SXZ.io — Tech Blog

Concrete dam wall with a footbridge along its crest holding back a calm reservoir below tree-covered hills, with a few people standing at the near end of the walkway

Learning HubNovember 12, 2026

How to Shut Down a FastAPI Service Without Dropping Requests: Handle the Stop Signal, Drain Before You Close, and Survive a Rolling Restart Behind nginx

November 12, 2026

Stop a FastAPI service on purpose while requests are in flight and measure what a hard kill, a polite stop signal...

Close-up of an iridescent teal duck feather with a brown edge against a blurred green background

NewsNovember 12, 2026

Apache Patches a Critical mod_http2 RCE Found Independently by Anthropic’s Scanner and Google Researchers, but 2.4.70 Shipped Nearly Five Days Earlier Without the Fix and the One-Line Patch Was Public for About 58 Hours Before the Advisory

November 12, 2026

Apache HTTP Server 2.4.71 fixes CVE-2026-119618, a critical mod_http2 race that Red Hat says allows...

An open Pacific oyster shell resting on a wooden chopping board

ArticlesNovember 12, 2026

CNCF’s OpenShell-on-Kubernetes Guide Turns Agent Sandboxing Into a Two-Layer Split, but the Demo’s Seven Kyverno Policies Admit Secret Volumes, Oversized Init Containers and Unconfined Seccomp, and the OpenShell Release It Describes Is Five Behind the Current One

November 12, 2026

Nirmata’s CNCF guide says OpenShell controls the agent and Kyverno controls the rest; run offline, the demo’s...

Close-up of the white locking bars and cam handles on the closed doors of a grey intermodal shipping container

NewsNovember 12, 2026

Red Hat Published Eight Fixed Quay Releases Within Two Hours of Its CVSS 9.8 Signing-Key Advisory, but the CVE Page Still Lists No Fix, and the Sibling 9.9 Flaw’s Page Names Those Releases While None of Their Advisories Lists It

November 12, 2026

Red Hat published eight Quay 3 updates that list CVE-2026-123710, a CVSS 9.8 registry signing-key flaw, within two...

A white life ring hanging on a wooden post above an empty sandy beach and calm blue water, a rescue tool kept within reach before anyone needs it

Learning HubNovember 11, 2026

How to Recover Lost Commits and Files in Git With reflog and fsck, and Snapshot Uncommitted Work Before a Script or AI Agent Can Wipe It

November 11, 2026

Recover a reset, a deleted branch, a dropped stash and a staged file with git reflog and fsck, then measure what...

Concrete dam wall with a footbridge along its crest holding back a calm reservoir below tree-covered hills, with a few people standing at the near end of the walkway

How to Shut Down a FastAPI Service Without Dropping Requests: Handle the Stop Signal, Drain Before You Close, and Survive a Rolling Restart Behind nginx

November 12, 2026

Close-up of an iridescent teal duck feather with a brown edge against a blurred green background

Apache Patches a Critical mod_http2 RCE Found Independently by Anthropic’s Scanner and Google Researchers, but 2.4.70 Shipped Nearly Five Days Earlier Without the Fix and the One-Line Patch Was Public for About 58 Hours Before the Advisory

November 12, 2026

An open Pacific oyster shell resting on a wooden chopping board

CNCF’s OpenShell-on-Kubernetes Guide Turns Agent Sandboxing Into a Two-Layer Split, but the Demo’s Seven Kyverno Policies Admit Secret Volumes, Oversized Init Containers and Unconfined Seccomp, and the OpenShell Release It Describes Is Five Behind the Current One

November 12, 2026

Close-up of the white locking bars and cam handles on the closed doors of a grey intermodal shipping container

Red Hat Published Eight Fixed Quay Releases Within Two Hours of Its CVSS 9.8 Signing-Key Advisory, but the CVE Page Still Lists No Fix, and the Sibling 9.9 Flaw’s Page Names Those Releases While None of Their Advisories Lists It

November 12, 2026

A white life ring hanging on a wooden post above an empty sandy beach and calm blue water, a rescue tool kept within reach before anyone needs it

