Blog

Research log.

Notes, write-ups, and things worth keeping around.

CVE-2026-81376 VSCode RCE: Cracking Your settings.json Through Nested Workspace Settings (Coming Soon)

2026/09/10

This issue had been hiding in VS Code's Workspace Trust mechanism for quite a while. It was a Security Feature Bypass that could be exploited to achieve remote code execution.

iPAS 資安工程師中級考試心得

2026/06/22

今年在等 9 月上大學的時間剛好有空檔，想說中間也沒什麼特別的事情。看到政府的 iPAS 資安工程師考試費用也蠻便宜的，只要 2 千塊，覺得可以報名來考一下。