Security 4 min read
PHP2Shell: two critical flaws fixed in PHP 8.4.27
On October 21, 2026 PHP fixed two flaws rated CVSS 9.2 that allow code execution without login. What happened and how to check you are patched.
Read the full article →Welcome to the workshop!
Notes from a workshop where we solder and code
I write about code, electronics and tools I have tried myself. In Czech and English, with no ads and no fluff.
Just published
Latest posts
-
Programming 2 min read
Laravel queues without Redis
Most projects get by with the database driver and never need Redis. Here is how to run a queue on MySQL, where it hits its limits and how to tell it is time to move on.
-
Electronics 5 min read
I2S microphone interference on I2C over a four-metre cable
The VEML7700 sensor worked on the desk, but at the end of a 4 m cable it lost most transfers. The culprit was the I2S microphone clocks in the neighbouring pair.
-
AI tools 9 min read
I wrote 192 tokens out of ten million
I ran a token usage audit on my Claude Code. Cache read is 96% and my own input is 0.002%. The script that measures it is in the article.
-
AI tools 6 min read
Anti-slop in Czech is not a blacklist
Why a list of banned phrases fails in Czech and what I built instead: the pis-cesky plugin for Claude Code and proofreading by an agent that does not know the brief.
-
Business 12 min read
Czech švarcsystém is not business
After 15 years as a freelancer I compare Czech companies with German clients: tracking, office, hourly rate, risk, and why it pays to keep looking.
-
Programming 8 min read
How not to break production when the data source changes by itself
A patch-to-production pipeline: external data validated by a contract in CI, an atomic symlink swap and rollback without re-extraction. A pattern for data outside your control.