FROM MY NOTEBOOK

All writing.

06 POSTS

Writing on software, computer systems and technology.

01

Remote code execution vulnerability in Microsoft Paint

CVE-2026-83844 in Microsoft Paint: affected versions, the fix, and what an out-of-bounds read means.

↗
02

The Claude Code extension attack: what happened in Cursor?

The malicious code in version 2.1.313 on Cursor’s extension marketplace, and who may have been affected.

↗
03

Building an operating system from scratch: PckOS

Where my seven-year hobby kernel project had reached in QEMU.

↗
04

Two critical PHP vulnerabilities: impact and what to do

A plain-language look at PHP’s new RCE flaws, their discovery, and the available fixes.

↗
05

The XZ Utils backdoor: how trust in open source was abused

A performance oddity exposed a supply-chain attack, the affected releases and questions about trust.

↗
06

Terry A. Davis and building a world of his own

An operating system, a programming language and an extraordinary mind, built largely by one person.

↗