Building scalable products, clean systems, and thoughtful experiences.

I design reliable software across web, mobile, and cloud. Explore the latest insights, engineering notes, and a focused portfolio of production work.

What I work on

Read the blog View portfolio

Years

50+

Projects

Stacks

Blog

Latest writing

View all posts

Apr 17, 202601

31 WordPress Plugins, One Flippa Sale, and an 8-Month Time Bomb

In April 2026, WordPress.org closed 31 plugins after an attacker bought a trusted plugin portfolio on Flippa, shipped a dormant PHP deserialization backdoor, and activated it eight months later — with command-and-control resolved through an Ethereum smart contract. This post breaks down how the attack actually worked, why 96% of WordPress vulnerabilities live in plugins, and how Cloudflare's new EmDash CMS attempts to fix the architecture with capability-scoped sandboxes.

Apr 16, 202602

CORS Isn't Blocking You — Your Browser Is. Here's What's Actually Happening

Most developers treat CORS errors as a server configuration mystery. They're not. Your server responded fine — your browser intercepted the response. This post covers the CSRF attack CORS was built to prevent, how origin is actually defined, why Postman never sees CORS errors, how preflight requests work, and what every response header actually means.

Apr 14, 202603

MCP Over gRPC: Why Google Is Rewiring the Agent Transport Layer

MCP shipped with JSON-RPC over HTTP. That works beautifully for demos and small integrations — but it crashes into enterprises that run gRPC everywhere. Google is contributing a gRPC transport to MCP, with pluggable transports landing in the SDK. Here's what actually changes, what doesn't, and when the switch is worth making.

Social

LinkedIn highlights

View profile

Mar 23, 202601

Nvidia Just Made AI Agents Enterprise-Ready. Here's What Actually Happened.

Jensen Huang called OpenClaw 'the most important software release, probably ever' — comparing it to Linux, HTML, and Kubernetes in the same breath. Bold claim. But after digging into what Nvidia actually built around it, I think he might be right.

Mar 17, 202602

5 Brutal Truths Nobody Taught Me About Programming (But Should Have)

I've been writing code for years. Read the books. Studied the patterns. Nailed the algorithms. And yet — the lessons that actually made me a better developer? None of them came from a textbook. Every single one came from something breaking, a user doing something unexpected, or me staring at a screen at midnight wondering where it all went wrong.

Mar 16, 202603