title: “Every React Developer Uses Hooks. Almost None Can Explain How They Work.” description: A from-scratch build of React’s hooks system reveals that the rules aren’t arbitrary — they’re inevitable Continue reading Every React Developer Uses Hooks. Almost None Can Explain How They Work.
Calypso is a post-quantum secure cryptographic system for conveyance and storage of confidential business information. I thought this would be a good time to give a general impression of what Continue reading Intro to Calypso
Week in Security: March 3-8, 2026 This week’s security news is a mix of critical infrastructure compromises, identity service flaws, and the emergence of AI agent exploitation patterns that are Continue reading Week in Security: March 3-8, 2026
Build Log (April 8, 2026) Today I implemented the first production-ready telemetry collectors for heka-insights-agent and wired them into the main polling loop. What I built Added an optimized CPUCollector Continue reading Build Log: Shipping a Lean Python Telemetry Agent (CPU, Memory, Disk)
This tutorial is for you if you have a map you obtained from some website or some book, you need to produce a .tiff file which is a localised version Continue reading How to georeference a map with QGIS
My previous post covered how FORMLOVA classifies 127 MCP tools into 4 safety levels. That was about making a single MCP server safe. This post is about what happens when Continue reading Your Form Response Just Created a GitHub PR: Cross-Service Orchestration With MCP
TF-IDF, Cosine Similarity, and Word2Vec By the end of this post, you’ll understand two fundamentally different ways of representing words as vectors: sparse count-based vectors from information retrieval, and dense Continue reading From Counting Words to Learning Meaning
I track my workouts in Liftoff, a gym tracking app. The app is great for logging sets and reps, but I wanted Claude to help me analyze my training — Continue reading I pointed Claude at mitmproxy and it reverse-engineered my gym app’s API
At 13:42 UTC on July 2, 2019, an engineer working for Cloudflare made changes to the regular ruleset that was being used by their Web Application Firewall. In under three Continue reading I scanned 20 popular Python packages for dangerous regex patterns. Here is what I found.
How to use Claude Code with multiple repositories without losing context If you work across multiple repos — a frontend, a backend, a shared library — you already know the Continue reading How to use Claude Code with multiple repositories without losing context
Originally published on Medium. Samsung TV Plus just crossed 100 million monthly active users. Netflix ended 2024 with 277.6 million subscribers worldwide, 70 million on its ad-supported tier. Amazon Prime Continue reading The 10 VAST Errors That Silently Kill Your CTV Ad Revenue
Web analytics is a critical component in building any successful website. Whether for SEO purposes or improving user experience, websites need to collect data in order to see how it Continue reading How to start collecting web analytics using only HTML and Filasys.
When working with Bash scripts, especially those that run commands taking a long time, having debugging enabled with set -x can provide insights on command execution. However, if a command Continue reading How to Ensure ‘set +x’ is Called After a Bash Function?
Recently, I added Open Graph preview images to DocBeacon share links. The problem was simple: when a DocBeacon link was shared in Slack or an email client, it often looked Continue reading I Added Open Graph Preview Images to DocBeacon Share Links
I’ve been running security scans on codebases for a while, and the thing that always bothered me about Semgrep wasn’t the false positive rate or the speed. It was that Continue reading Why I built attack-chain correlation on top of Semgrep and Joern
