VibeCode Sessions on locals.tf

A Transaction Is a Point in Time

Sat, 24 Oct 2026 00:00:00 +0300

A Transaction Is a Point in Time
#

The key-value store under the cluster had passed every functional test I had, and it had a bug that no functional test could have found: its transactions were not transactions. They were sequences. A reader who asked for a revision in the middle of one got half of it. This is the design of the repair — including the two places where my mental model of etcd turned out to be simply wrong until I measured it.

The Differential: Fourteen Ways a Key-Value Store Lied to Kubernetes

Sat, 24 Oct 2026 00:00:00 +0300

The Differential: Fourteen Ways a Key-Value Store Lied to Kubernetes
#

Over the last few days I replaced “does the store work?” with “does the store agree with etcd?”, operation by operation. The answer was no in fourteen places. One of them was a single request that aborted the control plane’s datastore. Several were invisible to every test the project had. Two were actively defended by tests that asserted the wrong behaviour. This is the method and the ledger.

A Point Is Not a Prefix: The Life and Times of a Four-Month-Old Bug

Thu, 22 Oct 2026 00:00:00 +0300

A Point Is Not a Prefix: The Life and Times of a Four-Month-Old Bug
#

In the previous post I chased a Kubernetes control plane that was burning a core in one-minute bursts. The proximate cause turned out to be an infinite retry loop, and the loop turned out to be caused by a store returning the wrong object for a lookup. This is the part of that story I had to dig for: which commit introduced the wrong object, why a regression test was written for exactly this and still didn’t catch it, and how a second test ended up asserting the bug as a feature.

The Two-Minute Loop: Hunting a Control Plane That Never Sleeps

Thu, 22 Oct 2026 00:00:00 +0300

The Two-Minute Loop: Hunting a Control Plane That Never Sleeps
#

A single-node Kubernetes control plane was showing up as the busiest process on an otherwise idle machine. The interesting part wasn’t the CPU number — it was that three independent metric families disagreed with each other by three orders of magnitude, the log line that looked like the cause meant the exact opposite of what it appeared to mean, and the reconciler responsible wasn’t even in the repository named on the container image.

The Turing Machine Is Not a CPU: OpenAI's n log n Multiplication on AVX2

Sun, 11 Oct 2026 02:00:00 +0300

The Turing Machine Is Not a CPU: OpenAI’s n log n Multiplication on AVX2
#

The previous post mined the constants out of OpenAI’s “integer multiplication below n log n” proof. But that proof is a statement about a multitape Turing machine. Real machines are out-of-order x64 cores with 256-bit SIMD, port-limited execution units, and a deep cache hierarchy. I took the paper’s primitives, built them on AVX2, and measured what actually survives the translation — and what doesn’t.

Integer Multiplication Below n log n: Mining the Constants, and Why the Real Saving Is Cubic

Sun, 11 Oct 2026 00:00:00 +0300

Integer Multiplication Below `n log n`: Mining the Constants, and Why the Real Saving Is Cubic
#

OpenAI’s October 2026 mathematics release contains a proof that two n-bit integers can be multiplied below n log n on a fixed-tape Turing machine. The proof works, but its constants are so conservative that roughly 2^62 of the improvement is lying on the table for free. Pulling the paper apart, the interesting story is that the final exponent is a product of three coupled slacks, and the one number that actually controls everything — the rank deficit of a finite linear network — is only ~1.5×10⁻¹¹. It gets cubed.

