root@labs:~$ make something

What we build, and what we think about it.

An after-hours lab: homelab, 3D printing, electronics and software. We build things, we write down what actually happened, and sometimes the result is worth giving away.

./myrgb ↓ download cat blog/latest

new MyRGB 0.2.1, one app for every brand of RGB on your desk. Free, Windows, open beta.

root@labs:~$ ./status.sh
✓ site rebuilt and online
✓ latest post: A 16-year-old router bug with no CVE, because Broadcom will not issue one
… in progress: MyRGB 0.2.1 beta
✓ forum: Home networking: what’s actually running your network?

readme

Root Labs is where the fun stuff goes. A lab for after-hours engineering: homelab, 3D printing, electronics, software, and whatever we get our hands on next. No clients, no tickets, no invoices. Projects, experiments, and honest write-ups of both.

blog --latest

2026-10-24 homelab A 16-year-old router bug with no CVE, because Broadcom will not issue one A flaw in Broadcoms WPS code since at least 2010 lets anyone in radio range get root on your router… read → 2026-10-23 homelab 1,413 fixes in one month. AI found them. You still have to install them. Microsoft fixed 1,413 vulnerabilities in October and says AI is why. Finding bugs got fast. Staging a patch and rebooting… read → 2026-10-21 homelab Two critical RCEs in PHP, and why your version number is lying to you Two unauthenticated RCEs in PHP, both CVSS 9.2, patched October 21. If php -v says 8.3.6 and the advisory says… read → 2026-10-21 news MyRGB 0.2.0: we built the RGB app we wanted MyRGB 0.2.0 beta is out. One app that lights every brand on your desk as one canvas, so you can… read → 2026-10-18 media-server Plex patched this in August. Exploit code dropped Friday and 49,000 servers were still open. Exploit code for a four-bug chain in Plex Media Server went public on October 16 and attackers were using it… read →