Howya.
I’m Kev. A software + DevOps engineer, traveler, Bitcoiner, and builder of fast, secure, low-maintenance things.
This site is an unapologetic home for my passions: projects, writing, adventures and whatever else fits.
A missing loop decrement in glibc's getanswer_ptr lets a malicious DNS server slip a forged PTR record into the additional section. glibc accepts it as the real answer. Affects every Linux system since glibc 2.37.
I found a structured data bug on my site that passed every validator. The property existed in schema.org, the JSON was valid, but it was on the wrong type. Nothing caught it. So I built a CLI that does.
I found my first CVE. A signed integer overflow in bcrypt-ruby's Java backend causes cost=31 to skip all 2 billion key-strengthening rounds. The hash looks valid but protects nothing.