Give your workloads an identity too, with Tailscale
tsiam is another (small) nail in the coffin of static credentials
Francis is now stable and already running on 10,000+ installs
A distributed actor framework for Go that scales down as well as up
Not all OAuth2 tokens are made equal: user vs app tokens explained
Understanding identity principals
AI agents and the new economics of account takeover
What my mother-in-law's hack taught me about AI-supercharged hacking
Unlocking Encrypted ZFS Volumes with a Passkey
Using Revaulter to safely unlock encrypted ZFS volumes at boot with WebAuthn and PRF
Business logic does not (usually) belong in the database
When to use stored procedures or complex queries, and when to keep logic in your application server
On Designing a Distributed Actor Framework
Notes from my experiences using, maintaining, and designing actor frameworks
Building with Distributed Actors
Among my favorite patterns is one you may not have heard of
High Availability over Tailscale with DNS-based Load Balancing
Using ddup for DNS load balancing and failover
A new architecture for Hereditas v0.3
A proposal for updating Hereditas
Essential Cryptography for JavaScript Developers
Here's what my second book is about, and why I wrote it
Why storing secrets and passwords in Git is a bad idea
And what you should do with your apps' secrets instead
Developing x86 apps on ARM with VS Code
Using Visual Studio Code remotes to develop on a different CPU architecture
Maybe we shouldn't want a fully decentralized web
Why I have stopped working with IPFS and the distributed web
Go, WebAssembly, HTTP requests and Promises
A guide to interacting with JavaScript from Go/Wasm