Journal

Notes from the bench.

What we're building, what broke, and what we learned fixing it.

HTTP2Shell: one Brotli bug, four names — Node2Shell, Python2Shell, HTTP2Shell, Broccoli2Shell, CVE-2026-111497

Latest

HTTP2Shell: How One Brotli Bug Became Four "Shells"

Updated Oct 28, 2026. Status claims are accurate to that date and will move. On Wednesday 21 October 2026, the Node.js project shipped a security release, and by the weekend the same bug had been renamed three times.…

October 27, 2026 · 5 min read · Filed by Sandhu Santhakumar

Read more →

When a 100ms Redis Cache Fetch Suddenly Took 137 Seconds: A Production Postmortem

Introduction Redis is often considered one of the fastest components in a modern microservice architecture. Since it's an in-memory data store, developers generally expect cache retrieval times to be measured in…

July 17, 2026 · 3 min read · Filed by Pooja Jayan

Read more →

Have a project that needs this kind of thinking?

Start a project