Recovering a Tuya Local Key Without the Cloud (and Reimplementing the App API)

Sat, 03 Oct 2026 00:00:00 +0300

Recovering a Tuya Local Key Without the Cloud (and Reimplementing the App API)
#

Introduction
#

I run most of my smart-home gear locally. A Tuya-based garden watering controller sits on my LAN, exposes the usual 6668/tcp local protocol, and is driven from Home Assistant through the localtuya custom integration. It has been rock solid for months — until one day it wasn’t:

The Centre Held: From a Silent Boot to 9.9 Gbit/s and a Safer Jumbo Path

Sat, 19 Sep 2026 23:59:00 +0300

The Centre Held: From a Silent Boot to 9.9 Gbit/s and a Safer Jumbo Path
#

Things fall apart; the centre cannot hold; Mere anarchy is loosed upon the world, — W. B. Yeats, The Second Coming

Six days ago I published the story of a hand-ported RSS series that built clean and then refused to boot — init_module called, never returned, CPU pinned, five RCU stalls, watchdog reset. I ended it mid-investigation: the hang localised (by a wave of pr_err markers) to a two-line window, a false suspect (the DIM rewrite) ruled out, the next boot ready to name its sentence.

The Center Cannot Hold: Porting RSS to a Router That Hangs at Boot

Sun, 13 Sep 2026 00:00:00 +0300

The Center Cannot Hold: Porting RSS to a Router That Hangs at Boot
#

Things fall apart; the centre cannot hold; Mere anarchy is loosed upon the world, — W. B. Yeats, The Second Coming

This is the story of a single kernel driver, ported by hand onto a stable tree, that builds perfectly and then refuses to boot. Not a compile error, not a link error — a hard hang, forty seconds deep in module loading, with not a single line of driver output before the machine goes catatonic. And the fix wasn’t where I first looked.

Defeating AWS WAF Challenges in Pure Node.js (No Browser)

Mon, 24 Aug 2026 00:00:00 +0300

Defeating AWS WAF Challenges in Pure Node.js (No Browser)
#

Introduction
#

I have a small CLI called goodread that tracks my reading progress on Goodreads: ./goodread set pendulum 81 matches a currently-reading book by title fragment and POSTs a new percentage to one of Goodreads’ private web endpoints, authenticated with a cookie string copied out of my browser. It worked for months.

HA Not Supported: Rebuilding a Bitbucket DC Migration Export from REST Alone

Thu, 20 Aug 2026 20:38:00 +0300

TL;DR
#

The admins on a production Bitbucket Data Center said “HA is not supported, so we can’t run the official migration export.” That refusal was the entire motivation for hans: a tool that reconstructs a valid Bitbucket_export_<jobId>.tar using only read-only REST API access and git mirror clones — no admin privileges — such that GitHub Enterprise Importer (gh bbs2gh migrate-repo --archive-path) accepts it. Correctness wasn’t assumed: every format claim was reverse-engineered from a real admin export of a scripted “golden” repo, then gated four ways. Along the way we hit (and solved) a licensing hellscape, an activity-schema mismatch, a 35-minute git-object unpack, a 100x Rust rewrite, a KeyError: 'commit' crash on a real 10,031-PR repo caused by stacked PRs. Final state: all gates PASS, git SHAs migrated byte-identical, and the tool produced a 30,105-entry archive for a real 10K-PR production repo.

A Clock 4 Minutes Behind: Rolling NTP Time Sync Across the Home LAN

Thu, 20 Aug 2026 20:15:00 +0300

TL;DR
#

A headless Debian box was ~4 minutes behind real time, and nothing on it was syncing — no NTP, no chrony, no systemd-timesyncd. The obvious fix was just to turn one of them on, but that opened a bigger question: with a LAN full of Debian boxes, why not have one accurate box serve time to the rest? I installed chrony on the server (changwang, 10.222.1.22), configured it to serve the 10.222.1.0/24 LAN, then installed chrony as a client on two other machines (precision and odroid at 10.222.1.40), pointing them at changwang and disabling their old systemd-timesyncd. All three now sync from changwang, which itself syncs from the NTP pool. The clock is back to ~1 ms of real time instead of 4 minutes off.

