08 Entries
Engineering log / Selected events
Moments where something changed.
Releases, investigations, merges, and reviews, each with a note on why it mattered. Only moments with public evidence or explicit approval are listed. Newest first.
Policy changed mid-review; follow-up merged
While reviewing the duplicate-route fix, GROWI’s maintainers decided a 403/404 split lets unauthorized users learn whether a page exists. The fix was changed to a uniform 404 and merged the same day.
Why it matters The earlier fix matched the contract agreed in review. The contract moved for a security reason, and the follow-up was updated within the hour instead of defending the old design.
- Investigation
- Upstream merge
- Review
- A fix is only correct if the rest of the system agrees.
Rename fix merged upstream
GROWI #11615 merged: missing and inaccessible pages no longer produce a 500 from the rename API. Regression tests exercise the real lookup path.
Why it matters Review surfaced a client dependency invisible from the server route: localized messages keyed on the existing error code. Keeping that code intact mattered more than a cleaner name.
- Investigation
- Upstream merge
- Review
- A fix is only correct if the rest of the system agrees.
- Prefer evidence over confidence.
Reported: rename API returns 500 for a missing page
Filed GROWI #11572 with a reproduction and a diagnosis: the route dereferenced the page before checking whether the lookup returned null.
Why it matters Reported and diagnosed before writing a fix, so the maintainers could agree on the expected behaviour first. The duplicate route was deliberately left for a separate change.
- Investigation
- Upstream merge
- Review
- Understand the existing system before changing it.
- Keep changes small enough to review honestly.
The Solo’s Guide to Operational Security
Practical OPSEC, account safety, and cognitive encryption for solo operators.
Most downloaded Alien: Isolation mod of the year
Peaceful Sevastopol was the most downloaded Alien: Isolation mod on Nexus Mods in 2025.
Why it matters A one-directive change, used by more players than any other mod for the game that year.
- Public release
- Adoption
- The right small change can move the whole system.
Peaceful Sevastopol released
Published on Nexus Mods: the Alien’s behaviour directive set to NoBehaviour, leaving human and android threats in place.
- Public release
- Adoption
- Good engineering includes knowing what not to change.
Hack The Box Pro Lab: Zephyr
40-hour lab: relay attacks, pivoting, Active Directory flaws, lateral movement, and crossing trust boundaries.
Hack The Box Pro Lab: Dante
40-hour lab: enumeration, exploit development, privilege escalation, lateral movement, and web application attacks.