Stalwart — Which Mail Server Should You Trust?
  9. Your AI Assistant Doesn't Need to Remember Everything — It Needs to Know What to Forget
  10. Zero-Trust Access for Homelabbers: Teleport vs. Tailscale vs. WireGuard vs. Cloudflare Tunnel
  11. The SSO Tax: Why Self-Hosted Projects Are Gating Login Behind a Paywall
  12. An AI Store Manager Just Recommended Firing a Human Employee
  13. phpBB vs. SMF vs. MyBB: Three Very Different Fates
  14. phpBB vs. SMF vs. MyBB: Three Very Different Fates
  15. What Self-Hosters Are Ripping Out of Their Stacks in 2026
  16. The .self TLD Is Real Now: ICANN Application Filed
  17. A Password-Free Path to Root: Inside the macOS Screen Sharing Vulnerability Now Under Attack
  18. MSVC's August Preview Clears 40 Bug Reports and Preps ARM64 for LUTI2
  19. Hacktivism, 2021 to Today: From Steel Mills to Power Grids
  20. Why Minecraft Runs on One Thread, and What Folia Does
  21. Oracle Free Tier ARM Cutoff: What to Do Before Aug 18
  22. Python 3.15: Lazy Imports, Frozendict, and a Faster JIT
  23. PHP API Performance: N+1 Queries, cURL, and Connection Pools
  24. Codeberg Bans Vibe-Coded Projects: What Actually Changed
  25. Twelve Years in the Making: JDK 28 Ships Value Classes Preview
  26. Cloudflare OS: Inside the Open-Source Agent Sandbox
  27. Why Your PHPDoc Blocks Are Recipe Cards Nobody Can Use
  28. PHP OOP Explained Through a Real Kitchen Brigade System
  29. What a 1-Star Kitchen Taught Me About PHP Fundamentals
  30. Claude Opus 5 Force-Deleted a User's Entire File System After a Failed Backup
  31. The Slow Death of vBulletin, and Why It Isn't Over
  32. Januscape: A 16-Year-Old Linux KVM Escape Bug
  33. Minecraft Bedrock Server RCE: CVE-2026-55010
  34. What You Can Self-Host on Oracle Cloud Free Tier (2026)
  35. How to Self-Host a Discord Bot: Building and Running Your Own Bot 24/7
  36. The Complete Self-Hosted AI Stack for 2026
  37. RSA Is Simple. Deploying RSA Correctly Almost Never Is.
  38. Claude Mythos vs. HAWK and AES: What It Found
  39. JDK 27 New Features Explained: What Actually Changes
  40. Self-Host OpenClaw: VPS Setup to Production (2026)
  41. OpenClaw Is Running on Your Machine Right Now. Here's What to Lock Down Before It Eats Your Credentials.
  42. Claude Opus 5 Launches at Half the Price of Fable 5, and Anthropic's Efficiency Claims Have a Track Record Problem
  43. Your npm Install Just Ran Someone Else's Code: Why Dependency Security Has to Start Before CI
  44. Self-Hosting Prometheus and Grafana: Infrastructure Monitoring That Actually Works
  45. Zero Trust Everything: The Complete Guide to Self-Hosting Teleport for Secure Infrastructure Access
  46. Inside TypeScript 7: What a Year-Long Rewrite in Go Actually Bought Developers
  47. TypeScript 7.0 Is Officially Here: What Changed and How to Upgrade
  48. MySQL, PostgreSQL, Redis, and MongoDB End-of-Life Dates in 2026
  49. Microsoft's 2011 Secure Boot Certificates Are Expiring and Most Windows Users Don't Know It
  50. CVE-2026-41940: The cPanel Authentication Bypass That Runs 70 Million Domains and Is Being Weaponized Right Now
  51. A Researcher Just Broke a 15-Bit Elliptic Curve Key on a Quantum Computer. Here's Why That Should Concern You.
  52. Microsoft Bought GitHub for $7.5 Billion and Has Been Slowly Wrecking It Ever Since
  53. Zed 1.0 Is Out — And the Guy Who Built Electron Just Proved It Was a Mistake
  54. CVE-2026-31431 "Copy Fail": How a 9-Year-Old Linux Kernel Bug Gives Any Local User Root in 732 Bytes
