Blog

Code by day, reflect by night. A developer's notes on building software and living deliberately.

28 posts found

Redis Is the Only Infrastructure You Need (For Most Apps)

Message queues, real-time events, caching, rate limiting, sessions — Redis handles all of them. Stop over-engineering your stack.

March 5, 20267 min read

OAuth pitfalls, WebSocket security, and Content Security Policy — the final layer of web security fundamentals.

March 5, 202614 min read

Không phải sự trưởng thành nào cũng êm ả. Có thứ bình yên chỉ đến sau khi bạn không còn sức để sụp đổ nữa.

March 1, 20263 min read

Session hijacking, SSRF, logging blind spots, and Docker security — the mistakes that happen beyond your application code.

February 27, 202612 min read

CORS misconfigurations, missing security headers, open redirects, and more — the subtle security gaps hiding in your web app.

February 25, 202612 min read

1 of 6