<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Josh Finlay — Blog</title><description>Notes on networks, voice platforms, software and infrastructure.</description><link>https://josh.finlay.id.au/</link><language>en-au</language><item><title>The AI Bug Hunt Is the Best Argument for Open Source</title><link>https://josh.finlay.id.au/blog/the-ai-bug-hunt-is-the-best-argument-for-open-source/</link><guid isPermaLink="true">https://josh.finlay.id.au/blog/the-ai-bug-hunt-is-the-best-argument-for-open-source/</guid><description>If you&apos;ve looked at a CVE feed at any point this year, open source looks like it&apos;s on fire. PHP, NodeJS, OpenSSL, wolfSSL, Firefox, the BSD kernels, random libraries buried four layers deep in your dependency tree. Every week there&apos;s another critical with a CVSS score that makes you wince.</description><pubDate>Sat, 24 Oct 2026 04:35:00 GMT</pubDate><category>open source</category><category>ai</category><category>security</category></item><item><title>Reverse Engineering Mikrotik&apos;s new CMR server</title><link>https://josh.finlay.id.au/blog/reverse-engineering-mikrotiks-new-cmr-server/</link><guid isPermaLink="true">https://josh.finlay.id.au/blog/reverse-engineering-mikrotiks-new-cmr-server/</guid><description>Reverse Engineering Mikrotik&apos;s new CMR server</description><pubDate>Sat, 17 Oct 2026 00:04:00 GMT</pubDate><category>mikrotik</category><category>networking</category></item></channel></rss>