Writing on backend architecture, Laravel, API security, and engineering practices. Free to read here — also available on Medium.
More articles available on Medium — 200+ posts on backend development, security, and engineering.
View all on Medium32 of 220 posts
Three years ago a client asked if someone else could handle a deployment while I was on leave. Their project manager had a simple change. A config update for a new payment gateway endpoint. They sa...
There is a version of this conversation happening in engineering teams right now. Someone proposes deploying a new service. A senior developer asks, “Are we running this on Kubernetes?” The answer ...
Every Friday at 12:15, I am doing arithmetic.
The client audit arrived as a 40+ page PDF document. Somewhere around those pages was a section titled“Secure Software Development Lifecycle Compliance.”Under it, a checklist. Twelve items. Each on...
You opened the pull request. Two teammates glanced at the diff. Someone typed LGTM. The pipeline went green. You merged.
Your login form has rate limiting. Your password reset endpoint has rate limiting. Your API has rate limiting. So why does your 2FA endpoint treat OTP verification like it’s unhackable? It’s not, a...