Patch Gap

Security incidents, rebuilt from the receipts.

Each Case File rebuilds an incident (a leaked bug, a disclosure fight, a poisoned package, a breached platform) from the primary sources: advisories, postmortems, commits, mailing-list posts and timestamps. Who knew what, when, and what it means for the software you run.

The name is the window between a bug and its fix, and between the fix and your update.

How we work:
• Every screenshot shows where it came from, and every source is linked in the video’s description.
• We say what’s confirmed, what’s disputed and what nobody knows yet.
• We explain how attacks worked and how to defend against them, never how to run one.
• Corrections go in the pinned comment.

For developers, ops people and anyone deciding whether to patch tonight.

The duck is here because every bug gets explained to a rubber duck eventually.