Writing

Thinking out loud about building software, architecture decisions, security, developer tools, and lessons learned.

Secure software development using zero trust

Zero trust usually means networks and infrastructure. Here's what it looks like applied to application code and what it means for AI systems and regulated environments.

Apr 15, 2026 · Security

Process 1M+ records in ServiceNow without killing your instance

A decision framework for large-scale data operations in ServiceNow, and the event-driven recursion pattern I use when nothing else works.

Mar 13, 2026 · Engineering

Cognitive debt

AI doesn't automatically create cognitive debt. It creates cognitive debt when developers skip the understanding step.

Mar 9, 2026 · Engineering

The five dimensions of cognitive work

We track lines of code, tickets closed, PRs merged. Nobody tracks the four hours you spent holding a system in your head to find a one line of code fix.

Feb 21, 2026 · Engineering

The myths and realities of open source software security

"Many eyes" sounds reassuring until you look at who's actually watching. What really makes open source secure (and what doesn't).

Feb 21, 2026 · Security

Slow cook your ideas

I’ve been using LLMs to simmer ideas before I build. The result is better output and a stronger mental model.

Feb 15, 2026 · Engineering

Send cyber junk to your Pi-hole: Protect your home network

How an embarrassing movie night led me to discover what my home network was leaking, and how Pi-hole fixed it.

Feb 12, 2026 · Security

Choosing a programming language for your next project

A framework for greenfield decisions when there's no legacy code forcing your hand. Trade-offs over trends.

Nov 5, 2024 · Engineering

Techniques for protecting web APIs from common threats in 2024

APIs are the most common threat vector in 2024. Here's what actually stops attacks in production.

Nov 1, 2024 · Security

From black box to open book: Understand your browser's behavior using net logs

Your browser knows more than it shows you. How to use network logs to troubleshoot, evaluate, and secure what's really happening.

Oct 31, 2024 · Tooling

5 practical tips for secure web development

Security feels like an afterthought when deadlines are tight. A few guidelines that fit into the way you already work.

Oct 31, 2024 · Security

Infrared cameras: What you need to know

IR cameras are everywhere now — laptops, phones, doorbells. Three things users should think about before trusting them.

Oct 29, 2024 · Privacy

Delaying the latest software update? Think twice

Skipping updates feels safe until it isn't. Why "the current version works fine" is a more dangerous stance than it sounds.

Oct 29, 2024 · Engineering

The rise of low code and citizen developers: Will developers become redundant?

Low-code makes app creation feel like building a slide deck. What that means for the people who write actual code.

Oct 25, 2024 · Industry

Data privacy: How developers can prepare for the future

Privacy laws are catching up to how data actually gets collected. What engineers should be doing now before they're forced to.

Oct 24, 2024 · Privacy

Are larger, monolithic functions actually better?

The "extract everything into small functions" reflex isn't always right. When keeping things together actually makes code better.

Oct 23, 2024 · Engineering