Building scalable products, clean systems, and thoughtful experiences.

I design reliable software across web, mobile, and cloud. Explore the latest insights, engineering notes, and a focused portfolio of production work.

What I work on

Read the blog View portfolio

Years

50+

Projects

Stacks

Blog

Latest writing

View all posts

Apr 17, 202601

31 WordPress Plugins, One Flippa Sale, and an 8-Month Time Bomb

In April 2026, WordPress.org closed 31 plugins after an attacker bought a trusted plugin portfolio on Flippa, shipped a dormant PHP deserialization backdoor, and activated it eight months later — with command-and-control resolved through an Ethereum smart contract. This post breaks down how the attack actually worked, why 96% of WordPress vulnerabilities live in plugins, and how Cloudflare's new EmDash CMS attempts to fix the architecture with capability-scoped sandboxes.

Apr 16, 202602

CORS Isn't Blocking You — Your Browser Is. Here's What's Actually Happening

Most developers treat CORS errors as a server configuration mystery. They're not. Your server responded fine — your browser intercepted the response. This post covers the CSRF attack CORS was built to prevent, how origin is actually defined, why Postman never sees CORS errors, how preflight requests work, and what every response header actually means.

Apr 13, 202603

Stop Using Timestamps as IDs — Your Distributed System Is One Race Condition Away From Chaos

Auto-increment integers, UUID v4, and created_at-based ordering are everywhere — and they all have silent failure modes in distributed systems. This post breaks down exactly where each approach breaks, why it matters, and which ID strategies (ULIDs, Snowflake IDs, UUID v7) actually hold up under real production load.

Social

LinkedIn highlights

View profile

Mar 23, 202601

Nvidia Just Made AI Agents Enterprise-Ready. Here's What Actually Happened.

Jensen Huang called OpenClaw 'the most important software release, probably ever' — comparing it to Linux, HTML, and Kubernetes in the same breath. Bold claim. But after digging into what Nvidia actually built around it, I think he might be right.

Mar 17, 202602

5 Brutal Truths Nobody Taught Me About Programming (But Should Have)

I've been writing code for years. Read the books. Studied the patterns. Nailed the algorithms. And yet — the lessons that actually made me a better developer? None of them came from a textbook. Every single one came from something breaking, a user doing something unexpected, or me staring at a screen at midnight wondering where it all went wrong.

Mar 16, 202603