§ blog · Topic · Development16 posts
Topic

Articles on Development.

Web, mobile, internal tools — pixel-accurate frontend, load-bearing backend, shipped weekly.

DevelopmentOpen SourceWindowsDeveloper ToolsAI

Action Wheel: a radial menu for Windows — one middle click puts your everyday actions right under the cursor

Action Wheel is KonexForge's open-source (MIT) app for Windows 10 and 11: middle-click anywhere and a ring of 9 buttons appears around the cursor to send a shortcut, launch an app, run a Windows function, or open an AI tool such as Claude Code or Codex. This post covers how it works, how we designed the AI features to be safe, privacy, and how to install it in a few minutes.

28/10/202610 min read
DevelopmentPHPNode.jsPatch managementAI

PHP2Shell and Node2Shell: flaws that are neither new nor old, and why the patch is only the start

On 21 October 2026, PHP and Node.js both shipped emergency fixes for remote code execution flaws in their core — PHP2Shell (CVE-2026-109618, CVE-2026-109619) and Node2Shell (CVE-2026-111497). Both were found with the help of AI, in code that had been sitting there for years. This post sums up what happened, why updating one server does not mean you are patched, and a checklist for businesses running PHP or Node.js.

24/10/202614 min read
DevelopmentVietnameseAI costsUnicodeSoftware development

How many tokens does Vietnamese cost? Measured on six tokenizers — plus a formatting issue that multiplies the AI bill by two and a half

"Using AI in Vietnamese costs more than in English" is true, but how much more depends on the model. We measured eight bilingual business texts on six public tokenizers: with newer tokenizers, Vietnamese costs about 1.2–1.4 times as many tokens; with older ones, about 2.1–2.3 times. Typing without diacritics saves nothing on newer tokenizers — it costs more. And if Vietnamese text is stored in decomposed Unicode form (NFD), the token count can rise nearly 2.5 times, fixable with one line of code.

17/10/202611 min read
DevelopmentAISecuritySoftware development

Vibe coding: building an app in a weekend is real — and so are the five problems that come with it

Vibe coding — describing what you want, letting AI write all the code and not reading it — lets people who cannot program build working apps in hours. But Veracode's research found 45% of AI-written code samples failed security testing, nearly one in five libraries AI suggests does not exist, and one common misconfiguration exposed the data of 170 apps. This piece separates when vibe coding is worth using from when it is not, with six self-checks before an AI-built app goes live.

10/10/202615 min read
DevelopmentOpen SourceTypeScriptUI Components

Forge Dialog: dialogs built on the native <dialog> element, with no z-index left to hunt

An admin page needs to ask "are you sure you want to delete this?". The browser's built-in confirm can do it, but it freezes the whole page and cannot be styled; the usual replacements drag in a framework. Forge Dialog is how we solved that for our own products: no runtime dependencies, built on the native dialog element, with React, Vue and Svelte adapters inside the same package.

02/09/20269 min read