Tutorials · News · Trends

Decode the logic behind the tech.

Practical, example-first tutorials and the trends that matter — written to actually make sense, with interactive bits you can play with.

Explore the blog Browse series

Featured

News

TypeSafe's Jev: An AI Model That Answers in Types, Not Text

TypeSafe's Jev returns typed decisions with probabilities instead of text, at $0.042 per million tokens. How it works, what the evals show, and where it fits.

Sep 16, 202613 min

Fresh off the press

Latest articles

View all

Web Dev

Rate limiting, abuse and denial of wallet

A negative ?limit= that returns every row in a table, why SQLite treats it as no limit at all, and the real clamp that fixes it in Linkstash.

Sep 17, 20266 min

Web Dev

Project: attack and harden Linkstash

A full security review pass over Linkstash's real endpoints, tying every fix from this series (SQLi, XSS, IDOR, timing, rate limits) into one checklist.

Sep 17, 20266 min

Web Dev

Supply chain: the attack you cannot code around

Why a vulnerability in someone else's dependency is still your production incident, and the concrete habits (lockfiles, audits, pinning) that limit the blast radius.

Sep 16, 20266 min

Web Dev

Secrets, env vars and the committed API key

Why a leaked API key isn't fixed by deleting it from the latest commit, how .env files actually protect you, and what to do the moment a secret leaks.

Sep 16, 20265 min

Web Dev

Broken access control and IDOR

Why returning 403 for someone else's resource is itself a leak, and why Linkstash returns 404 instead, with the real routes and requests to prove it.

Sep 15, 20266 min

Web Dev

Security headers and CSP: the free wins

What Content-Security-Policy, HSTS, and nosniff actually stop, why middleware order decides whether they apply at all, and where to add them in Express.

Sep 15, 20266 min

Find your lane

Browse by topic

18 posts

Never miss a decode.

Get new tutorials and the trends worth knowing, straight to your inbox.

Decode the logic behind the tech.

TypeSafe's Jev: An AI Model That Answers in Types, Not Text

Latest articles