https://aaronsawit.com/writing/Aaron Sawit is a cybersecurity engineer in Singapore. He builds free learning tools used by students and teachers, runs his own infrastructure, and writes up the root causes he finds. https://aaronsawit.com/writing/cloudflare-kv-cannot-rate-limit/https://aaronsawit.com/writing/cloudflare-kv-cannot-rate-limit/Thu, 10 Sep 2026 00:00:00 GMTA per-minute cap on an AI feature in a free tool for students let through far more requests than the cap. The counter was correct. The reads were a minute old. https://aaronsawit.com/writing/iphone-bypassing-dns-filter-private-relay/https://aaronsawit.com/writing/iphone-bypassing-dns-filter-private-relay/Wed, 09 Sep 2026 00:00:00 GMTAd blocking worked on every device except one iPhone, which sent no DNS queries at all. Packet captures on the VPN interface showed where the lookups were really going. https://aaronsawit.com/writing/jellyfin-ffmpeg-extension-picky/https://aaronsawit.com/writing/jellyfin-ffmpeg-extension-picky/Tue, 08 Sep 2026 00:00:00 GMTSome live TV channels played in every other player and died in Jellyfin with a fatal player error. ffmpeg was refusing video segments because their URLs did not end in .ts. https://aaronsawit.com/writing/docker-containers-lose-gpu-after-daemon-reload/https://aaronsawit.com/writing/docker-containers-lose-gpu-after-daemon-reload/Mon, 07 Sep 2026 00:00:00 GMTEvery GPU container on my server lost its device access at the same moment and nothing logged an error. The trigger was an unrelated systemctl daemon-reload. https://aaronsawit.com/writing/xemu-please-insert-an-xbox-disc/https://aaronsawit.com/writing/xemu-please-insert-an-xbox-disc/Sun, 06 Sep 2026 00:00:00 GMTDisc images dumped from my own original Xbox games would not boot in the emulator. The images were fine. They were the wrong kind of fine. https://aaronsawit.com/writing/headless-game-streaming-on-pascal/https://aaronsawit.com/writing/headless-game-streaming-on-pascal/Sat, 05 Sep 2026 00:00:00 GMTStreaming games from a server with no monitor attached, on a GPU that current software has stopped compiling for. Four separate problems, each with one specific cause. https://aaronsawit.com/writing/llama-cpp-vs-ollama-on-pascal/https://aaronsawit.com/writing/llama-cpp-vs-ollama-on-pascal/Sun, 30 Aug 2026 00:00:00 GMTA 44 percent speed-up on nine-year-old GPUs from changing the runtime and four settings, plus the settings that made things worse and the context length that passed every check and then crashed. https://aaronsawit.com/writing/arcanedoor-breakdown-for-blue-teams/https://aaronsawit.com/writing/arcanedoor-breakdown-for-blue-teams/Wed, 28 May 2025 00:00:00 GMTOver the past few weeks, Cisco and Microsoft dropped a joint bombshell: a stealthy state-sponsored campaign called ArcaneDoor that’s been flying under the radar since… https://aaronsawit.com/writing/nist-csf-and-iso-27001/https://aaronsawit.com/writing/nist-csf-and-iso-27001/Fri, 20 Dec 2024 00:00:00 GMTIn today’s fast-evolving cybersecurity landscape, organizations need structured frameworks to manage risk, ensure compliance, and strengthen security policies . Two… https://aaronsawit.com/writing/sans-sec504-how-i-prepared/https://aaronsawit.com/writing/sans-sec504-how-i-prepared/Wed, 27 Nov 2024 00:00:00 GMTTaking the SANS SEC504: Hacker Tools, Techniques, and Incident Handling was one of the most challenging yet rewarding experiences of my cybersecurity journey. I want to… https://aaronsawit.com/writing/hunting-dll-hijacking-with-sysmon/https://aaronsawit.com/writing/hunting-dll-hijacking-with-sysmon/Sat, 28 Sep 2024 00:00:00 GMTAnalysing evil with Sysmon and Event Logs  Qn: Replicate the DLL hijacking attack described in this section and provide the SHA256 hash of the malicious WININET.dll… https://aaronsawit.com/writing/how-wannacry-changed-the-industry/https://aaronsawit.com/writing/how-wannacry-changed-the-industry/Thu, 12 Sep 2024 00:00:00 GMTThe Big Hit Imagine a boxer delivering a punch that hits harder than Mike Tyson’s blow to Evander Holyfield. That’s pretty much what WannaCry felt like when it first… https://aaronsawit.com/writing/elastic-stack-siem-lab-notes/https://aaronsawit.com/writing/elastic-stack-siem-lab-notes/Sun, 08 Sep 2024 00:00:00 GMTIntroduction To The Elastic Stack Qn: Navigate to http://[Target-IP]:5601 , click on the side navigation toggle, and click on “Discover”. Then, click on the…