Setting up shop

Short version: I needed somewhere to put writeups that isn't a gist, a PDF attached to a bug report, or a thread nobody can find six months later.

what goes here#

• Fuzzing work. Harness design, corpus construction, coverage analysis, and the unglamorous part where you spend three days figuring out why the target won't fork.
• Vulnerability writeups. Root cause, reachability, exploitability, and an honest assessment of impact — including when the answer is "less than it looks."
• Reverse engineering notes. Mobile internals, IPC surfaces, and protocol archaeology.

what does not go here#

Anything unpatched or under embargo. Every writeup carries its disclosure status in the header block, and a post does not exist until that status says it can.

the stack#

Static site, no JavaScript, no analytics, no third-party requests:

zola build
rsync -az --delete public/ dxyz:/var/www/john.dearmas.xyz/

That's the whole pipeline.