The SSH Reset That Wasn't the ISP: A Router Flowtable Ghost Story

Mon, 17 Aug 2026 21:20:00 +0300

TL;DR
#

Every SSH handshake from a LAN host through my OpenWrt router died the moment the key exchange began — GitHub, GitLab, legacy kex algorithms, even SSH-over-443. Plain TCP to port 22 connected fine and HTTPS worked perfectly. Packet captures initially screamed “ISP deep-packet-inspection is forging RSTs.” Adding MAC-address capture flipped the diagnosis: the killer RST carried the router’s own WAN MAC address, meaning the router generated it itself. The culprit was the vendor’s software nftables flowtable (flow add @f in the forward hook), which offloaded NAT’d SSH flows and then lost their state mid-KEX, causing the kernel to answer GitHub’s final key-exchange packet with an RFC-793 reset — as if nothing was listening on :57700. The router’s own SSH always worked because it never crosses the forward path. Removing the flowtable offload fixed it instantly, 3-for-3.

Roswell, Majestic-12, and the Transistor: A Skeptic Deep Dive into Reverse Engineering Theory

Sun, 16 Aug 2026 15:45:00 +0200

TL;DR
#

If a crashed UFO were genuinely recovered in July 1947 — per the Majestic-12 legend — and reverse-engineered, could its technology explain the transistor’s December 1947 breakthrough? The timeline does overlap. But the transistor has a complete, continuous, and dated documentary lineage that independently explains its timing — and more importantly, the transistor is the wrong kind of technology to trace to a crash. This post walks through the full timeline, the evidence, and the epistemological lessons.

Chasing a Laggy MX Master 3 on a Passively Cooled ODROID-H2

Sun, 16 Aug 2026 15:35:00 +0300

TL;DR
#

My Logitech MX Master 3 felt laggy on a passively cooled ODROID-H2 running KDE Plasma on Wayland. A layer-by-layer diagnosis over SSH ruled out the mouse, the receiver, and the whole USB path; the input stream was rock solid at 125 Hz. The culprits turned out to be transient 2.4 GHz RF interference from a flaky Bluetooth radio (fixed) and compositor latency on a very weak Intel UHD 600 iGPU (mitigated). Then I went shopping for a Noctua fan and found that picking one for this board is an adventure in 5V headers and 1.25mm pitch connectors.

The Progress Request That Never Arrived: Debugging a Ghost in the Kubernetes Watch Pipeline

Mon, 06 Jul 2026 00:00:00 +0300

The Progress Request That Never Arrived
#

How two silent bugs in a Rust etcd-compatible KV store caused thousands of errors per minute in a near-idle k3s cluster — and the 14-hour investigation that found them.

Table of Contents
#

Background: The Idle Cluster That Wasn’t
#

A 30-pod k3s cluster running on Kudurru — a purpose-built etcd v3 gRPC server in Rust — was consuming ~35% of a CPU core on the control-plane node. For context, the previous kine+SQLite stack used 17% of a core, and Kudurru alone uses 0.10%. Something was very wrong.

Optimizing a Rust etcd KV Store: From 61% Overhead to 3% CPU in ~2 Weeks

Thu, 25 Jun 2026 00:00:00 +0300

Optimizing a Rust etcd KV Store: From 61% Overhead to 3% CPU in ~2 Weeks
#

The full journey of replacing the k3s kine+SQLite storage stack with a purpose-built Rust etcd v3 gRPC server and systematically eliminating every category of waste until 83% overhead turned into 97% useful work.

Table of Contents
#

Background: The Problem with kine
#

k3s uses kine as an etcd-to-SQL abstraction layer. By default, kine backs into SQLite — a full ACID SQL database — to store what is fundamentally an append-only key-value log. For a 30-pod cluster writing ~2.4 operations per second (mostly lease heartbeats), this stack consumes 17% of a CPU core on the control-plane node.

Fixing Kubelet Eviction Log Spam on ZFS: A Better Patch for containerfs.inodesFree

Wed, 10 Jun 2026 00:00:00 +0300

Fixing Kubelet Eviction Log Spam on ZFS: A Better Patch for containerfs.inodesFree
#

Diagnosing a kubelet eviction manager that logs “no observation found for eviction signal containerfs.inodesFree” every 10 seconds on ZFS-backed container filesystems, finding upstream PRs that don’t fully solve it, designing a better two-part patch, and applying it to a live K3s cluster — cutting CPU from 35% to 11%.