  55. RSA in JavaScript Part 2: JWT Signatures, PSS and Hybrid
  56. The Complete Self-Hosted Productivity Stack: Nextcloud, Vaultwarden, Immich, Jellyfin, and Paperless in 2026
  57. Stable Diffusion Local Setup: RTX 3090 vs Apple Silicon
  58. TypeScript 7.0 Beta Is Out — The Compiler Is Now Written in Go and It's 10x Faster
  59. Claude Mythos Found 271 Zero-Days in Firefox 150. This Is What the New World Looks Like.
  60. Google and Cloudflare Set a 2029 PQC Deadline. The Rest of Big Tech Did Not.
  61. One Employee. One OAuth Token. The Vercel Breach Explained
  62. What is OAuth?
  63. Minecraft Server Optimization: The 2026 Guide
  64. Build Your Own AI Coding Assistant With Access to Your Entire Codebase (2026)
  65. Bukkit vs Spigot vs Paper: Minecraft Server Software
  66. CVE-2026-33032: The nginx-ui MCP Vulnerability That Hands Attackers Full Server Control
  67. Linux 7.1 MMC Changes Finally Land After Linus Called the 7.0 Submission "Complete Garbage"
  68. Anthropic's Claude Now Requires Government ID and a Selfie — Users Are Furious
  69. AI Agents Are Breaking the Internet. The Numbers Are Staggering.
  70. Claude Mythos Hacked Every Major OS, Escaped Its Sandbox, and Emailed a Researcher Eating a Sandwich. We Need to Talk.
  71. Anthropic Just Wrote Apache a $1.5M Check. Here's Why That Number Is Both Impressive and Embarrassing
  72. Run a Local LLM on Your PC: The 2026 Guide
  73. CVE-2025-62718: Critical Axios SSRF Vulnerability Explained
  74. OpenClaw: The Lobster That Broke the Internet, Burned Through Every LLM's Compute Budget, and Started a War Between Anthropic and OpenAI
  75. AI Agents Are Breaking the Internet — And Nobody's Ready for the Bill
  76. Python's frozendict Is Finally Happening — And It's More Important Than You Think
  77. Implementing RSA, AES-GCM, and a TLS 1.3 Handshake from Scratch in Python
  78. Markdown Is a Programming Language. Fight Me.
  79. r/programming Just Banned LLM Discussions. I Understand Why. I Still Disagree with it.
  80. PEP 816: Python Finally Gets Serious About WebAssembly
  81. Anthropic Accidentally Shipped Claude Code's Entire Source to npm — and the Internet Read Every Line
  82. Linux 7.0 RC6 Is Busier Than It Should Be, and Torvalds Isn't Happy About It
  83. The CPU-ocalypse Is Here, and the AI Industry Walked Right Into It
  84. TypeScript 6.0 Is Out, and It's the End of an Era
  85. Microsoft vs. OpenAI: The $50 Billion Betrayal
  86. Amazon's Mass Layoffs, Kiro AI, and Why Shipping AI-Generated Code to Production Should Terrify You
  87. Bun v1.3.11: Cron Jobs, ANSI Slicing, Markdown Rendering, and What Changed Under the Hood
  88. Build Your Own Stack-Based Bytecode Virtual Machine in C
  89. ChatGPT Is Building Its Own Code Repository — And I Have a Lot of Thoughts
  90. How to Use AI Coding Tools to Speed Up Development (Without Losing Your Mind or Your Skills)
  91. The Complete History of OpenAI and ChatGPT: From a Nonprofit Dream to a $730 Billion Corporate Machine
  92. How to Debug Minecraft Server Lag with Spark Profiler (2026 Guide)
  93. What is an Infostealer?
  94. MariaDB vs MySQL: What Developers Need to Know in 2026
  95. C# 14 New Features: What Actually Changed and Why It Matters
  96. Minecraft Server Java Version: 21, 25 or 26?
  97. Java 26 Is Here, And It's Finally Finishing What It Started
  98. Your HTTPS Is Toast (But Google Has a Plan): Merkle Tree Certificates and the Post-Quantum Web
  99. How AI Is Driving Up VPS and Hosting Costs in 2026
  100. Why Stack Overflow Is Dying and What Replaced It

