Voxfor Magazine.

Linux

curl --resolve and --connect-to Change Different Layers

Two successful HTTPS requests in the reproduced lab used the same URL, TLS name, certificate identity, and HTTP Host value. One reached…

Aug 14, 202617 min read

Linux

Restore Sparse Files With GNU tar, Then Verify the Holes

Two restored files can have the same length and SHA-256 hash yet consume radically different disk space. In the reproduced GNU tar…

Aug 14, 202614 min read

DevOps

cloud-init Uses Instance ID to Decide User Data Replay

Changing user-data bytes is not a new-instance event. By default, cloud-init decides whether per-instance modules may run from instance identity and cached…

Aug 13, 202618 min read

Windows

TCP 3389 Is Open. Now Prove It Speaks RDP

A successful connection to TCP 3389 proves one narrow fact: the tested network path completed a TCP handshake with a listener. It…

Aug 13, 202612 min read

DevOps

Test Alertmanager Routing Before the Wrong Team Gets Paged

Before editing a route, write down who must own each representative alert. The candidate configuration is acceptable only if native amtool evaluation…

Aug 13, 202611 min read

AI & Machine Learning

OpenAI Stream Usage Needs a Complete Final Receipt

The reproduced stream completed its HTTP body and ended with data: [DONE], yet it contained zero usage chunks. That is a successful…

Aug 13, 202617 min read

DevOps

A Green Kubeconform Run Can Hide Skipped Resources

Kubeconform exited 0 in the reproduced v0.8.0 lab while its JSON summary reported skipped=1. Nothing was invalid and no schema download failed;…

Aug 13, 202615 min read

Linux

qemu-img Check Can Pass a Corrupt Guest Filesystem

Two QCOW2 images returned No errors were found on the image. in the reproduced QEMU 10.0.11 lab. Only one contained a clean…

Aug 13, 202613 min read

DevOps

Redis PING Stays Green While Maxmemory Changes Writes

A Redis PING can return PONG while the next write is rejected or while an older key is silently removed. The difference…

Aug 13, 202614 min read

Security

An NGINX mTLS Gate Must Reject the Wrong Client CA

Successful admission is the wrong place to stop an NGINX mutual TLS test. The useful proof is the three-outcome contract around that…

Aug 13, 202615 min read

WordPress

Give Each WordPress Site a Flush-Safe Redis Cache

Two WordPress sites need two different Redis controls when they share infrastructure. A unique WP_REDIS_PREFIX prevents one installation from reading another installation's…

Aug 13, 202618 min read

Web Hosting

A Website Backup’s File Count Can Outweigh Its Size

Two website backups can contain the same payload bytes and still take materially different times to extract. Archive size measures bytes; restore…

Aug 13, 202615 min read

DevOps

Measure What Git Sparse Checkout Actually Saves

Git sparse checkout and partial clone reduce different things. Sparse checkout limits which tracked paths appear in the working tree. Partial clone…

Aug 13, 202613 min read

Database

SQLite’s Online Backup API Captures What cp Misses in WAL Mode

Both SQLite files in the reproduced lab returned quick_check=ok. Only one contained all four committed rows. The raw copy of live.db held…

Aug 13, 202614 min read

DevOps

Same S3 Bytes Can Produce Different ETags

Upload one file with a single PUT, upload the same bytes in two parts, and an S3-compatible store can return two different…

Aug 13, 202615 min read

Web Hosting

Inspect a cPanel Backup Before the Restore Window

A full cPanel backup can have a plausible filename and still be the wrong artifact for a restore window. Transfer damage, an…

Aug 13, 202616 min read

Website performance

Alt-Svc Does Not Prove HTTP/3 Works End to End

alt-svc: h3=":443" is an advertisement, not a completed HTTP/3 connection. It says that a client may try the origin over HTTP/3 at…

Aug 13, 202612 min read

Linux

SMTP DANE Ends at a Certificate Match, Not a DNS Record

An SMTP DANE check is complete only when four facts agree: DNSSEC authenticates the recipient domain’s MX routing (including any CNAME chain),…

Aug 13, 202615 min read

Linux

When a Linux ACL Says rwx but Effective Access Is r-x

user:65534:rwx #effective:r-x is not contradictory output. The named user's ACL entry stores rwx, but the access ACL's mask::r-x caps that entry. For…

Aug 13, 202615 min read

VPS Hosting

Can This VPS Run Nested KVM? Execute One Guest Instruction

A VPS can show vmx or svm in /proc/cpuinfo and still be unable to run a nested KVM guest. The CPU flag…

Aug 13, 202616 min read

Linux

Two Sources, Two Routes: Test Linux Policy Routing

Linux normally chooses a route from the destination address. Policy routing adds an earlier decision: the routing policy database, or RPDB, scans…

Aug 12, 202613 min read