Arbitrary code execution via Rockchip U-Boot's BMP RLE8 decoder


Rockchip's 2017.09 U-Boot fork has an out-of-bounds write in its BMP RLE8 DELTA handler that gives an attacker full control of the write pointer and 16-bit value per write, enough for arbitrary code execution.
Read more ⟶

Moving from Raspberry Pi 5 to DXP2800


Notes from transitioning a small home server from a Raspberry Pi 5 to a DXP2800.
Read more ⟶

Disney 2026 Retrospective


Lessons learned from a two-week Walt Disney World stay at Coronado Springs in Jan/Feb 2026: what worked, what didn't, and what I'll change next time.
Read more ⟶