Forum Archaeology #2. Three free PHP forum platforms started from the same premise a generation ago. One got hit with a CVSS 9.8 authentication bypass this June. One had eleven CVEs last year. One has stayed almost quiet. Same premise, three completely different fates.

Self-hosted email is losing to Gmail's hard SMTP rejections. Self-hosted password managers are split down the middle. And self-hosted music is doing the opposite of what you'd expect.

A nonprofit founded in Colorado eight months ago wants to hand every self-hoster a free domain and put "surveillance capitalism" in its mission statement. That's the pitch behind .self, a proposed top-level domain from the Human-Centered Computing Foundation, and as of this month

A logic bug in screensharingd let attackers skip authentication entirely and land as root — no password required. Here's how it was found, patched, reverse-engineered, and finally weaponized.

The August 2026 MSVC Build Tools Preview fixes 40 reported compiler bugs and adds real ARM64 codegen work, including Armv9.2 LUTI2 lookup-table support. It targets Visual Studio 2026 v14.52 and ships through both the Stable and Insiders channels.

Part 1 ended on a 70-gigabyte breach in 2021. Since then, hacktivists derailed trains, dumped molten steel on camera, and reached grids in three countries.

Every entity, every block update, every redstone pulse — one thread, twenty times a second, 50 milliseconds a pass. Folia's answer is to stop sharing the kitchen. Here is the tick budget and the ownership rules, read from the PaperMC source.

Oracle halved its Always Free ARM allocation to 2 OCPU/12GB, enforced Aug 18, 2026. Here's the exact numbers, what's still ambiguous, and how to resize in time.

Python 3.15 release candidate: explicit lazy imports, the new frozendict and sentinel types, the Tachyon profiler, and real JIT benchmark numbers.

A PHP API case study: fixing an N+1 query, twenty serial cURL calls, missing connection pooling, and stats recalculated on every request with Redis caching.

Codeberg's members voted to prohibit vibe-coded repos over hosting costs, not code quality. Here's the actual vote, the reasoning, and the self-hosting community's reaction.

A technical deep dive into the features shaping the next Java feature release, due March 2027 — including the twelve-year backstory behind its headline feature. JDK 28 is a non-LTS ("feature release") of the Java Platform, tracked as JSR 403 in the Java Community Process. It follows

Cloudflare open-sourced its internal AI workspace. A technical breakdown of Dynamic Workers, Gatekeepers, capability-based access, and what it takes to self-host it.

A recipe card with blank ingredient fields is worse than no recipe card at all. Part 3 of the kitchen series covers PHPDoc, comments, and the documentation debt nobody notices until the person who understood it walks out the door.

Escoffier's brigade de cuisine solved the same problem PHP's class visibility solves: who gets to touch what, and who answers to whom. Part 2 of the kitchen series, and the one where we build something real.

Before I ever touched PHP, I learned mise en place the hard way, on a line in a 1-star kitchen. Turns out variables, functions, and scope are the same discipline with a different uniform.

Dario Amodei is reportedly worried that his new hires don't believe in the mission. According to Axios, citing a source familiar with the matter, the Anthropic CEO has expressed concern that some recent hires at the company are joining for compensation rather than out of any deep commitment

There's a specific kind of silence that happens right after you realize an AI agent just deleted everything you own. Not the polite "let me confirm before proceeding" kind of silence. The other kind. The kind where you're staring at a terminal that'

Forum Archaeology #1: I built plugins for this software when it ran half the internet's communities. Sixteen years after the exodus that should have killed it, vBulletin is still getting hit with critical, unauthenticated remote code execution.