Programming

Twelve Years in the Making: JDK 28 Ships Value Classes Preview

A technical deep dive into the features shaping the next Java feature release, due March 2027 — including the twelve-year backstory behind its headline feature. JDK 28 is a non-LTS ("feature release") of the Java Platform, tracked as JSR 403 in the Java Community Process. It follows

Self Hosting

Cloudflare OS: Inside the Open-Source Agent Sandbox

Cloudflare open-sourced its internal AI workspace. A technical breakdown of Dynamic Workers, Gatekeepers, capability-based access, and what it takes to self-host it.

Web Development

Why Your PHPDoc Blocks Are Recipe Cards Nobody Can Use

A recipe card with blank ingredient fields is worse than no recipe card at all. Part 3 of the kitchen series covers PHPDoc, comments, and the documentation debt nobody notices until the person who understood it walks out the door.

Web Development

PHP OOP Explained Through a Real Kitchen Brigade System

Escoffier's brigade de cuisine solved the same problem PHP's class visibility solves: who gets to touch what, and who answers to whom. Part 2 of the kitchen series, and the one where we build something real.

Web Development

What a 1-Star Kitchen Taught Me About PHP Fundamentals

Before I ever touched PHP, I learned mise en place the hard way, on a line in a 1-star kitchen. Turns out variables, functions, and scope are the same discipline with a different uniform.

Claude AI

Anthropic's Mission Statement Is Doing a Lot of Work Lately

Dario Amodei is reportedly worried that his new hires don't believe in the mission. According to Axios, citing a source familiar with the matter, the Anthropic CEO has expressed concern that some recent hires at the company are joining for compensation rather than out of any deep commitment

AI Agents

Claude Opus 5 Force-Deleted a User's Entire File System After a Failed Backup

There's a specific kind of silence that happens right after you realize an AI agent just deleted everything you own. Not the polite "let me confirm before proceeding" kind of silence. The other kind. The kind where you're staring at a terminal that'

Forum Archaeology

The Slow Death of vBulletin, and Why It Isn't Over

Forum Archaeology #1: I built plugins for this software when it ran half the internet's communities. Sixteen years after the exodus that should have killed it, vBulletin is still getting hit with critical, unauthenticated remote code execution.

Cybersecurity

Januscape: A 16-Year-Old Linux KVM Escape Bug

CVE-2026-53359 lets a guest VM crash or potentially root your Proxmox host, and it hid in KVM's shared code for 16 years. What to patch and how to check.

Cybersecurity

Minecraft Bedrock Server RCE: CVE-2026-55010

CVE-2026-55010 lets an attacker take over your Bedrock server with one packet, no login required. What it actually affects, and how to patch it today.

Self Hosting

What You Can Self-Host on Oracle Cloud Free Tier (2026)

What actually fits on Oracle Cloud free tier after the June 2026 cut: Ghost, Vaultwarden, Syncthing, monitoring, and a small AI model, sized in real RAM.

Artificial intelligence Featured

Ghost in the Shell Predicted Prompt Injection in 1995

Ghost Check #1: the Puppet Master hacked minds by exploiting the gap between what a system experiences and what it can verify. Thirty-one years later, a researcher did the same thing to Microsoft 365 Copilot with a single email.

Self Hosting

How to Self-Host a Discord Bot: Building and Running Your Own Bot 24/7

There's a moment every Discord bot developer remembers, even if nobody makes a big deal of it. You run node index.js, switch over to Discord, type a command, and your own code answers back. It's a small thing to get excited about, and it never

Artificial intelligence Featured

The Complete Self-Hosted AI Stack for 2026

Building a local AI server is more than installing Ollama. This guide builds a full production AI stack with Open WebUI, LiteLLM, Qdrant, Traefik, and Langfuse — what each component does, why it's needed, and three complete Docker Compose configurations for beginners, power users, and small teams.

Cryptography

RSA Is Simple. Deploying RSA Correctly Almost Never Is.

The capstone to our RSA series. The math checks out. Shipping it as written gets you breached. This is the nineteen-year-old attack that proves it, and what belongs in production instead.

Cybersecurity

Claude Mythos vs. HAWK and AES: What It Found

Claude Mythos halved HAWK's effective key strength and sped up an AES attack 200-800x. What the math actually shows, and what it doesn't mean yet.

Programming

JDK 27 New Features Explained: What Actually Changes

JDK 27 ships nine JEPs, but only a few actually change your code today. What's default now, what's still preview, and what to do about each one now.

Self Hosting Featured

Self-Host OpenClaw: VPS Setup to Production (2026)

Self-host OpenClaw from zero to production. Server provisioning, SSH lockdown, Docker, reverse proxy, Fail2ban, performance tuning, and full backup strategy in one guide.

Artificial intelligence

OpenClaw Is Running on Your Machine Right Now. Here's What to Lock Down Before It Eats Your Credentials.

Here's the complete patch-status and lockdown guide, including the systemd hardening, origin validation, env-variable command injection fix, ClawHub skill safety, and how to tell if you've already been hit.

Artificial intelligence

Claude Opus 5 Launches at Half the Price of Fable 5, and Anthropic's Efficiency Claims Have a Track Record Problem

Anthropic shipped Claude Opus 5 today: near-Fable 5 scores, a five-level effort dial, half the price. History says verify the token math before you trust it.

Web Development

Your npm Install Just Ran Someone Else's Code: Why Dependency Security Has to Start Before CI

A pull request checkout, a poisoned GitHub Actions cache, and an OIDC token pulled straight out of runner memory. That's how 84 malicious versions of TanStack's packages hit npm in six minutes.

Self Hosting

Self-Hosting Prometheus and Grafana: Infrastructure Monitoring That Actually Works

Build a production-grade monitoring stack with Prometheus and Grafana from scratch. Covers architecture, Docker Compose deployment, Node Exporter, alerting with Alertmanager, PromQL from basics to advanced, pre-built dashboards, and everything CoderOasis uses to monitor its own infrastructure.

Self Hosting

Zero Trust Everything: The Complete Guide to Self-Hosting Teleport for Secure Infrastructure Access

CoderOasis runs Teleport internally for everything — admin panel access, secure database connections, Kubernetes, and zero-trust philosophy across our entire team. This is the complete technical guide to installing, configuring, and running your own self-hosted Teleport cluster from scratch.

Self Hosting

Build Your Own AI Agent Stack: The Complete Self-Hosted Guide for 2026

Build a production-grade self-hosted AI agent from scratch using Docker Compose. Covers the full stack — Ollama, n8n, Flowise, Qdrant, SearXNG, Langfuse, and Redis.

Web Development

Inside TypeScript 7: What a Year-Long Rewrite in Go Actually Bought Developers

A deep look at how Microsoft's Go-based TypeScript 7 compiler achieves its speed gains, and what the Visual Studio Code team's year-long migration reveals about adopting it safely.