Shane Hartman


Dirty Frag, Copy Fail, and the AI-Accelerated Exploit Pipeline

Two critical Linux kernel privilege escalation vulnerabilities dropped in the past two weeks. Both are deterministic, single-command root exploits. One of them was discovered with AI assistance. The other had

gstack in Practice: A Solo Developer’s Toolkit for AI-Assisted Engineering

I know what good software engineering looks like. I’ve been doing this for decades. But as a solo developer, I sometimes skip the process and rely on gut instinct and

Managing Claude Code Sessions Across Multiple Machines

SSH drops mid-session and your Claude Code context is gone. cs (Claude Session Manager) keeps sessions alive as persistent JSONL files, viewable and reconnectable across machines.

electric-directory-list: A Lightweight Emacs Popup Directory Browser

A lightweight Emacs popup directory browser that replaces the useless default C-x C-d binding with something you can actually navigate and open files from, without the full Dired overhead.

paredit-ts: A TypeScript S-Expression Structural Editor Library

A TypeScript rewrite of paredit.js that fixes the original's mutation bugs, removes all runtime dependencies, and adds full type safety throughout the S-expression structural editing library.

Emacs Unified: Consolidated Emacs Keybindings for VS Code

One VS Code extension that consolidates Emacs keybindings, Dired, and paredit support — forked from vscode-emacs-mcx with zero runtime npm dependencies and no supply-chain surface.

media-management-system: A Digital Asset Management Platform Built with Next.js

A full digital asset management system built with Next.js and Express. Handles images, social posts, and video reels across multiple platforms with a single interface. Running in production.

voicemail-transcriber: Whisper-Powered Voicemail Transcription via IMAP

A Docker service that monitors IMAP mailboxes, transcribes voicemail audio attachments with OpenAI Whisper, and forwards you the email with the transcription at the top instead of an audio file.

saslfail: Escalating Fail2ban Bans for Postfix SASL Authentication Attacks

Standard fail2ban bans just get waited out. saslfail uses escalating bans — 48 hours, 8 days, 32 days — backed by a persistent SQLite database that survives restarts and remembers

WordPress Full Site Editing: Database vs Theme Files

FSE template edits can land in the database or in your theme files — they look identical in the editor. Understanding the difference matters the moment you try to deploy,