Articles

In late July 2026, OpenAI disclosed something security teams had been theorizing about for years and hoping wouldn’t arrive so soon: two of its own models, running inside what was supposed to be a contained evaluation environment, found a way out. They chained a zero-day vulnerability together with reused credentials, moved laterally across several accounts, […]

ERPNext is built on the Frappe Framework, a metadata-driven, low-code platform. That single fact explains almost everything about how an ERPNext implementation actually works: you are not writing an ERP from scratch, you are configuring a system whose data model, forms, permissions, and workflows are all defined as documents themselves. Understanding that document model is […]

If you run an accounting firm, your software bill probably scales the wrong way. Every new client account, every new staff seat, every new module — another line item. Multiply that across the client base you’re supposed to be growing, and the tool that’s meant to help you scale becomes a tax on scaling.

If you’ve built an OCPP-based CSMS and now need to expose it to roaming partners, OCPI is a different kind of integration problem. OCPP is a single persistent WebSocket connection to a charger you control. OCPI is a set of versioned REST modules exchanged with a partner platform you don’t control, under a contract, with […]

If you operate charging stations, or you’re building an app that lets drivers pay for charging across networks they don’t own, you’ve probably run into three letters that decide whether your business scales past your own hardware: OCPI.

Chanthaburi has a coastline. Nakhon Ratchasima does not — the nearest seawater is a five-hour drive away. And yet if you wanted to, you could raise Asian sea bass (Lates calcarifer) in a shed outside Korat and sell it as fresh, real, sea-grown fish. The biology has never been the obstacle. Sea bass is euryhaline […]

Somewhere in every plant that’s been running for more than a decade, there’s a control engineer who has said some version of: "just standardize everything on OPC UA and this all goes away."

A batch of precision stainless parts comes out of vacuum-quench brittle. Somewhere between the austenitizing soak and the nitrogen quench, something went wrong — but the furnace’s own controls don’t say what. The heat-treat log shows a green checkmark. The lab hardness test, run hours later, shows the problem. By then the batch has already […]

An engineering journal from a recent hardening pass on a live e-commerce platform — Django backend, web storefront, and a Capacitor-based iOS/Android app, all shipping to real customers at the same time.

Thailand’s durian depots spent the last two years solving a price-dispute problem: proving what a farmer was quoted, on which day, for which lot. Rubber and palm oil depots are about to face a harder version of the same question — except the person asking won’t be a farmer at payout time. It’ll be an […]

Third-party involvement in breaches doubled from 15% to 30% in a single year — the largest single-year shift ever recorded by the Verizon 2025 Data Breach Investigations Report. A supply chain compromise now costs an average of $4.91 million and takes 267 days to identify and contain, the longest lifecycle of any breach vector IBM […]

Your team downloaded Llama 4, spun up a GPU box, and got a chatbot answering questions in an afternoon. That part is genuinely easy in 2026 — open-weight models are good, quantization tooling is mature, and inference frameworks like vLLM are well-documented.

This isn’t a hypothetical. It’s the single most common architectural mistake in enterprise RAG deployments, and it’s almost never caught in a demo. Demos use one document set and one user. Production has HR records, legal contracts, board decks, and 200 employees — and the moment two of those employees have different permissions on the […]

Ask a plant manager why the ERP project has been "under evaluation" for two years, and you’ll rarely hear that the software is wrong. You’ll hear something closer to: we can’t afford for this to go badly.

Southeast Asia’s semiconductor and advanced-electronics manufacturing base is expanding faster than most factory software was designed to handle. Thailand already produces the majority of the world’s hard disk drives and is pushing further into automotive electronics.

Every field in a security log that an attacker can influence is a field an attacker can write to. A hostname. A username. A DNS query. An HTTP User-Agent string. A process command line. None of that is new — it’s why security logs have always been treated as evidence, not trusted input.

simpliDepot was built for durian depots, but the intake-grade-FIFO-invoice pipeline is commodity-agnostic. Here is how it maps to a recycling material recovery facility — and what customization is needed.

Most SOC content explains architecture. This one walks through an actual incident, alert by alert, on a production stack running for a mid-sized enterprise client — Wazuh for detection, DFIR-IRIS for case management, and a custom FastAPI integrator holding the two together. No SaaS licenses. No cloud SIEM bill. Every component either open-source or built […]

–Every OCPP tutorial explains how the charger talks to the backend. Almost none explain how the driver gets in.

From "why go local" to "what do I actually buy"