Things I build, break, fix, and write about

Cloudflare Access for Workers finally fixes a mess I have tripped over more than once, where protection lived beside the Worker and drifted the moment a route or workers.dev URL changed. The new model...

Cloudflare Workers AI now gives you room to keep the whole mess in view, which is useful when the real problem is continuity, not raw token count. I care more about where the call sits in the flow,...

Gateway API v1.6 stops UDP feeling like an awkward add-on, but only if the listener, parentRefs, and backendRefs all agree. I like that TCPRoute and UDPRoute are finally stable, though the controller...

Kubernetes has a habit of accepting YAML that looks right and means something else entirely. KYAML is the stricter answer I wish I had earlier, with quoted strings and explicit flow style doing the...

A stolen Google Workspace OAuth tokens grant can outlive a password reset and keep reading mail quietly, which is the bit I dislike most. If it reaches Drive or a connected app, the damage is rarely...

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

macOS Screen Sharing looks harmless until TCP 5900 is left open, then the macOS Screen Sharing authentication bypass turns a convenience into an entry point. I would not keep that service facing the...

A bad update in a payment path is not just a glitch, it can be a route into customer accounts, and I have seen how quickly that gets ugly. The awkward bit with service provider transaction fraud is...

AI text watermarking sounds neat until you hit short replies, exact wording, and code, where the signal thins out fast. I have seen enough systems fail at the edges to know the awkward bit is usually...

Exposed routers make tidy little relay nodes, which is why SOCKS5 relay abuse keeps turning up in places that should have been boring. The hard bit is not spotting the box, it is untangling the...