Writing about the things I actually build and run.
Agentic coding, self-hosted infrastructure, and software — by Roman Hoffmann
The Asus DSL-AC87VG: Reverse Engineering a CGI API
New ↗
No JSON API — just raw JavaScript. How I extracted router data from the Asus DSL-AC87VG using regex, a CSRF token hidden in a GIF, and positional arrays.
Recent Posts
- The Speedport Plus 2: Reverse Engineering an Encrypted APIThe Speedport Plus 2 encrypts its API with SJCL AES-CCM. No docs, no SDK — just DevTools, a five-step auth flow, and a Python client.
- How I Hardened a Production Server with Claude CodeA full security audit on a self-hosted mail and web server using five parallel Claude Code agents. 22 findings, 19 fixes, and the blind spots that checklists miss.
- How Agentic Coding Started a Terminal RenaissanceWhy agentic coding is driving a terminal renaissance, and what it means for how developers and non-developers work with AI in 2026.
- Most Claude Code Skills Are UselessMost Claude Code skill libraries add noise instead of capability. A systems-level critique of AI skill design and when skills actually make sense.
- The Dopamine Trap of Vibe CodingWhy vibe coding feels addictive: variable rewards, instant empowerment for beginners, endless prompt loops, sleep disruption, and fragile code quality in AI-assisted development.
- poiu.dev — A Local-First Infinite Whiteboard With No ToolbarWhy I built poiu.dev, a local-first infinite whiteboard with IndexedDB storage, keyboard shortcuts, markdown rendering, image paste, and PNG export.
- MOTD Dashboard with Claude Code in One PromptBuild a custom SSH login dashboard with Claude Code to replace Ubuntu's default MOTD with system health monitoring, Docker status, firewall info, and pending security updates.
- Self-Hosted Mail Server with Mailcow and Claude CodeHow I set up a self-hosted mail server with Mailcow and Claude Code — UDP port 53 fix, Nginx reverse proxy, DNS authentication, and full security audit.
- Hello, codn — Hit Lighthouse 100 with Almost No JSA personal dev blog built with Astro and Nginx: static HTML, tiny JS, self-hosted fonts, and built-in SEO.