Engineering notes
Security, runtime behavior and operations.
Technical analysis with primary sources, configuration details and verification procedures.
- Binance 14 cleared its EIP-7702 delegation: what the chain proves, and what it does notAt block 26,301,896 the address labelled Binance 14 reset its code to empty with a type-4 transaction. The clear removes the sweeper contract; it does not prove the signing key is safe. A read-only probe for any delegated account.
- Binance's $3.3B wallet transfers: what the chain shows, and how to tell a hack from a moveRead from a public Ethereum node: an EIP-7702 delegation on the Binance 14 address, a 65-token sweep, and Tether and Circle freezes. Signs that separate theft from an internal move.
- Zabbix 6.0 and 7.0 upgrade and configuration traps, and where they return in 8.0The upgrade and configuration mistakes Zabbix documented for 6.0 and 7.0, the same traps in 8.0's notes, and a tested 7.0 to 8.0 upgrade in containers.
- How AI grew up: from rules to learning machinesExplained to kidsSeventy years of artificial intelligence for young readers, with a robot guide, a game where you teach a machine, and a quiz.
- Kaggle is not a free AI server: what its quotas and terms allowRunning an LLM API on Kaggle's free GPUs is a popular hack. Kaggle's session limits make it unreliable, and its terms rule out server farming and third-party use.
- Spamhaus will enforce HELO and reverse DNS from November 2026: check every sending IPSpamhaus now requires forward-confirmed reverse DNS and a HELO name that resolves to the sending IP. A stock Postfix container announces EHLO localhost.
- eMudhra CA compromise: eight intermediate keys anyone could recoverEight eMudhra intermediate CA keys were generated with almost no randomness. What happened, which root was distrusted, and which clients stayed exposed after browsers were fixed.
- Argo CD October 2026: eight advisories, then a compromised root CA in the imagesArgo CD 3.3.15, 3.4.10 and 3.5.4 fix four critical repo-server and AppProject flaws. Only 3.3.18, 3.4.12 and 3.5.6 also drop the compromised eMudhra root from the image.
- CVE-2026-98432: a 9.8 kernel TCP use-after-free Ubuntu has not patched yetThe Linux kernel rates it 9.8, Red Hat rates it 5.9, and Ubuntu still lists every maintained release as work in progress. How to tell whether you are exposed.
- Prompt cache misses are a silent cost leak in coding agentsA background agent that fires after the cache expires pays full price to rebuild it. How to read the cache numbers and stop the leak.
