OAuth vs JWT: Choosing the Right Tool for Developers
I’ve implemented both OAuth and JWT in production systems across my career—from enterprise SSO rollouts to lightweight API auth for side projects. The single most common mistake I…
Article archive
More articles
Browse older engineering guides and field notes, page 21.
Continue browsing
Articles
PassForge: Building a Password Workstation Beyond One Slider
Generate passwords, passphrases, test strength, and bulk-generate — all in one privacy-first browser tool with zero dependencies.
Enterprise Security at Home: Wazuh & Suricata Setup
I run Wazuh and Suricata on my home network. Yes, enterprise SIEM and IDS for a homelab—it's overkill by any reasonable measure. But after catching an IoT camera…
YubiKey SSH Authentication: Stop Trusting Key Files on Disk
Configure FIDO-backed OpenSSH keys with correct macOS requirements, recovery planning, and agent-forwarding tradeoffs.
Master Docker Container Security: Best Practices for 2026
Your staging environment is a dream. Every container spins up flawlessly, logs are clean, and your app hums along like a well-oiled machine. Then comes production. Suddenly, your…
Pre-IPO API: SEC Filings, SPACs & Lockup Data
I built the Pre-IPO Intelligence API because I needed this data for my own trading systems and couldn’t find it in one place. If you’re building fintech applications,…