AllPosts
12 articles on architecture, deep dives, and engineering culture.
My Firewall Was On. My Database Was Still Exposed.
A ransom note in my MongoDB, how a routine pre-launch check found it, and why a host firewall did nothing to protect a database running in Docker. What happened, how I fixed it, and a 10-minute checklist for anyone who runs their own server.
Why TypeScript Is Leaving JavaScript Behind
TypeScript 6.0 is the last compiler written in JavaScript. TypeScript 7.0 will be built in Go. The reason why is a precise diagnosis of where JavaScript breaks down as a platform for serious tooling — and what that means for every JS developer.
BullMQ: The Complete Engineering Guide to Job Queues
A ground-up engineering guide to BullMQ — why job queues exist, how BullMQ uses Redis as its backbone, the full job lifecycle, concurrency models, reliability patterns, and when to reach for something else entirely.
CRDTs From Scratch: The Engineering Guide to Conflict-Free Collaboration
A ground-up guide to Conflict-Free Replicated Data Types — from the fundamental problem of distributed state, through the mathematics of convergence, to the real-world tradeoffs of building collaborative systems at scale.
AI-Powered API Penetration Testing: Autonomous Security at Scale
How we built an autonomous API security testing framework that uses an LLM subprocess to craft payloads, analyze responses, and generate OWASP-compliant pentest reports — without writing a single test case by hand.
Building an Uptime Monitor: Architecture Decisions and System Design
What it actually takes to build a reliable uptime monitoring platform — the queue architecture that schedules thousands of checks, the data model behind 90-day history bars, why we treat incidents as a state machine, and the decisions we'd reconsider.
On-device AI in the Browser
A look at how we built a production-grade, multi-agent code reviewer that runs entirely on WebGPU.
JavaScript Temporal API: Fixing 30 Years of Date Nightmares
A hands-on guide to JavaScript's new Temporal API — what's broken with Date, how Temporal fixes it, and how to start using it today via polyfill.
WebRTC in 2026: What Changed and What Didn't
A deep look at WebRTC's evolution — QUIC transport, insertable streams, and why peer-to-peer video still fails in conference rooms with 20+ participants.
Building a Custom React Renderer from Scratch
How React-reconciler works, why you'd ever want to build your own renderer, and a working implementation that renders to a terminal canvas.