Optimizing a Java SIMD IPv6 Parser: From 7 M/s to 118 M/s in 17 Iterations

Sun, 31 May 2026 00:00:00 +0300

Optimizing a Java SIMD IPv6 Parser: From 7 M/s to 118 M/s in 17 Iterations
#

The full journey of porting Daniel Lemire’s hand-tuned C AVX-512 IPv6 parser to Java’s Vector API and systematically optimizing it through 17 iterations until it exceeded the C version’s throughput by 66%.

Table of Contents
#

Background: What We’re Parsing
#

An IPv6 address is a 128-bit number typically written as eight groups of four hexadecimal digits separated by colons:

Debugging xrdp Session Sharing: Buffer Overflows, Double Frees, and State Machine Nightmares

Fri, 03 Apr 2026 02:00:00 +0300

Debugging xrdp Session Sharing: A Tale of Buffer Overflows, Double Frees, and State Machine Nightmares
#

TL;DR
#

We implemented session sharing (shadowing) in xrdp — allowing multiple RDP clients to connect to the same desktop session with independent cursors and input routing. The feature required fixes across three layers: the xorgxrdp X driver (per-client MPX input dispatch), the sesman session manager (don’t kill existing clients when new ones join), and the xrdp window manager (non-terminal state to keep RDP connections alive). Along the way we fixed a 128-byte buffer overflow, a double-free from packed struct allocations, a state machine that re-processed its own state, and a UI that wouldn’t paint or respond to clicks. Core dumps and gdb inside a privileged container were essential for cracking the hardest bugs.

Cracking irssi fish with SHA256-NI

Sat, 28 Mar 2026 00:00:00 +0200

Debugging SHA256-NI: A Deep Dive into Endianness and Intel Hardware Acceleration
#

Introduction
#

This blog post documents an intense debugging session to fix a SHA256-NI (Intel SHA Extensions) implementation in a FiSH encryption module for the Irssi IRC client. The goal was to create a high-performance password cracker for the FiSH encryption protocol used in Irssi, which requires 71,624 SHA256 iterations per password attempt. After discovering that OpenSSL was way too slow, we dove deep into Intel’s hardware-accelerated SHA256 intrinsics—only to hit a subtle endianness bug that took minutes to track down.

Building a Standalone Chart Fetching Script with Exchange Fallback

Sat, 21 Mar 2026 00:00:00 +0000

TLDR
#

Extracted chart image fetching from the main trading-to-blog script into a standalone fetch-charts.sh script
The script reads chart requests from debug.json (generated by the main script) and fetches chart images via the chart-img API
Added intelligent exchange fallback: when an exchange returns 422 Invalid Symbol, the script tries alternative exchanges (NASDAQ → NYSE → AMEX for stocks, BINANCE → COINBASE → etc for crypto)
chart-img provides API v3 endpoints (/v3/tradingview/exchange/list and /v3/tradingview/exchange/<EXCHANGE_ID>) to look up valid symbols
The root cause was AI model hallucinations - the LLM sometimes outputs the wrong exchange (e.g., NASDAQ instead of NYSE) for common stocks
Later eliminated duplication by invoking fetch-charts.sh as a subprocess with a FIFO and fd 3 to separate chart markdown output from log output
Added --skip-image-processing and --use-existing-post flags to the parent script to iterate on chart fetching without re-running expensive image processing or model calls

Introduction
#

This post documents a VibeCode session where I built a standalone script to fetch TradingView charts from previously generated debug data. The journey involved extracting code from an existing script, handling API errors gracefully, and implementing intelligent exchange fallback for invalid symbols.

Thin Blue Lines

Sun, 15 Mar 2026 00:00:00 +0200

From VibeCode to Production: Building an LLM-Driven Trading Blog with Automated Chart Integration
#

In this comprehensive guide, I’ll walk you through how we transformed a basic trading blog automation script into a sophisticated system that uses Large Language Models to dynamically generate chart requests, fetch TradingView screenshots via the Chart-IMG API, and embed them directly into Hugo-compatible blog posts. This session represents a fascinating exploration of how AI can drive not just content generation but also the tool-calling patterns needed to fetch external resources in real-time.

