Embedding WebM or MP4 in an article makes the page heavy. I implemented a system that loads only the first frame with preload="metadata" and starts playback on click, using a rehype plugin.
Two critical vulnerabilities (CVE-2025-69263, CVE-2025-69264) were discovered in pnpm 10.0.0–10.25. They allow lockfile integrity bypass and remote code execution, so immediate updates are required.
Practical VLESS + REALITY setup notes for a VPS: working Xray server config, client app choices, TLS camouflage behavior, fallback choices, and the main pitfalls before using it for China-facing connections.
Hysteria2 setup notes from a China-facing VPS — the actually-working YAML config, what to do when UDP/443 is blocked, Brutal congestion control pitfalls, and client apps per platform. Overview-level, not a full step-by-step.
In January 2026, Logi Options+ and G HUB stopped working on macOS due to an expired certificate. Here's how to fix it and why this happened in the first place.
Bash permissions now support real wildcards. `Bash(npm *)` can allow the whole npm family, alongside skill hot reload, expanded Vim controls, agent forks, and security fixes.
Step-by-step guide to building an IKEv2 VPN server with strongSwan on CentOS 7, including certificate setup, firewall rules, and client configuration for iOS, macOS, Windows, and Android.