How to Recover Lost Commits and Files in Git With reflog and fsck, and Snapshot Uncommitted Work Before a Script or AI Agent Can Wipe It

November 11, 2026

Trending Posts

5 months ago

Send Email From Linux CLI Without Running a Full Mail Server

4 months ago

Natural Raises $30 Million to Build Payment Rails for AI Agents

1 month ago

Anthropic Pulls Live Internet From All Internal Evals After Claude Sent Philadelphia Police a False Homicide Tip

5 months ago

The Meta AI Support Hack Was a Plain Old Authorization Failure

5 months ago

AI’s Biggest Backers Are Hedging the Frontier Model Race

4 months ago

Nvidia’s Vera Rubin Platform Turns AI Infrastructure Into a Tokens-Per-Watt Contest

2 months ago

Instinct’s AI Agent Quadruples to a $10 Billion Valuation Weeks After a Privacy Backlash

3 months ago

Have I Been Pwned Finds Half of ShinyHunters’ Carhartt Breach Data Was Synthetic

3 months ago

Global Cloud Infrastructure Spending Hits $143 Billion, Its Fastest Growth in Eight Years

2 months ago

A Hidden Elementor Feature Let a Single Link Forge a WordPress Admin Account

Close-up of an iridescent teal duck feather with a brown edge against a blurred green background

Apache Patches a Critical mod_http2 RCE Found Independently by Anthropic’s Scanner and Google Researchers, but 2.4.70 Shipped Nearly Five Days Earlier Without the Fix and the One-Line Patch Was Public for About 58 Hours Before the Advisory

November 12, 2026

16 Views

Close-up of the white locking bars and cam handles on the closed doors of a grey intermodal shipping container

Red Hat Published Eight Fixed Quay Releases Within Two Hours of Its CVSS 9.8 Signing-Key Advisory, but the CVE Page Still Lists No Fix, and the Sibling 9.9 Flaw’s Page Names Those Releases While None of Their Advisories Lists It

November 12, 2026

17 Views

A shredded-potato hash brown browning in a dark frying pan

Microsoft’s November Patch Tuesday Fixes 1,094 CVEs by Its Own Count, Not a “Record” 1,235, and the Only Exploited Bug Is an Outlook Flaw That Can Leak an NTLMv2 Hash Without the Usual Warning

November 11, 2026

23 Views

Empty orchestra pit with chairs, music stands and sheet music in the Teatro La Fenice, Venice

Vates Says Attackers Are Exploiting a Xen Orchestra Login Bypass Triggered by an Empty Cookie Object, and Its Advisory Changed the Fixed Versions From 6.10.0 and 6.9.1 to 6.10.1 and 6.9.2 Within the Day

November 10, 2026

33 Views

A red wall sign reading EMERGENCY POWER OFF beside a recessed red push button on a metal wall plate

N-able Takes N-central Offline After a Researcher Publishes Over 30 Alleged Zero-Days With Exploits, With No CVE IDs Yet and Three N-central Flaws Already on CISA’s Exploited List This Year

November 10, 2026

38 Views

An open Pacific oyster shell resting on a wooden chopping board

CNCF’s OpenShell-on-Kubernetes Guide Turns Agent Sandboxing Into a Two-Layer Split, but the Demo’s Seven Kyverno Policies Admit Secret Volumes, Oversized Init Containers and Unconfined Seccomp, and the OpenShell Release It Describes Is Five Behind the Current One

November 12, 2026

18 Views

Three meerkats standing upright on a red sand mound at dusk, each looking in a slightly different direction

Cloudflare’s QuePaxa Post Turns Leader Elections Into a Hedging Delay, but in a Simulation of the Paper’s Protocol a Five-Millisecond Hedge Costs Every Slot Its Fast Path, and the 2020 Outage It Cites Lasted Six Hours Because Database Replicas Had to Be Rebuilt

November 11, 2026

15 Views

International signal flags flying from the rigging of a white ship against a blue sky

DeepMind’s Signal Proofs Turn “Verified” Into a Scope Statement: One-to-One Sessions in a Command-Line Harness, 39 Hooked Routines on Trust, No Proof of Post-Quantum Healing, and a Bound That Goes Vacuous at About 25,000 Messages

