Notes from the field.
Practical notes on building, running and securing software, and on where AI fits in. In plain language, newest first.
- Software
What PHP2Shell taught me about protecting more than 100 sites
Two critical PHP flaws, a lot of sites, and no compromises. What mattered most was knowing what you run, patching in order of risk, and watching what you can't take offline.
- Building with AI
What building a 96-level game with AI agents taught me
Agents wrote most of the code. The useful lessons are all about the rules, tests and limits that made that safe.
- AI in software
Where AI belongs in your software, and where it doesn't
Most useful AI features are one small model step inside an otherwise ordinary process. A practical guide for automation and reporting.
- How AI works
What actually happens between your prompt and the answer
A language model does one surprisingly simple thing, over and over. Here is the whole journey, without the mysticism.
- Software
What connecting 50 APIs teaches you about software that keeps working
Every external system fails eventually, and usually at a bad moment. Seven habits that keep your software running when it does.