php2shell: the PHP flaw that bypasses your WordPress, and how to know you’re safe
php2shell: two critical PHP flaws allow code execution with no password. Fixed versions and how to check your VPS, Docker containers or…
He didn’t type “admin” into a login: what really happened with the 16-year-old and Microsoft
A 16-year-old researcher got admin access to an internal Microsoft service with an unsigned token. What really happened, what the headlines got…
What AI to use when your Claude quota runs out: I tested 13, and my pick costs half a cent
I tested 13 models with hidden tests to cover the days without Claude quota. Six returned wrong dates without warning; my pick…
Jev picks the Claude Code model: I measured it before recommending it
A hook that asks TypeSafe's Jev which model each Claude Code subagent deserves. I tested it with over 150 decisions, a cost…
From a HEIC photo to OpenAI’s internal code: what the case teaches anyone who runs servers
A photo uploaded to OpenAI's forum ended up as a pull request in its internal repository. What happened, what we don't know,…
Device code phishing: the email your MFA does not stop
The same phishing email, two verdicts: one quarantined, one delivered. Why MFA does not protect against device code phishing, and which control…
UniFi Access won’t install: the mariadb-common 404 that firmware updates can’t fix
UniFi Access fails with a mariadb-common 404 and retries in a loop. Why apt-get update and firmware updates don't fix it, and…
Self-hosted Passbolt: the complete install, step by step
I installed Passbolt, broke it on purpose and rebuilt it clean. Every command and every terminal output here was actually run: the…
Transactional email: the one thing I do not recommend self-hosting
Why a self-hosted mail server does not deliver, and how to connect SMTP2GO free of charge with click tracking switched off. All…
Coldcard: the safe that manufactured predictable keys
How an entropy bug sat hidden for five years inside one of Bitcoin’s most respected hardware wallets, and let attackers steal funds…
I Rebuilt My Blog With an AI: Here Is What Broke
72 commits in four days, a measurably better site, and four things broken, one of them in production. What failed, what saved…
No-Subscription Repositories on Proxmox VE: Clear the Notice and Update
Proxmox VE installs with the enterprise repositories enabled, and those require a paid subscription. The result is that apt update fails the…
Install AdGuard Home with Docker: Secure DNS and Ad Blocking
Step-by-step guide to installing AdGuard Home with Docker Compose. Block ads, trackers and malware across your whole network with secure DNS (DoH/DoT).
AI-Generated Code: The Real Security Cost
What the research says about the security of AI-written code: 2.74 times more security issues, where exactly it fails, and what to…
Your Own 24/7 Personal AI Assistant: Install OpenClaw on Linux
OpenClaw (formerly Clawdbot) is an open source personal AI assistant you run on your own server. It connects to WhatsApp, Telegram, Slack…
Automation in 2026: Bit Flows as a Practical WordPress Option
Disclosure: this article contains affiliate links. If you buy through them I earn a commission, at no extra cost to you. I…
Automate Everything: ActivePieces with Docker and Cloudflare Tunnels
Deploy ActivePieces on your own server with Docker and Cloudflare Tunnels: no open ports, no manual certificates and no per-run billing. Unlimited,…
How to Self-Host DeepSeek AI on Your Own Server: Step-by-Step Guide
Learn how to install and configure the DeepSeek AI model on your own server with this step-by-step guide. DeepSeek is free software…
Private Global Access: Your Internal Services on the Tor Network
Want to reach your internal services without opening ports or buying a domain? The Tor network gives you anonymity and global access.…
Expose Internal Services Without Opening Ports: Cloudflare Tunnel
Exposing your internal services has never been this safe. With Cloudflare Tunnels you can connect your apps to the outside world without…
How to Connect Your Domain to Cloudflare for Free
Connecting your domain to Cloudflare, whether for self-hosted projects or cloud services, improves performance, protects your infrastructure and optimizes content delivery. Learn…
Monitor Everything in Minutes: Install Uptime Kuma with Docker
Worried you won't find out when your systems go down? With Uptime Kuma you can have monitoring running in minutes. Follow this…
How to Install Docker and Docker Compose on Linux Step by Step
Looking for a simple way to install Docker and Docker Compose on your Linux system? You're in the right place. This step-by-step…
How to Install Nginx Proxy Manager in a Docker Container
Learn how to install and configure Nginx Proxy Manager in Docker to manage reverse proxies, SSL certificates and access to multiple applications…