Hi, I'm Jake.

jstgtech.com — this site

A static blog and portfolio on Astro 7 + Tailwind 4, deployed to S3 + CloudFront with Terraform-managed infrastructure and full CI/CD.

AI content pipeline with human approval

GitHub Actions workflows where Claude researches and drafts blog posts daily, and nothing publishes until a human approves it in the CMS.

Serverless GitHub OAuth for Sveltia CMS

A stateless AWS Lambda that self-hosts the GitHub OAuth handshake for a git-based CMS — no third-party auth service, secrets in SSM.

Aug 11, 2026

Cloud roundup: New ransomware exploits N-central bug

Microsoft ties new StormEncryptor ransomware to an N-able N-central auth bypass, plus new AWS EC2 health checks and DRS UEFI support for Linux failovers.

Aug 10, 2026

CVE-2025-30066: The GitHub Action Tag You Trusted Lied

A compromised maintainer token let attackers rewrite tj-actions/changed-files version tags, dumping CI/CD secrets from thousands of repos into public build logs.

Aug 16, 2026

Cloud roundup: macOS Screen Sharing bug now under attack

A patched macOS Screen Sharing flaw is being exploited to plant crypto miners, a Windows Defender bypass has no fix yet, and EC2 gets built-in app health checks.

Aug 16, 2026

Cutting NAT gateway costs with VPC endpoints that actually help

How gateway and interface VPC endpoints replace NAT gateway traffic for AWS API calls, what they cost instead, and which traffic still has to go through NAT.

Aug 14, 2026

Cloud roundup: S3 finally names the policy that denied you

AWS S3 access-denied errors now name the exact policy ARN, Client VPN gets a scriptable CLI, and OpenAI ships authorized offensive-security models on Bedrock.