What started as “I’ll just fork SnappyMail” somehow turned into a full-blown webmail project with modern PHP, CalDAV, better search, undo-send, tighter security and a rapidly growing user base. Tachyon is what happens when software archaeology, self-hosting and poor estimates of project scope collide.
2026
14
May
The WordPress Backdoor That Forgot to Be PHP
A WordPress backdoor hidden in functions.php is bad enough. One pasted after the closing ?> tag is almost poetic: malware that forgot to become PHP and instead printed its own confession. Here is a technical walk-through of a hidden admin account, query tampering, fake user counts, and the grim beauty of neglected WordPress hygiene.