XRdp sound support

Mon, 09 Mar 2026 00:00:00 +0200

Sound Support in xrdp Docker via PipeWire: A Comprehensive Implementation Guide
#

Introduction
#

This blog post documents a complete implementation of audio sound support in an xrdp Docker container using PipeWire. The session covers everything from initial investigation through successful implementation, including troubleshooting, multiple iterations, and final refactoring for maintainability. Whether you’re running xrdp in Docker for remote desktop access or building a headless Linux desktop environment, this guide provides detailed instructions for enabling audio redirection to your RDP client.

XRDP in k8s

Sun, 08 Mar 2026 00:00:00 +0200

Running xrdp with GPU Acceleration in Kubernetes: A Complete Troubleshooting Guide
#

Introduction
#

In this blog post, I’ll walk you through the complete journey of deploying xrdp (Remote Desktop Protocol server) in a Kubernetes environment with GPU acceleration. What seemed like a straightforward deployment turned into a multi-hour troubleshooting session covering storage classes, volume mounting issues, container security contexts, and resource allocation.

From Virtual to Virtualized: Enabling GPU Hardware Acceleration in containerd/xrdp Containers

Mon, 02 Mar 2026 00:00:00 +0200

From Virtual to Virtualized: Enabling GPU Hardware Acceleration in containerd/xrdp Containers
#

In this comprehensive guide, I’ll walk you through the complete process of adding GPU passthrough to a containerd container using nerdctl while preserving state, configuring xrdp for hardware-accelerated graphics, and baking everything into a reproducible Dockerfile.

TL;DR
#

Commit the container to save state to an image, then recreate with GPU devices
Pass both /dev/dri/card0 and /dev/dri/renderD128 to the container
Configure xorg.conf with DRMDevice, DRI3, and DRMAllowList options
Add user to video and render groups for device access
Hardware acceleration confirmed: ~12,000 FPS with glxgears (vs ~60 FPS with llvmpipe)

Understanding the Starting Point
#

The user had a running containerd container (ID: 6d5b3c01f38a) built from locals.tf/xrdp:latest. This container was running xrdp for remote desktop access and needed GPU passthrough for hardware acceleration.

Reverse Engineering the Fictional Product Licensing System: A Comprehensive Journey

Sun, 01 Mar 2026 00:00:00 +0000

Reverse Engineering the Fictional Product Licensing System: A Comprehensive Journey
#

Introduction
#

In this comprehensive blog post, I document my extensive reverse engineering journey into the Fictional Product licensing system. What began as a curiosity about how commercial software licensing works evolved into a multi-week deep dive into cryptographic primitives, binary analysis, and the intricate architecture of modern license validation systems. This project ultimately resulted in a complete understanding of the license file format, cryptographic pipeline, and the successful generation of valid license files for all four Fictional Product components.

Investigating k3s CPU usage spikes in an idle K8S cluster

Sun, 01 Mar 2026 00:00:00 +0200

Troubleshooting K3s CPU Spikes: A Deep Dive into Stuck Reflectors
#

TL;DR
#

Root Cause: Stuck Kubernetes reflector trying to watch a non-existent resource, causing ~160 failed watch attempts per hour
Key Finding: Fleet controller was the culprit, repeatedly retrying failed API watch requests
Solution: Full k3s restart cleared the stuck reflectors
Result: CPU usage dropped from 10-25% to ~9% (with full restart achieving 0% idle)
Tools Used: journalctl, kubectl, strace, curl with k3s certificates, tcpdump

Introduction
#

Kubernetes control plane performance issues can be notoriously difficult to diagnose, especially when the symptoms manifest as elevated CPU usage without clear error messages. In this article, I’ll walk through a comprehensive debugging session where we investigated a K3s cluster experiencing persistent CPU spikes. We’ll examine the investigation techniques, the root cause identification, and the ultimate resolution.

