Field notes on building things that don't fall over.

• Apr 20, 2026

  I Got Hacked: Inside a Discord Social Engineering Campaign Built Around a Fake Minecraft Launcher

  A Discord friend request turned into a targeted social engineering attempt, a malicious Electron launcher, stolen Turkish accounts, and an attacker who made critical opsec mistakes. This is the full incident timeline and what defenders should learn from it.

  security-research social-engineering malware-analysis discord incident-report
  17 min read 688 reads Beginner
• Apr 10, 2026

  Reverse Engineering a Gaming Mouse: Building driver for the Wraith W1 from Scratch

  I made driver for Wraith W1. But better.

  reverse-engineering hid webhid usb macos swift vue rust docker ci-cd
  27 min read 76 reads Advanced
• Apr 7, 2026

  Incident Report: Chrome Zero-Day CVE-2026-2441 — CSS Use-After-Free Exploited in the Wild

  Incident report on Chrome CVE-2026-2441: a use-after-free in the CSS engine actively exploited in the wild. Immediate patching steps, CISA KEV deadline, and technical analysis.

  incident-report browser-security chrome zero-day cve
  10 min read 53 reads Intermediate
• Mar 31, 2026

  Incident Report: Axios npm Supply Chain Attack — Immediate Actions & Full Analysis

  Incident report on the axios npm supply chain attack — immediate containment steps, IOCs, payload analysis, and prevention guidance for the March 2026 compromise.

  incident-report supply-chain-security npm security-research javascript
  11 min read 76 reads Intermediate
• Mar 18, 2026

  RAG Pipelines Explained: Building AI That Knows Your Data

  Retrieval-Augmented Generation solves the hallucination problem by grounding LLMs in your actual data. Learn the full pipeline — from chunking and embeddings to vector search and generation.

  rag ai llm vector-database embeddings machine-learning
  10 min read 44 reads Intermediate
• Mar 18, 2026

  Supply Chain Attacks in Open Source: What npm audit Can't Tell You

  From event-stream to colors.js — real-world supply chain attacks that compromised millions of developers. Learn the attack vectors automated tools miss and how to actually defend your dependencies.

  supply-chain security npm open-source dependency-management
  10 min read 50 reads Advanced
• Mar 18, 2026

  The Story of UTF-8: How Ken Thompson Saved the Internet from Character Encoding Hell

  The encoding that powers the modern web was designed on a placemat in a New Jersey diner. Here is the story of how UTF-8 solved the character encoding chaos that threatened to fragment the internet.

  utf-8 unicode character-encoding internet-history standards
  12 min read 51 reads Intermediate
• Mar 17, 2026

  Solving the MongoDB AVX Support Problem: A Complete Guide

  MongoDB 5.0+ requires AVX CPU instructions, causing crashes or silent failures on older hardware and virtual machines. This guide covers every workaround — from pre-built Docker images and version downgrades to building from source and enabling AVX in hypervisors.

  mongodb avx mongodb-without-avx wiredtiger
  9 min read 55 reads Advanced
• Mar 3, 2026

  How a Broken Voice Chat Made Me a Riot Games–Recognized Developer

  When Valorant voice chat started sounding robotic for Superonline users across Istanbul, I joined a community investigation that uncovered ISP-level routing failures. After months of being ignored, I built a WireGuard VPN workaround, published it on GitHub, and ended up becoming a Riot Games–recognized developer.

  valorant networking wireguard vpn isp superonline riot-games troubleshooting community
  13 min read 174 reads Advanced
• Feb 23, 2026

  The Mouse That Almost Wasn't: Doug Engelbart's "Mother of All Demos"

  On December 9, 1968, Doug Engelbart demonstrated the computer mouse, hypertext, video conferencing, and the graphical user interface—technologies that wouldn't become mainstream for another 20 years. It was the most important tech demo in history, and almost nobody noticed.

  computer-history doug-engelbart innovation hid
  16 min read 22 reads Beginner
• Feb 16, 2026

  How DNS Saved the Internet: The Phonebook Nobody Thinks About

  In 1983, the internet was drowning in a text file. Every computer on the network needed a master list of every other computer's address—and that list was growing too fast to manage. The solution? A distributed phonebook system that runs billions of lookups per second and powers every click you make online.

  internet-history dns networking computer-history internet-infrastructure protocols
  16 min read 20 reads Beginner
• Feb 11, 2026

  ARPANET's First Message: "LO" and the Crash That Started the Internet

  On October 29, 1969, a student at UCLA tried to type "LOGIN" to a computer 350 miles away. He got two letters in before the system crashed. Those two letters—"LO"—became the first message ever sent over the network that would become the internet.

  internet-history arpanet networking vintage-computing computer-history internet-origins
  10 min read 21 reads Beginner
• Jan 28, 2026

  The Birth of sudo: How Two Programmers Solved Unix's Biggest Security Headache

  Discover how two programmers at SUNY/Buffalo in 1980 solved Unix's most dangerous problem: administrators forgetting they were logged in as root. Learn the true story behind sudo, the command that revolutionized system administration and spawned a thousand memes.

  unix-history system-administration security vintage-computing command-line
  9 min read 37 reads Beginner
• Jan 27, 2026

  Dawn of Computing: Vacuum Tubes, Programming, and the First Bug

  Explore the fascinating world of vacuum tube computers, discover how programmers rewired entire machines to run calculations, and learn the true story behind the famous moth that gave us the word "bug."

  vacuum-tubes computer-history programming-legacy vintage-computing retro-tech coding-archives
  5 min read 24 reads Beginner
• Jan 21, 2026

  Don't Trust the Client: Bypassing OpenAI's Device Code Authentication with Chrome DevTools

  How I bypassed ChatGPT's Device Code Authentication policy with Chrome DevTools by removing a single HTML attribute—a critical reminder that client-side validation is for UX, server-side validation is for security.

  security-research web-security responsible-disclosure openai chatgpt
  6 min read 89 reads Intermediate
• Jan 20, 2026

  Welcome to Ğ Blog

  An introduction to this dark-themed developer blog with stunning design

  announcement welcome meta
  1 min read 35 reads Beginner

¶ No essays under this topic — yet.