Xe Iaso's blog

In the hours following the release of CVE-2026-93479 for the project NGINX, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix a heap buffer overflow in worker script evaluation triggered

In the hours following the release of CVE-2026-109618 for the project PHP, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix multiple memory safety vulnerabilities that allow attackers…

In the hours following the release of CVE-2026-107891 for the project musl, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix multiple integer overflows in regcomp() when compiling untr…

In the hours following the release of CVE-2026-111497 for the project Brotli, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix an out-of-bounds write in the Brotli decoder that permits…

In the hours following the release of CVE-2026-111813 for Apache Traffic Server, site reliability workers and systems administrators scrambled to patch systems running its experimental magick plugin.

In the hours following the release of CVE-2026-94300 for the project BIND 9 named, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix memory corruption in named triggered by replaying ca…

In the hours following the release of CVE-2026-92392 for the project curl, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix a use-after-free in HTTP/2 upload retries where cleanup turns

This is a long-form written guide for the fight AAC Heavyweight M1 (Savage) in the game Final Fantasy 14, where the challenger and their seven friends fight the Elezen succubus Vamp Fatale.

Lately I've been playing classic World of Warcraft to get a feel for it and see if I like it before I try and go head-first into WoW Forever fairly blind with some friends.

It sure seems that a bunch of companies are trying to ship a git product of some kind as of late.

The power of science is staggering!

After a year of work, hundreds of commits, 5 generations of pull requests, dozens of tests, rewriting part of Anubis in Rust, the first compiler bug of my career, and at least three times making my tower run out of ram I think I have finally done it.

One of the hardest problems in distributed systems is conflict resolution, or the same basic problem as merge conflicts in Git.

In the hours following the release of CVE-2026-41992 for the project GNU gzip, site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix decompressing two files in the same invocation of gzip (…

Someone on the VS Code team decided to do a redesign of the product.

Today I woke up and saw a brand new VS Code error when I remoted into my coding box: A VS Code error saying that the remote SSH extension can't use the API terminalRemoteResolver and that I have to start VS Code with some weird command line flag or someth…

One of the most annoying parts of writing web applications is that in general: you can't trust browsers.

While I was developing tooling for my job this weekend, I found a few blogposts that I don't remember writing: Advice for staying in the hospital for a week The Unbound Scepter Using Clankers to Help Me Process Surgery Checking the date range, they coinci…

Tigris has a pretty advanced replication scheme for writes.

Anubis v1.27.0 (Moenbryda Wilfsunnwyn) is now available via Docker and direct download from GitHub releases.

SigV4 looks simple: sign a request, check the signature.