Extending GhidraMCP with Debugging Capabilities: A Developer's Journey

Sat, 28 Feb 2026 00:00:00 +0200

Extending GhidraMCP with Debugging Capabilities: A Developer’s Journey
#

Introduction
#

The GhidraMCP project started as a tool to expose Ghidra’s static analysis capabilities—decompilation, function renaming, cross-references—via the Model Context Protocol (MCP). But reverse engineering often requires dynamic analysis, and we needed the MCP server to work seamlessly with Ghidra’s debugger as well.

Docker with xrdp & lxqt

Tue, 24 Feb 2026 00:00:00 +0200

Debugging and Enhancing a Docker-Based XRDP Desktop Environment: A VibeCode Session
#

Introduction
#

In this blog post, I’m documenting a comprehensive troubleshooting and enhancement session with a Docker-based XRDP desktop environment running LXQt on Debian. The session covered fixing missing icons after login, configuring terminal applications with custom fonts, setting up the Fish shell, and optimizing the Docker build process for faster rebuilds. This was a “VibeCode” session—a real-time debugging and development workflow that demonstrates practical solutions to common Linux desktop containerization challenges.

K8sizing homeassistant & Zigbee2MQTT

Mon, 23 Feb 2026 00:00:00 +0200

From Containerd to Kubernetes: Migrating Home Assistant, Mosquitto, and Zigbee2MQTT
#

Introduction
#

In this comprehensive guide, I’ll walk you through the process of migrating standalone containers running in containerd (managed via nerdctl) to Kubernetes. This session covers discovering non-Kubernetesized containers, creating Kubernetes manifests that preserve volumes and configurations, troubleshooting deployment issues, and successfully running IoT services in a Kubernetes cluster.

Blog Automation Setup with OpenCode

Sun, 22 Feb 2026 01:00:00 +0200

TL;DR
#

Built a self-hosted Hugo blog at locals.tf/blog with automated workflows for:

Converting OpenCode session transcripts into polished blog posts using AI
Parsing trading screenshots (IBKR/Binance) into weekly analysis posts
Free API integration (Google Gemini or Groq) for AI processing

Introduction
#

This OpenCode session focused on setting up a blog publishing system for two distinct content types: technical posts from our collaboration sessions and weekly trading analysis. The goal was to minimize ongoing maintenance while making post creation as effortless as possible.

Automating Blog Posts from VibeCode Sessions with OpenCode-s Free AI API

Sun, 22 Feb 2026 00:00:00 +0200

Automating Blog Posts from VibeCode Sessions with OpenCode’s Free AI API
#

TL;DR

OpenCode’s Zen API at opencode.ai/zen/v1/chat/completions provides free access to models like big-pickle using the “public” API key
The key discovery was that passing max_tokens causes models to output to the reasoning field instead of content — removing this parameter fixes the issue
Use jq --rawfile for passing large files to the API (not --slurpfile which expects JSON format)
The opencode-cli works without an API key because it uses apiKey: "public" which the server accepts for free models with allowAnonymous: true

Introduction
#

In this session, I worked on automating the conversion of VibeCode session transcripts into blog posts using OpenCode’s free AI API. The journey involved discovering how the opencode-cli authenticates without requiring an API key, debugging API request format issues, and ultimately creating a working bash script that transforms raw transcripts into formatted markdown blog posts.

DollHouse PostgreSQL Optimization

Sat, 17 Jan 2026 18:34:37 +0200

TL;DR
#

Moved application logic from Python loops to PostgreSQL functions/views, achieving 50-80% runtime reduction by eliminating the N+1 query pattern.

