WRITEUPS
Writeups on things I built
Each writeup starts from real code in one of my projects, explains what it actually does, and ends with what I would change.
6 writeups, newest month first, best first within each month
November 20263
- FeaturedNetwork Growth Assistant6 min readHow my app fetches links it doesn’t trustNetwork Growth Assistant checks job links that strangers can influence. Here is how a link can trick a server into visiting its own network, and the four checks that stop it.
- Network Growth Assistant6 min readStopping an AI from inventing facts about a personThe app drafts messages to real people, and one wrong claim like “we met last year” would be embarrassing. Here is the check every message must pass, and why most messages never come from an AI at all.
- LinkLocker5 min readThree settings that make sign-in work behind a proxyLinkLocker runs behind Nginx. That one fact touches the rate limiter, the secure cookie, and the Google callback address. Here is why each setting exists.
October 20263
- FeaturedSkillMatch5 min readThe race condition in SkillMatch’s attend routeDisabling the Attend button stops one person from overbooking a workshop. It does nothing about two people. Here is why, and the one-query fix.
- ThinkBoard4 min readWhat a sliding-window rate limiter actually countsI used Upstash’s slidingWindow in ThinkBoard without knowing how it worked. Reading its Lua script showed it is an estimate, and why that is a good trade.
- Discord AI Bridge4 min readHow one blocking call froze my Discord botWhile the local model was thinking, my bot could not answer anyone else. The cause was one ordinary HTTP request inside an async function.