✎By Guillaume · Tech
July to October 2026: my own map editor, blood and a real rewind, a ghost opponent that learns from how I play, and a forge to build your champion from paper-doll parts.
✎By Guillaume · Tech
June 2026: a real lobby, a stage select, rematches, and a buy phase where every player shops the same screen at the same time for drill, bramble, bomb and homing arrows.
✎By Guillaume · Tech
May 2026: Skyfall became a real match with rounds and scores, then got its mood: torch light and shadows, rain, lightning, a CRT filter, and a VHS replay of every round's last seconds.
✎By Guillaume · Tech
April 2026: after a month off, I made Skyfall feel good in the hands (coyote time, wall jumps, a dash, a real bow) and taught the network to send nothing when nothing moves.
✎By Guillaume · Tech
Where my archery brawler comes from: a year of prototyping in Defold, then a new repository on January 11, 2026, with six build targets before the first jump.
✎By Guillaume
The current unreleased work on Skyfall: a paper-doll character creator with 8 part slots, 14 pre-built champions, and looks that sync online.
Analysis · Security
How CVE-2026-109618 and CVE-2026-109619 work, why a PHP version check misleads, what the four-day exploitation puzzle means, and how to test your servers.
Analysis · Security
An AI extension that reads your open tabs does it through one of three Chrome scopes. Here is what each one exposes, when it triggers a warning, and how to audit it before installing.
Analysis · AI
robots.txt only stops polite crawlers. Here is how user-agent rules, Web Bot Auth signatures, rate limits and login gates compare for AI agents, and what each one misses.
Analysis · Security
How to prove a Magento or Adobe Commerce store is patched, hunt for webshells and tampered templates, and roll out the BlockStrap fix without breaking the storefront.
Analysis · Security
The first 72 hours after an actively exploited VPN, gateway or firewall zero-day: exposure scans, log checks, config diffs, containment gates and the evidence to keep.
Analysis · AI
C2PA manifests and audio watermarks are meant to label AI-generated sound and video. Here is how each one is embedded and verified, and where each one breaks.