The Problem
#

The DollHouse application monitors torrent feeds and downloads TV releases matching a wishlist. The core find_releases() method had a classic N+1 query problem:

VibeCode Sessions on locals.tf

A Transaction Is a Point in Time

A Transaction Is a Point in Time #

The Differential: Fourteen Ways a Key-Value Store Lied to Kubernetes

The Differential: Fourteen Ways a Key-Value Store Lied to Kubernetes #

A Point Is Not a Prefix: The Life and Times of a Four-Month-Old Bug

A Point Is Not a Prefix: The Life and Times of a Four-Month-Old Bug #

The Two-Minute Loop: Hunting a Control Plane That Never Sleeps

The Two-Minute Loop: Hunting a Control Plane That Never Sleeps #

The Turing Machine Is Not a CPU: OpenAI's n log n Multiplication on AVX2

The Turing Machine Is Not a CPU: OpenAI’s n log n Multiplication on AVX2 #

Integer Multiplication Below n log n: Mining the Constants, and Why the Real Saving Is Cubic

Integer Multiplication Below n log n: Mining the Constants, and Why the Real Saving Is Cubic #

Recovering a Tuya Local Key Without the Cloud (and Reimplementing the App API)

Recovering a Tuya Local Key Without the Cloud (and Reimplementing the App API) #

Introduction #

The Centre Held: From a Silent Boot to 9.9 Gbit/s and a Safer Jumbo Path

The Centre Held: From a Silent Boot to 9.9 Gbit/s and a Safer Jumbo Path #

The Center Cannot Hold: Porting RSS to a Router That Hangs at Boot

The Center Cannot Hold: Porting RSS to a Router That Hangs at Boot #

Defeating AWS WAF Challenges in Pure Node.js (No Browser)

Defeating AWS WAF Challenges in Pure Node.js (No Browser) #

Introduction #

HA Not Supported: Rebuilding a Bitbucket DC Migration Export from REST Alone

TL;DR #

A Clock 4 Minutes Behind: Rolling NTP Time Sync Across the Home LAN

TL;DR #

The SSH Reset That Wasn't the ISP: A Router Flowtable Ghost Story

TL;DR #

Roswell, Majestic-12, and the Transistor: A Skeptic Deep Dive into Reverse Engineering Theory

TL;DR #

Chasing a Laggy MX Master 3 on a Passively Cooled ODROID-H2

TL;DR #

The Progress Request That Never Arrived: Debugging a Ghost in the Kubernetes Watch Pipeline

The Progress Request That Never Arrived #

Table of Contents #

Background: The Idle Cluster That Wasn’t #

Optimizing a Rust etcd KV Store: From 61% Overhead to 3% CPU in ~2 Weeks

Optimizing a Rust etcd KV Store: From 61% Overhead to 3% CPU in ~2 Weeks #

Table of Contents #

Background: The Problem with kine #

Fixing Kubelet Eviction Log Spam on ZFS: A Better Patch for containerfs.inodesFree

Fixing Kubelet Eviction Log Spam on ZFS: A Better Patch for containerfs.inodesFree #

Optimizing a Java SIMD IPv6 Parser: From 7 M/s to 118 M/s in 17 Iterations

Optimizing a Java SIMD IPv6 Parser: From 7 M/s to 118 M/s in 17 Iterations #

Table of Contents #

Background: What We’re Parsing #

Debugging xrdp Session Sharing: Buffer Overflows, Double Frees, and State Machine Nightmares

Debugging xrdp Session Sharing: A Tale of Buffer Overflows, Double Frees, and State Machine Nightmares #

TL;DR #

Cracking irssi fish with SHA256-NI

Debugging SHA256-NI: A Deep Dive into Endianness and Intel Hardware Acceleration #

Introduction #

Building a Standalone Chart Fetching Script with Exchange Fallback

TLDR #

Introduction #

Thin Blue Lines

From VibeCode to Production: Building an LLM-Driven Trading Blog with Automated Chart Integration #

XRdp sound support

Sound Support in xrdp Docker via PipeWire: A Comprehensive Implementation Guide #

Introduction #

XRDP in k8s

Running xrdp with GPU Acceleration in Kubernetes: A Complete Troubleshooting Guide #

Introduction #

From Virtual to Virtualized: Enabling GPU Hardware Acceleration in containerd/xrdp Containers

