Cygan Labs
Practical computing for real life.
A practical home for self-hosting, systems, AI, useful tools, projects, and media-server fixes, written for people who want technology to be understandable and useful.
Start with what you need
Cygan Labs is organized by practical lanes. Pick the area closest to what you are trying to understand, fix, or build.
Projects
Public builds, utilities, experiments, and infrastructure pieces, including DriftLoom, SimpleQR, ShittyQR, Plex Requests, CyberChef, and more.
Self-Hosting
Field-guide pages for getting started, maintenance, remote access, backups, media stacks, monitoring, and sensible defaults.
Tools
Small workbench utilities like Link Cleaner, Markdown Cleaner, Heading Outline Checker, SimpleQR, ShittyQR, and hosted helpers that solve one clear problem at a time.
Fast starts: Link Cleaner, Markdown Cleaner, and Heading Outline Checker.
AI & Agents
Grounded writing on AI tools, schools and organizations, agent systems, permissions, local AI, and workflow reality checks.
Systems & Ops
Reliability, monitoring, access boundaries, operations judgment, and the habits that keep systems understandable over time.
Plex Help
Blurry video, buffering, remote streaming, quality settings, and device-specific Plex fixes for common playback problems.
Device guides: Chromecast, Samsung TV, Android TV / Google TV, and Roku.
Latest writing
- Prompt Injection Is Static Analysis NowCodeQL 2.26.0 added JavaScript and TypeScript detection for system prompt injection. The practical lesson is bigger than one query: prompt boundaries now belong in code review, CI, and release gates.
- Rulesets Are Repository Operations, Not Just GitHub SettingsWordPress/Gutenberg’s quiet move from branch protection rules to repository rulesets is a useful reminder: repo governance has to work for humans, apps, release bots, and auditors at the same time.
- Langflow’s KEV Listing Is a Warning About AI Workflow BoundariesCISA added a Langflow authorization bypass to KEV. The durable lesson is bigger than one patch: AI workflow systems need ownership checks wherever flow IDs, endpoints, and API keys meet.