Tun's Random Thoughts
BlogProfilePhoto Gallery

Explore. Create. Inspire.

Welcome to my personal corner of the internet. Here I share technical deep-dives and pieces of my life story.

📡 Subscribe via RSS

Fresh from the blog

Latest Stories


Almost Out of Memory Didn't Mean the RAM Was Gone

Almost Out of Memory Didn't Mean the RAM Was Gone

The warning said almost out of memory. I looked at RAM, because that is what that sentence usually means. RAM still had gigabytes free. That mismatch is the whole post. The warning was real. It was no...

linuxtechhomelabmemoryswap

Tun Win·Oct 13, 2026

Windows Update Certificates Expire in 2027. Your Stale Machines Go Dark First.

Windows Update Certificates Expire in 2027. Your Stale Machines Go Dark First.

Microsoft put a date on something most of us never think about. On October 8, the Windows IT Pro Blog announced that the certificates Windows Update uses to prove your PC is talking to the real Micros...

securitywindowssysadminpatchingcertificateswindows-update

Tun Win·Oct 13, 2026

Flowise Is Archived. Its Six September Advisories Will Never Get a Fix.

Flowise Is Archived. Its Six September Advisories Will Never Get a Fix.

On August 13, the FlowiseAI/Flowise repository was archived on GitHub and set read-only. Over 55,000 stars, more than 3,600 commits, done. The README now points to a "Future of Flowise" discussion thr...

securitytechself-hostinghomelabopen-sourceai-agentsvulnerability

Tun Win·Oct 13, 2026

September Shipped 1,169 CVEs. October Shipped 1. The Quiet Month Is the Dangerous One.

September Shipped 1,169 CVEs. October Shipped 1. The Quiet Month Is the Dangerous One.

Tomorrow, October 13, is Patch Tuesday. As of today, October's entire patch haul stands at four updates fixing exactly one CVE. September shipped sixty updates and, depending on which tracker you trus...

securitytechoperationspatchingemail-securitywindows-server

Tun Win·Oct 12, 2026

Before November 2, Treat `pull_request_target` as a Permission Boundary, Not Just a CI Trigger

Before November 2, Treat `pull_request_target` as a Permission Boundary, Not Just a CI Trigger

GitHub Actions workflows can look deceptively ordinary. A workflow starts when someone opens a pull request. It runs tests. It leaves a comment. It adds a label. Nothing about that sentence sounds lik...

techgithub-actionsworkflow-securitypublic-repositories

Tun Win·Oct 12, 2026

The R2 Reached Metrotown. Treat It as a New Corridor, Not a Guaranteed Faster Trip.

The R2 Reached Metrotown. Treat It as a New Corridor, Not a Guaranteed Faster Trip.

The R2 now reaches Metrotown from Phibbs Exchange, via Hastings Street and Willingdon Avenue. That is a meaningful new link across the North Shore, Vancouver and Burnaby — and a reason to pause before...

lifemetro-vancouvertransittranslinkrapidbustrip-planning

Tun Win·Oct 12, 2026

29th Avenue Station’s Elevator Is Closed: Make a Time-Aware Accessibility Plan, Not a Screenshot

29th Avenue Station’s Elevator Is Closed: Make a Time-Aware Accessibility Plan, Not a Screenshot

An elevator closure is not the kind of service change that fits neatly into a saved screenshot. TransLink says the elevator at 29th Avenue SkyTrain Station closed on September 29, 2026, for replacemen...

lifemetro-vancouvertransitwayfindingaccessibilitypractical-guide

Tun Win·Oct 12, 2026

Fortinet Shipped the FortiMail Patches. If You Stopped There, You Missed the Point.

Fortinet Shipped the FortiMail Patches. If You Stopped There, You Missed the Point.

Fortinet Shipped the FortiMail Patches. If You Stopped There, You Missed the Point. FortiMail 8.0.2, 7.6.7, and 7.4.9 landed on October 5, 2026. That is the good news. The disclosure of CVE-2026-10428...

securitytechincident-responsevulnerabilitypatchingfortimailemail-securitytutorial

Tun Win·Oct 11, 2026

Let's Encrypt Drops to 64-Day Certs in February. Go Grep Your Cron Jobs.

Let's Encrypt Drops to 64-Day Certs in February. Go Grep Your Cron Jobs.

On October 7, Let's Encrypt announced the first reduction to its default certificate lifetime in the organization's history. Staging starts issuing 64-day certificates on October 14. Production follow...

securitysysadminlets-encrypttlscertificates

Tun Win·Oct 10, 2026

Trending
  1. 1

    Windows Update Certificates Expire in 2027. Your Stale Machines Go Dark First.

    3
  2. 2

    Almost Out of Memory Didn't Mean the RAM Was Gone

    1
  3. 3

    Flowise Is Archived. Its Six September Advisories Will Never Get a Fix.

    1
  4. 4

    September Shipped 1,169 CVEs. October Shipped 1. The Quiet Month Is the Dangerous One.

    1
  5. 5

    Before November 2, Treat `pull_request_target` as a Permission Boundary, Not Just a CI Trigger

    1
  6. 6

    The R2 Reached Metrotown. Treat It as a New Corridor, Not a Guaranteed Faster Trip.

    1
  7. 7

    29th Avenue Station’s Elevator Is Closed: Make a Time-Aware Accessibility Plan, Not a Screenshot

    1
  8. 8

    Fortinet Shipped the FortiMail Patches. If You Stopped There, You Missed the Point.

    1

About

Discover articles on technology, creativity, and personal growth. Use the search or browse by tags to find what interests you.

© 2026 Tun's Random Thoughts. All rights reserved.