Web Tag

Web

Posts related to web

14 posts

← Back to all posts

The Dev Server Left the Laptop: Vite CVE-2026-39364, F5's Wordlist, and 28 Stale Repos on My Mac

Vite patched the server.fs.deny query bypass on April 6. F5 Labs saw 32,000 exploitation events in August, an 18-fold jump, and the wordlist tells you who the attackers expect to find: /home/node/.aws/credentials, /usr/src/app, /proc/self/environ. Nobody is hunting laptops. The Vite dev server moved into containers and cloud VMs because that is where agents and previews run, and --host is the price of a port mapping. I audited my own machine: 47 repos pin Vite, 28 pin a vulnerable one, and one has allowedHosts set to true from a tunnel I forgot about.

Read more →

One-Shot Taste: Redesigning This Blog with Claude Fable 5

X is flooded with Fable 5 one-shotting landing pages, and design leaderboards briefly crowned it king. So I handed it this blog. The interesting part wasn't what it generated: it was that it read the site's own design doc and found the site guilty of violating it. What the viral demos get right, what they hide, and why the model's most useful design skill is enforcement, not inspiration.

Read more →