AKAnas Khaninblog.anaskhan.me·4h ago · 23 min readHow I booked my IndiaFOSS ticket at the thirteenth hourAnas Khan, September 2026 I have attended IndiaFOSS for the past four years. It is one of the few conferences I plan to attend before I know the schedule, because the people and the conversations are 00
YSyoungsoo shimintoolzip.hashnode.dev·1h ago · 5 min readHow I Built a Client-Side 3D File Viewer with Three.js — Lessons from ToolZipWhen I added a 3D file viewer to ToolZip, I expected it to take a day. It took a week. Here's everything I learned. Why a 3D Viewer in a Utility Site? ToolZip started as a simple image compression to00
QQyleroninqyleron-blog.hashnode.dev·4h ago · 9 min readBenchmarking Cyber Deception: Why Legacy Honeypots Fail Under High Concurrency (And How EchidraOSS Fixes It)A concurrency comparison of Cowrie, Thinkst Canary, and generic Twisted listeners against EchidraOSS's async FastAPI core. The difference shows up exactly when it matters most: under a connection floo00
DTDavid Timothyindigitalunpacked.hashnode.dev·9h ago · 8 min readWhy GrapheneOS Is the Best Android OS for Privacy and SecurityI have used stock Android for years. Pixel, Samsung, you name it. I thought it was "clean" and "secure" because Google told me so. Then I actually looked under the hood as a developer and realized how00
SAShai Almogindebugagent.com·18h ago · 6 min readOne Java API for HomeKit, Matter, and Google HomeA light can expose brightness through a HomeKit characteristic or a Matter cluster. Application code should ask for brightness, not carry both platform identifiers and two sets of value rules. What is00
RDRanajit Dharinranajitdhar.hashnode.dev·17h ago · 11 min readRDAI: A Multi-Brain Python SDK for Self-Healing AIOne Python SDK. Any AI Provider. Automatic Failover. Modern AI applications are increasingly built on APIs from multiple LLM providers. But what happens when the AI provider your application depends 10
EEveindispatch-blog.hashnode.dev·17h ago · 11 min readWhy uv Now Deduplicates Every Wheel in Its Cache (and How It Does It)The Problem: Duplicate Wheels in the Cache A developer working on a monorepo with two Python projects—a FastAPI web service and a data pipeline—notices something odd. Each project has a requirements.t00
AJAmartya Jhainsecurity-research.hashnode.dev·23h ago · 10 min readHow a GitHub Triage Role Hijacked an Already-Authorized Claude Code Action RunHackerOne #3918594 · Claude Code Action v1.0.185, commit 9db594c7a0e82298c121c18b7f08aa1579ce7341 · CVSS 4.0 score 7.5, High Authorizing an automated job is really two promises: who gets to start it,00
AJAmartya Jhainsecurity-research.hashnode.dev·1d ago · 10 min readEscaping Claude Code's Sandbox: A TOCTOU Bug That Let Repo Code Overwrite Host FilesHackerOne #3882177 · Claude Code 2.1.217, macOS arm64 · CVSS 4.0 score 7.7, High Sandboxing runs on a simple promise: code inside it cannot reach outside it. Claude Code, Anthropic's coding agent, ke00
SAShai Almogindebugagent.com·1d ago · 5 min readJavaScript Find in Page: DOM Text Above the Codename One CanvasBrowser search cannot find pixels. That was the JavaScript port's text model: Codename One drew each glyph onto a canvas, so a visible label was invisible to find-in-page, text selection, and ordinary00