2025 45

  1. What is SSRF? Server-Side Request Forgery and the Attack That Breached Capital One
  2. What is Supply Chain Security? Dependencies, SBOMs, and the Attack That Hit 2.6 Billion npm Downloads
  3. What is Privilege Escalation? How Attackers Go From Foothold to Full Control
  4. What is Social Engineering? The Attacks That Bypass Every Technical Control
  5. What is Penetration Testing? The Discipline of Breaking Things Before Attackers Do
  6. What is Cross-Site Scripting (XSS)? The Attack That Turns Your Website Against Your Users
  7. What is SQL Injection? The Attack That's Been Destroying Databases Since 1998
  8. What is a Web Server? Apache, Nginx, and How the Internet Delivers Web Pages
  9. What is Encryption? The Math That Keeps Your Data Private
  10. What is Cybersecurity? The Field That Keeps the Internet From Collapsing
  11. What is Infrastructure as a Service? The Layer That Makes Everything Else Possible
  12. The Hidden Language of Data: How Data Science Is Changing Our World
  13. What is Platform as a Service? The Sweet Spot Between "Too Easy" and "Too Much Work"
  14. What is Software as a Service? Why Paying Someone Else to Deal With Servers Makes Sense
  15. What is Go? Google's Language That Won the Cloud
  16. What is Go? The Language Google Built for Production Engineering
  17. RSA Digital Signatures in Python: Forgery and PSS
  18. What is Rust? The Language That Makes Systems Programming Safe
  19. What is Git? The Version Control System Every Developer Uses
  20. What is Kubernetes? Container Orchestration at Scale
  21. What is Docker? Containers, Images, and Why Every Developer Needs to Know This
  22. What is Redis? The In-Memory Database I Used for Years Before I Understood It
  23. Writing Your Own API From Scratch in TypeScript
  24. What is an API? The Contract That Makes Software Work Together
  25. What is MySQL? The Database That Powers Most of the Web
  26. What is a Database? The Foundation Every Application Is Built On
  27. What is WebAssembly? The Binary Format Eating the Web (and Leaving the Browser)
  28. What is Data Science? The Field That Turned Raw Data Into Billion-Dollar Decisions
  29. What is Java? The Language That Runs Minecraft, Your Bank, and Half the Internet
  30. What is Flask? The Python Micro-Framework That Gets Out of Your Way
  31. What is Django? The Python Framework That Runs Instagram
  32. What is Python? Enterprise, Data Science, and the Backend of the Web
  33. Building a Modern App With React, Vite, and Tailwind CSS: The Complete 2025 Guide
  34. What is Tailwind CSS? The Utility-First CSS Framework Developers Either Love or Hate
  35. What is Vite? The Build Tool That Made Frontend Development Fast Again
  36. JavaScript Event Loop Explained: Call Stack, Task Queue & Microtasks
  37. What is React? The JavaScript Library That Changed Frontend Development
  38. Deep Dive! Using Deno and Bun in Production Environments
  39. Node.js vs Deno vs Bun: Picking the Right JavaScript Runtime in 2026
  40. What is Bun? The JavaScript Runtime That Made npm Install Fast
  41. What is Deno? Ryan Dahl's Second Attempt at a JavaScript Runtime
  42. What is Node.JS? Using JavaScript without the Browser
  43. JavaScript vs TypeScript: Which One Should You Actually Use?
  44. What is TypeScript? Why I Finally Stopped Fighting the Type System
  45. What is JavaScript? From Browser Scripts to Full-Stack Development

2024 1

  1. Java 22: The Big Update for Minecraft & Enterprise

2023 12

  1. Understanding Why PassKeys will Replace Passwords
  2. Parallelizing Java Streams with Virtual Threads: Building vtstream
  3. Node.js Garbage Collection Tracing: 4 Methods
  4. RSA in JavaScript: BigInt, Web Crypto and Why Number Fails
  5. Python's async/await: How It Actually Works and Why You Need It
  6. Async Timeouts with CompletableFuture: Fixing Blocking Java Code the Right Way
  7. Lets Build a Web Scraper in PHP and Python
  8. Implementing Your Own Garbage Collector in Java: Memory Allocation, Reference Tracking, and GC Algorithms
  9. Java Cryptography: The Defaults That Will Hurt You
  10. JVM Memory: Your Container Probably Isn't Using G1
  11. Rust Memory Safety: The Unsafe Code Under the Guarantee
  12. Building a Discord Bot in Node, TypeScript, and Eris

2022 3

  1. Hacktivism: Social Justice by Data Leaks and Defacements
  2. RSA Part 3: Timing Attacks, Blinding and Constant Time
  3. The PHP Community and Development Sucks

2021 8

  1. A Small Introduction to RSA Encryption & the Mathematics
  2. Simple Guide to Setting Up an NGINX Reserve Proxy
  3. PHP MVC From Scratch: Routing, DI, and PDO Done Right
  4. Installing LetsEncrypt's CertBot on Ubuntu 20.04+
  5. Installing the NGINX Web Server on Debian & Ubuntu
  6. RSA in Python Part 2: Prime Generation and Encryption
  7. RSA in Python From Scratch: Math, Keys and Real Code
  8. Production REST API With Node.js and Express

Undated 20

  1. Vaultwarden self hosted password manager complete guide 2026
  2. Self hosted ai agent stack n8n flowise qdrant langfuse docker 2026
  3. From wordpress to ghost
  4. Self hosted email server mailcow setup guide 2026
  5. Monthly roundup april 2026
  6. How authentication actually works
  7. Unhackable and bug free coding is a marketing lie
  8. Anthropics mission statement is doing a lot of work lately
  9. Ghost in the shell predicted prompt injection
  10. Quick nginx reference
  11. Introduction to the bsd world
  12. Package source pkgsrc an introduction
  13. Getting started with embedded c
  14. Intuitive method of finding the inverse of a matrix
  15. Bitcoin transaction in go
  16. Java threaded streams
  17. Understanding linux true and false commands
  18. Enums in python
  19. Bluehammer the unpatched windows zero day that weaponizes microsoft defender against your own system
  20. Europol operation poweroff ddos for hire 75000 users 2026