Writing & Research
Research notes and engineering decisions, with links to the underlying advisories and references.
Research note ·
When an Image Upload Becomes Executable Content
The upload and retrieval boundaries behind Traccar’s CVE-2026-25648.
Read articleResearch note ·
The Trust Boundary in a CSV Export
Why correct CSV quoting does not settle how spreadsheet software interprets a cell.
Read articleEngineering note ·
What to Measure Before Blocking with a WAF Rule
An evaluation plan connecting rule matches to legitimate traffic, rollout criteria, and rollback.
Read articleHalodoc engineering
Exploring LLM Security Risks & OWASP Top 10 for LLMs
An introduction to LLM integration risks, originally published on the Halodoc engineering blog.
Read article