Cautionary tale: bricking an AP with a 4-byte SPI NOR write
How a single 4-byte dd write to the wrong MTD partition on an in-wall Ruckus H510 turned a software-recoverable experiment into a CH341A + SOIC-8 clip recovery job.
Posts
Porting the Ruckus H510 to OpenWrt
From serial console to persistent OpenWrt install on an EOL enterprise in-wall AP. The story of a from-scratch port of the Ruckus H510 to OpenWrt.
CVE-2026-42189: a pre-auth DoS in russh, found by fuzzing the right state
How designing the fuzz harness around real attacker surface, instead of pointing libfuzzer at every parser I could see, surfaced an unbounded allocation in russh’s keyboard-interactive auth in under 20 minutes.