Technical Blog
Thoughts, tutorials, and experiments in modern web development and software engineering.
Prototype Pollution Reloaded: Deep-Diving n8n's Five 9.4-Score RCE Vulnerabilities
A rigorous technical analysis of the May 2026 vulnerabilities in the n8n automation platform. We dissect how JavaScript Prototype Pollution in xml2js chains into Remote Code Execution.
Google Antigravity 2.0: Pure Genius or Just an Expensive Token Burner?
Google just dropped Antigravity 2.0 at I/O. Is it the agent-first savior of software engineering, or a runaway database-wrecking train? Let’s break down the suite.
The 11-Minute Nightmare: Inside the Nx Console VS Code Extension Compromise
A deep-dive analysis of the May 2026 supply chain attack on the Nx Console extension. We reconstruct the 'Orphan Commit' exploit and discuss how threat groups are hunting for developer AI assistant credentials.
The Free Account Backdoor: Inside the Canvas LMS ShinyHunters Breach
A detailed architectural review of the May 2026 security crisis at Instructure's Canvas LMS. We dissect tenant boundary escapes, lateral movement, and incident response transparent disclosures.
The Code-Only Cage Match: Gemini 3.5 Flash vs. Claude vs. GPT-5.5
Forget the corporate hype from Google I/O 2026. Let's do a brutal, side-by-side comparison of Gemini 3.5 Flash, Anthropic Claude, and OpenAI strictly on raw coding intelligence, terminal execution, and syntax tree refactoring.
Nuking Video Backgrounds on Mac: A CLI Guide to Transparent GIFs
Stop fighting with disabled UI buttons and fragile data pipes. Here is the bombproof CLI method to rip backgrounds out of videos and generate high-quality transparent GIFs.