From Virtual to Virtualized: Enabling GPU Hardware Acceleration in containerd/xrdp Containers #

TL;DR #

Understanding the Starting Point #

Reverse Engineering the Fictional Product Licensing System: A Comprehensive Journey

Reverse Engineering the Fictional Product Licensing System: A Comprehensive Journey #

Introduction #

Investigating k3s CPU usage spikes in an idle K8S cluster

Troubleshooting K3s CPU Spikes: A Deep Dive into Stuck Reflectors #

TL;DR #

Introduction #

Extending GhidraMCP with Debugging Capabilities: A Developer's Journey

Extending GhidraMCP with Debugging Capabilities: A Developer’s Journey #

Introduction #

Docker with xrdp & lxqt

Debugging and Enhancing a Docker-Based XRDP Desktop Environment: A VibeCode Session #

A Transaction Is a Point in Time
#

The Differential: Fourteen Ways a Key-Value Store Lied to Kubernetes
#

A Point Is Not a Prefix: The Life and Times of a Four-Month-Old Bug
#

The Two-Minute Loop: Hunting a Control Plane That Never Sleeps
#

The Turing Machine Is Not a CPU: OpenAI’s n log n Multiplication on AVX2
#

Integer Multiplication Below `n log n`: Mining the Constants, and Why the Real Saving Is Cubic
#

Recovering a Tuya Local Key Without the Cloud (and Reimplementing the App API)
#

Introduction
#

The Centre Held: From a Silent Boot to 9.9 Gbit/s and a Safer Jumbo Path
#

The Center Cannot Hold: Porting RSS to a Router That Hangs at Boot
#

Defeating AWS WAF Challenges in Pure Node.js (No Browser)
#

Introduction
#

TL;DR
#

TL;DR
#

TL;DR
#

TL;DR
#

TL;DR
#

The Progress Request That Never Arrived
#

Table of Contents
#

Background: The Idle Cluster That Wasn’t
#

Optimizing a Rust etcd KV Store: From 61% Overhead to 3% CPU in ~2 Weeks
#

Table of Contents
#

Background: The Problem with kine
#

Fixing Kubelet Eviction Log Spam on ZFS: A Better Patch for containerfs.inodesFree
#

Optimizing a Java SIMD IPv6 Parser: From 7 M/s to 118 M/s in 17 Iterations
#

Table of Contents
#

Background: What We’re Parsing
#

Debugging xrdp Session Sharing: A Tale of Buffer Overflows, Double Frees, and State Machine Nightmares
#

TL;DR
#

Debugging SHA256-NI: A Deep Dive into Endianness and Intel Hardware Acceleration
#

Introduction
#

TLDR
#

Introduction
#

From VibeCode to Production: Building an LLM-Driven Trading Blog with Automated Chart Integration
#

Sound Support in xrdp Docker via PipeWire: A Comprehensive Implementation Guide
#

Introduction
#

Running xrdp with GPU Acceleration in Kubernetes: A Complete Troubleshooting Guide
#

Introduction
#

From Virtual to Virtualized: Enabling GPU Hardware Acceleration in containerd/xrdp Containers
#

TL;DR
#

Understanding the Starting Point
#

Reverse Engineering the Fictional Product Licensing System: A Comprehensive Journey
#

Introduction
#

Troubleshooting K3s CPU Spikes: A Deep Dive into Stuck Reflectors
#

TL;DR
#

Introduction
#

Extending GhidraMCP with Debugging Capabilities: A Developer’s Journey
#

Introduction
#

Debugging and Enhancing a Docker-Based XRDP Desktop Environment: A VibeCode Session
#

Introduction
#

From Containerd to Kubernetes: Migrating Home Assistant, Mosquitto, and Zigbee2MQTT
#

Introduction
#

TL;DR
#

Introduction
#

Automating Blog Posts from VibeCode Sessions with OpenCode’s Free AI API
#

Introduction
#

TL;DR
#

The Problem
#