technical.cx Sources

Lobsters

A UAF turned RCE

In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free. This post explains the bug, what the problem can...

Topics: Security

Lobsters

Linux Lockdown and Hibernation (again)

(This is an updated version of an older post - the introduction remains the same, the technical details are different) Linux draws a distinction between code running in kernel (kernel space) and applications running in userland (user space). This is...

Topics: Infrastructure

Entities: Infrastructure

Lobsters

Fancy Curl Sites

So a good while ago I added a fun curl version of my site, meant for viewing in the terminal. Try running these commands!

Lobsters

Switch to Safari

Safari is built to be faster and more private by default. With industry-leading features, Safari is the best web experience on your Apple devices.

Lobsters

The 2026 Maintainers Summit

The Maintainers Summit is a one-day, invitation-only gathering of about 30 kernel developers; i [...]

Lobsters

Please stop hashing the public key first (or: ML-DSA's µ annoys me)

A goal one might have when designing a signing algorithm is to prevent signing a message one has not seen. Signing a message one hasn't seen might sound difficult at first, but most classical signature algorithms , as commonly used, sign a hash of the...

Lobsters

Announcing Lix 2.96 “Bingsu”

Lix is an independent variant of the Nix package manager, developed by a team of open-source volunteers, and maintained by and for a passionate community of users.

Lobsters

Redesigning source control at Anthropic

As our merges per day grew more than tenfold, source control became our biggest development bottleneck. Here, we share how we migrated to an in-house version control system in five months.

Entities: Anthropic