Blog

Why security must be integrated from the design phase instead of bolted on at the end: threat modeling, OWASP, 12-Factor Apps, CVEs, and pentesting.

Why the all-powerful full-stack myth benefits companies and coding schools, and what it costs developers in quality, career growth, and mental health.

Generative AI has the hallmarks of an economic bubble and a real underlying technology: how to navigate the hype without falling for the apocalypse or the infomercial.

A practical guide to deploying changes to production without drama: feature flags, canary releases, the strangler pattern, and pipelines that stop bad code before it ships.

Why committee-based decisions tend to be inefficient, and what organizational research says about designing better collective decision-making processes.

Why technical discussions turn into identity battles — and how to survive without losing your craft or your sanity.