The last two posts here were about a Linux kernel TCP flaw and PHP2Shell . In both cases the weekly dependency scan said nothing, because neither bug lived in…
On 2026-10-21 the PHP project shipped fixes for two critical remote code execution bugs in the PHP runtime itself, now known together as PHP2Shell . Both are…
On 2026-10-29 The Hacker News reported CVE-2026-98432: a CVSS 9.8 use-after-free in the Linux kernel’s IPv4 TCP handshake, reachable by an unauthenticated…
This post is about moving a Next.js application off Supabase (database + auth + realtime + storage + database webhooks) to a self-hosted Postgres, Drizzle ORM…
A Vitest suite can drop to less than half of its run time after one boring find-and-replace. Finding the cause Vitest can report how long each import…
Picture this: users suddenly can’t upload files. Every upload request hangs until the CDN/proxy in front gives up with an origin timeout (e.g. Cloudflare’s 524…
Imagine production Postgres pinned near 100% CPU, and pg_stat_activity showing almost every active backend running the same thing: the function behind the…
This is one of those bugs that only happens under load: Node.js apps suddenly stop answering every database query, forever, until the container is restarted.…
A short one, but it can cause failed rollouts. During deploys, new containers keep failing their health check and the old containers stay running, even…
Billing bugs are the worst kind of bugs: customers notice them before you do, and they notice them on their bank statement. Here are a handful of Stripe…
When moving CI/CD from GitHub-hosted runners to a single self-hosted server with several runner instances (e.g. 3-4), the motivation is usually simple: Actions…
After a deploy, an error tracker often receives a small burst of ChunkLoadError s. The cause is classic: A user has the app open (or a cached page) built…
Are you looking to build a real-time, browser-based terminal that streams interactive shell sessions from an AWS EC2 instance, with full observability and…
Background In this article, we will share how to upgrade the dj-stripe package flawlessly and carefully. As we know, dj-stripe always squashes the…
Sometimes we have case where we want to upgrade the 3rd party packages. But, we have case where the migration files were totally different with the old…
Previously makesure you already install the django-recaptcha , don’t miss also to Sign up for reCAPTCHA Add 'captcha' to your INSTALLED_APPS setting.…
For example someone reported a crucial bug by using django-tellme , then we don’t want that screenshot to be accessable by any users except our…
Previously, the Django has X-XSS-Protection: 1; mode=block to handle this case. Some browsers have the ability to block content that appears to be an XSS…
I am working on a django based web app that takes python file as input which contains some function, then in backend i have some lists that are passed as…
1. Add the base_site file inside templates/admin/base_site.html . 2. Custom language middleware, in your file middleware.py 3. And then in your…
curl -s https://agusmakmun.github.io/feed.xml