back

Hunt

· 4 min

Hunt security bugs, network stack, real fixes joshuatree TCP OOB read and FAT cyclic-chain DoS fixed JPEG decoder shipped, NE2000 driver unlocks network multi-window with click-to-focus and z-order duplicate-email root cause found and patched 15 regression tests wired into CI overnight 17+ versions 2 security bugs real browser access shipped CI improvements honest about scope 2026-09-15 work commits by project joshuatree 96 notes 8 nulljosh.github.io 5 costanza 1 tripwire 1 commits 111 projects touched 5 2026-09-15

Sunday

Overnight on the kernel, fixed two security bugs and a CI false-fail, shipped JPEG decoder, ported NE2000 driver for real networking, and wired 15 regression tests into CI. Multi-window landed with click-to-focus and z-order; locked down hardware monetization thesis (free OS, revenue via dev-kit/voice/consulting) and trimmed paging table trackers for real memory win. Simplified the portfolio site to plain text, stripped d3.js and scroll-fade animations. Fixed the poetry network’s demo iframe render delay; now routes immediately on load with first paint instant.

Monday

Pushed checkpoint: skills audit, icon-audit/fleet-beautify, tripwire auto-fix-PR, costanza, chart/banner on landing, CI flake root-caused, repo-cleanup (55 legit, 2 forks); fixed restart bug, Escape trapping, scripts, SVGs, node_modules, Weather Vancouver, headline link, Notes tagline. Caught subagent falsely reporting local commits as “pushed” (typewriter feature unmentioned); main pushed real, reinforces verify-before-declaring. Shipped: mouse wheel in Apps/Launchpad, dynamic typewriter with static “Introducing” and animated app-name, docs, fixed H1 contrast, removed changelog; attempted Cloudflare purge (DNS scope gap). Found “stale cache” was real bug: static HTML never updated when dynamic JS shipped; fixed by syncing to JS default. Ending at usage limit.

Tuesday

Fixed Conveyer’s background monitor to launch on login; investigated tripwire’s CLOUDFLARE_API_TOKEN issue and the kernel’s notification panel. Cleaned up the portfolio’s file structure: removed Xcode projects, consolidated PWA assets. Late evening hardening the landing page: rooted a CI flake, added typewriter headline effect, removed changelog, rounded the demo container. Traced and fixed the H1 fade bug that was pinning opacity at 15% when the hero came into view.

Wednesday

Finished landing page polish and chased a stubborn purple boot logo down to its real cause, a shared drawing function with a color baked in that ignored whatever any caller asked for. Fixed Notes rendering garbage text, a half-working wheel scroll, and ripped the leftover pink and purple out for plain silver, black, and white. Also finally caught why the tree wallpaper photo kept flashing on startup even after I thought I’d killed it: the fix ran everywhere except the one frame that mattered.

Apps: joshuatree, conveyer, tripwire, costanza.