Site update: a few posts have been removed
TL;DR: hospital drugs are some shit, man
Xe Iaso's blog
Thoughts and musings from Xe Iaso
Latest posts
Extending immutability: deletion without losing data
Tigris has a pretty advanced replication scheme for writes. What happens when you actually need to delete things? Turns out deleting things is hard in distributed systems. Especially when you have a geo-replicated active-active database like Tigris does. We can (and do) use tombstones to mark where data once was, but how do you let people undo an accidental delete? Tigris wants to turn storage…
Anubis v1.27.0: Moenbryda Wilfsunnwyn
Anubis v1.27.0 (Moenbryda Wilfsunnwyn) is now available via Docker and direct download from GitHub releases. This release adds Windows Server support, automatically renames cookies based on settings to avoid infinite challenge loops, adds two new localizations, and more. Breaking change: cookie names are dynamically created based on cookie settings Anubis tries to avoid breaking changes as much as…
SigV4 authentication is surprisingly complicated
SigV4 looks simple: sign a request, check the signature. Then you implement canonicalization, clock skew, and a cache that isn't allowed to hold your key. Tigris is a drop-in replacement for AWS S3 (or GCS, anything S3API compatible). As such, we need to be fully compatible with both the mechanisms and semantics of S3 including the SigV4 authentication protocol . This is the lingua franca of…
Presigned URLs are technically a security vuln
A presigned URL is a replay attack you did on purpose. Replayable auth tokens are the textbook way to create vulnerable systems, but Tigris ships them as a first-class feature with presigned URLs and so does every other object storage system on the planet. However this isn't an oversight because presigned URLs turn a weakness into a feature. Replay attacks are a real problem and the classic fix is…
You should probably check on your smart appliances
TL;DR: is your refrigerator running malware? If so, you better catch it!
The console wars have been lost
Valve wins by doing absolutely nothing
Agents are monads (but not that kind)
I managed to write this without using the word endofunctor once. Wait, shit, I just did. Uhhh, oops!
"No way to prevent this" say users of only language where this regularly happens
In the hours following the release of CVE-2026-8461 for the project FFmpeg , site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix an out-of-bounds write in the MagicYUV decoder (libavcodec/magicyuv.c) caused by improper bounds checking, resulting in heap corruption, denial of service, and potential remote code execution when…
"No way to prevent this" say users of only language where this regularly happens
In the hours following the release of CVE-2026-55200 for the project libssh2 , site reliability workers and systems administrators scrambled to desperately rebuild and patch all their systems to fix an out-of-bounds write in ssh2_transport_read() due to a missing upper bound check on the packet_length field, resulting in heap corruption and potential remote code execution. This is due to the…