Posts

A 2026 iOS jailbreak defense needs threat modeling, layered signals, server enforcement, and bypass testing—not another Cydia path check.

How a Go security skill became an OWASP LLM review skill, then an iOS mobile security skill, by keeping the review method and adapting the risks to the product.

A practical starting setup for building production apps with coding agents across different stacks, issue trackers, and model families.

After an upgrade to Moodle 5.3, pages on the Classic theme lost their layout. The theme's SCSS failed to compile, Moodle sent a 200 with zero bytes of CSS, and the error only showed at developer debug level.

A polling test helper failed with "ContinuousClock.now < deadline" only when its target ran in parallel. Snapshot suites held the main actor, so the wait got 3 to 5 turns in 5 seconds. A 60-second timeout would have hidden it. A turn budget fixed it, and a mutation showed that a real hang still fails within 5 seconds.

A transfer began while a PBS packer was still publishing archives. Waiting, repeating rsync, and checking destination hashes recovered the release.

systemd in one container failed with "Too many open files", and Docker in another with "unable to create session key: disk quota exceeded". Neither was about files or disks: all the containers were spending the same per-user kernel quotas on the host.

Filtering completed tasks before slicing a pending list changes worker ownership. Partition PBS array work by immutable IDs before skipping completed tasks.

A coding agent in VS Code got "No route to host" for every host on the subnet except the router, and blamed the Wi-Fi. macOS was blocking VS Code, which lacked the Local Network permission that Terminal gets automatically.

A systemd-run rollback brought a remote Debian host back, and systemd killed the dhclient it had started. The DHCP lease ran out exactly a day later.