Blog
Where I work things out in public. Software, AI, and the occasional rant.
8 min read
The Claude Code Config That Changed How I Work
Running Claude Code out of the box is leaving a lot on the table. Here's the exact setup I use: Opus 4.7, extended thinking, 1M context, and a hook that makes every prompt leaner before it hits the model.
9 min read
A Single git push Was All It Took: CVE-2026-3854
Any authenticated user with push access to any repo on your GitHub Enterprise Server could RCE the server with one crafted push option. Here's exactly how.
9 min read
Copy Fail: Nine Years in the Kernel, Zero Traces on Disk
CVE-2026-31431 lets any local user gain root with 732 bytes of Python. The on-disk file never changes. That's not a detail. That's the whole lesson.
8 min read
GitHub Got Owned by a Semicolon
CVE-2026-3854 let any authenticated user pop GitHub's backend with a single git push. The bug class is older than I am. So why does it keep working?