November 10, 2026

42 Views

Curved video wall and operator desks in the BESSY II synchrotron control room, with a red Beam Dump label on the wall display

OpenAI’s Control Room Puts the Stop Switch in the Inference Layer and Bounds It at 35 Seconds, but the September Run It Cites Was Killed 2 Hours 29 Minutes After a Human Acknowledged the Alert

November 10, 2026

35 Views

Maya ceramic flask with a carved jaguar relief standing on a museum pedestal, catalogued as a poison bottle

AWS’s Memory-Poisoning Defense Turns Agent Writes Into a Weighted Score, but Drift Tops Out at 40 Points, the Demo’s 11-for-11 Runs on a Keyword Stand-In, and the Cedar Policies Do Not Parse

November 9, 2026

33 Views

Concrete dam wall with a footbridge along its crest holding back a calm reservoir below tree-covered hills, with a few people standing at the near end of the walkway

How to Shut Down a FastAPI Service Without Dropping Requests: Handle the Stop Signal, Drain Before You Close, and Survive a Rolling Restart Behind nginx

November 12, 2026

14 Views

A white life ring hanging on a wooden post above an empty sandy beach and calm blue water, a rescue tool kept within reach before anyone needs it

How to Recover Lost Commits and Files in Git With reflog and fsck, and Snapshot Uncommitted Work Before a Script or AI Agent Can Wipe It

November 11, 2026

13 Views

A hand date stamp with rotating rubber number wheels, a picture of a timestamp that travels inside every record, like the clock in a UUIDv7

How to Choose a PostgreSQL 18 Primary Key: Measure UUIDv4, UUIDv7, and bigint, and Switch an Existing Table to uuidv7() Without a Rewrite

November 10, 2026

25 Views

Front and back of a corroded lead customs seal stamped with letters and numerals, photographed side by side on a plain light background

How to Validate DNSSEC in Python From the Root Key Down and Tell a Secure Answer From an Unsigned One and a Forged One

November 9, 2026

34 Views

Red squirrel with a dark bushy tail pawing at grass among fallen leaves and spiky chestnut husks as it buries a nut

How to Set Cache-Control Headers in FastAPI and nginx, Prove What Browsers and Shared Caches Keep, and Stop Cross-User Cache Leaks

November 9, 2026

31 Views

Latest

A white life ring hanging on a wooden post above an empty sandy beach and calm blue water, a rescue tool kept within reach before anyone needs it

How to Recover Lost Commits and Files in Git With reflog and fsck, and Snapshot Uncommitted Work Before a Script or AI Agent Can Wipe It

2 days ago

13 Views

36 Min Read

Three meerkats standing upright on a red sand mound at dusk, each looking in a slightly different direction

Cloudflare’s QuePaxa Post Turns Leader Elections Into a Hedging Delay, but in a Simulation of the Paper’s Protocol a Five-Millisecond Hedge Costs Every Slot Its Fast Path, and the 2020 Outage It Cites Lasted Six Hours Because Database Replicas Had to Be Rebuilt

2 days ago

15 Views

34 Min Read

A shredded-potato hash brown browning in a dark frying pan

Microsoft’s November Patch Tuesday Fixes 1,094 CVEs by Its Own Count, Not a “Record” 1,235, and the Only Exploited Bug Is an Outlook Flaw That Can Leak an NTLMv2 Hash Without the Usual Warning

2 days ago

23 Views

11 Min Read

Featured

Close-up of an iridescent teal duck feather with a brown edge against a blurred green background

Apache Patches a Critical mod_http2 RCE Found Independently by Anthropic’s Scanner and Google Researchers, but 2.4.70 Shipped Nearly Five Days Earlier Without the Fix and the One-Line Patch Was Public for About 58 Hours Before the Advisory

16 Views

An open Pacific oyster shell resting on a wooden chopping board

CNCF’s OpenShell-on-Kubernetes Guide Turns Agent Sandboxing Into a Two-Layer Split, but the Demo’s Seven Kyverno Policies Admit Secret Volumes, Oversized Init Containers and Unconfined Seccomp, and the OpenShell Release It Describes Is Five Behind the Current One

18 Views