Not all OAuth2 tokens are made equal: user vs app tokens explained
Understanding identity principals
AI agents and the new economics of account takeover
What my mother-in-law's hack taught me about AI-supercharged hacking
Unlocking Encrypted ZFS Volumes with a Passkey
Using Revaulter to safely unlock encrypted ZFS volumes at boot with WebAuthn and PRF
Business logic does not (usually) belong in the database
When to use stored procedures or complex queries, and when to keep logic in your application server
On Designing a Distributed Actor Framework
Notes from my experiences using, maintaining, and designing actor frameworks
Building with Distributed Actors
Among my favorite patterns is one you may not have heard of
High Availability over Tailscale with DNS-based Load Balancing
Using ddup for DNS load balancing and failover
A new architecture for Hereditas v0.3
A proposal for updating Hereditas
Essential Cryptography for JavaScript Developers
Here's what my second book is about, and why I wrote it
Why storing secrets and passwords in Git is a bad idea
And what you should do with your apps' secrets instead
Developing x86 apps on ARM with VS Code
Using Visual Studio Code remotes to develop on a different CPU architecture
Maybe we shouldn't want a fully decentralized web
Why I have stopped working with IPFS and the distributed web
Go, WebAssembly, HTTP requests and Promises
A guide to interacting with JavaScript from Go/Wasm
That time I accidentally built a spying app
A personal story about creating new products and their unintended consequences
Docker and Docker Compose on Raspberry Pi OS
How to install Docker on RPi 2, 3 and 4 with the new Raspberry Pi OS, for 32 and 64-bit