Things I build, break, fix, and write about

ionCube Loader is less mysterious once you stop assuming the obvious path works. The awkward bit is usually the seed, not the stream, and a small hashing mistake will give you a polished-looking pile...

mat2 0.15.0 finally treats HEIC as the awkward format it is, and I prefer that honesty. If you are relying on clean metadata removal, the ICC profile is still there, so you need to check the file...

Snowflake customer data exfiltration rarely looks dramatic at first, which is why I care more about the session shape than the login banner. If the identity, device, and timing do not line up, the...

Cloudflare WAF emergency release has landed with new block rules for attacks I would rather catch at the edge than in production. It is a useful backstop, not a fix, and if it starts firing on your...

A single locale entry in i18n.locales changed the shape of my request path, and Turbopack stopped behaving like I expected. The Next.js App Router middleware bypass was quiet, awkward, and exactly the...

Stay updated with the latest in tech! This digest covers AI ethics, auto industry shifts, and the impact of politics on technology, exploring today's pressing issues.

Cloudflare’s new WAF coverage is useful, but it is still just a filter in front of broken software. I care less about the headline and more about whether Cloudflare WAF rules for Nuxt Server Islands...

Cloudflare WAF scheduled release is mostly about rule IDs, and that is where the mess starts. The traffic may not change much, but the logs, suppressions, and reports will. I have seen enough of these...

Cloudflare WAF Managed Rules have changed in ways that matter, and I would not trust old labels to tell the full story. The SharePoint RCE rule now blocks by default, while some SSRF entries have...

Cloudflare AI Search starts useful and gets messy the moment the endpoint escapes into logs, browser history, and stale config. I prefer a custom domain and Access in front of it, because public...