Blog

How I Burned 164K Vercel ISR Writes in 2 Hours

A traffic spike burned 1 month of Vercel ISR quota in 2 hours. The root cause wasn't ISR — it was a broken caching chain. And fixing it revealed a second problem.

May 7, 2026

#Next.js#Vercel+4

Vibe Coding Is Shipping. AI Is Finding Zero-Days. Your App Is in the Middle.

Featuredanalysis

13 min read

SecurityAIEngineeringWeb DevelopmentBackendInfrastructure

Vibe Coding Is Shipping. AI Is Finding Zero-Days. Your App Is in the Middle.

AI can now assist in systematically uncovering zero-day vulnerabilities across every major OS and browser. Vibe coders are shipping production apps without knowing what SQL injection means. Here's the structural gap nobody is talking about.

Chrome Installed a 4GB LLM on My Machine. Here's What I Found Out.

I was clearing disk space and found Gemini Nano silently living in my Chrome config. What it is, why it's there, and what compression research tells us about where this is heading.

Apr 3, 2026

#Chrome#Gemini Nano+3

Cisco Got Breached. They Ran a Security Scanner.

Featuredanalysis

8 min read

SecurityWeb DevelopmentInfrastructureBackend

Cisco Got Breached. They Ran a Security Scanner.

Cisco didn't get phished. They didn't misconfigure a server. They ran Trivy — a vulnerability scanner — and that was enough. Here's the 12-day chain that nobody connected until it was too late.

Web DevelopmentSecurity

Claude Leak → Axios RAT: The Supply Chain Story Nobody Connected

On March 31, 2026, Anthropic leaked 512,000 lines of Claude Code source. The same day, a North Korean RAT hit axios — the package Claude Code depends on.

Mar 31, 2026

#npm#Supply Chain Attack+3

We're in AI's Cyberpunk Moment — and Memory is the Final Boss

Featuredanalysis

7 min read

AIEngineering

We're in AI's Cyberpunk Moment — and Memory is the Final Boss

AI models have outpaced the hardware beneath them. Google's TurboQuant shows where the real battle is being fought — not in raw compute, but in memory and context.

Zapier for Developers: Building an AI Workflow Engine with Fastify, BullMQ, and YAML

Why most automation tools fail developers—and how I built Automesh, an open-source, AI-powered workflow engine with Fastify, BullMQ, and YAML.

Startup EngineeringCareer

What Being a Founding Engineer Actually Means

Beyond the title — what a founding engineer really does, the tradeoffs involved, and the realities of building systems in an early-stage startup.

Feb 11, 2026

#Startup#Engineering+3

How I Built My Developer Portfolio — From Idea to Production

Featuredanalysis

8 min read

Portfolio

How I Built My Developer Portfolio — From Idea to Production

A deep dive into building a modern developer portfolio with Next.js 16, Framer Motion, Three.js, and an interactive terminal. The story behind the design decisions, tech stack choices, and the journey from concept to production.

SecurityInfrastructureAI

The Signatures Were Valid. That's the Problem.

The TanStack attack published malicious packages with valid SLSA provenance signatures. The attacker didn't steal credentials. They used the legitimate pipeline to sign their own payload.

May 13, 2026

#Security#npm+4