All articles
Latest first
How to Update PHP on Ubuntu After a Security Release
A critical PHP security release is out. Here is how to update PHP on an Ubuntu server with apt, restart the right services and verify the patch.
Read article
CI/CD Pipeline for Security Patching: Why It Pays Off
A critical PHP security release lands. With a CI/CD pipeline, patching is an image tag change. Without one, it is a project. Here is what each one costs.
Read article
I Used Jev to Categorize 2,000 URLs for a Research Project
I ran 2,000 URLs from different sites through Jev over OpenRouter to categorize them for a research project. Here's the setup and where a decision model earns its place.
Read article
Stop Handing Your AI Agents (and Your Deploy Scripts) the Keys to Everything
Personal access tokens give deploy scripts and AI agents unlimited blast radius. The fix is short-lived GitHub App tokens minted per deploy and revoked seconds later.
Read article
End-to-End Encryption vs Encryption at Rest
Encryption at rest and end-to-end encryption are not the same promise. A practical design for real E2E data storage, and the tradeoffs most teams skip.
Read article
Break the Glass, Not the Trust: A Developer's Case for Structured Data Access
How the "break-glass" exception process resolves the oldest tension in software delivery — the need for real data versus the need to protect it — and why it deserves a place in every DPDPA compliance...
Read article
Dead Letter Queue (DQL) Debug, Reprocess, Never Lose a Job
Retries run out eventually. A Dead Letter Queue catches what's left — but it's not a magic bullet. Redrive policies, poison jobs, FIFO caveats, and why observability matters.
Read article
How I Stopped Getting Surprised by My Own Code
Explore first, document the plan, then build. This one shift stopped my code reviews from being full of surprises — and made every feature genuinely easier to trust.
Read article
Logging Is Infrastructure: What I Learned Wiring Pino Into a NestJS API
Logging felt like a boring swap — console.log for pino. Instead it unlocked structured, traceable, secure production logs. Here's why AsyncLocalStorage, JSON, and request IDs change everything.
Read article