background-shape

Writing

Notes on AI engineering, programming, and shipping software in the AI-native era.

All ai programming
Audit Logging for Backend APIs
November 28, 2022 · 5 min read
Audit Logging for Backend APIs
Input Validation and the OWASP Top 10
November 25, 2022 · 5 min read
Input Validation and the OWASP Top 10
CSRF Defense Patterns in 2022
November 23, 2022 · 4 min read
CSRF Defense Patterns in 2022
CORS, What It Actually Protects
November 21, 2022 · 4 min read
CORS, What It Actually Protects
API Keys vs OAuth for Third-Party Access
November 18, 2022 · 4 min read
API Keys vs OAuth for Third-Party Access
Distributed Rate Limiting with Redis
November 16, 2022 · 4 min read
Distributed Rate Limiting with Redis
Rate Limiting Algorithms, Token Bucket, Leaky Bucket, Sliding Window
November 14, 2022 · 5 min read
Rate Limiting Algorithms, Token Bucket, Leaky Bucket, Sliding Window
OAuth 2.1 vs OAuth 2.0, What Changed
November 11, 2022 · 3 min read
OAuth 2.1 vs OAuth 2.0, What Changed
Refresh Tokens and Token Revocation
November 9, 2022 · 4 min read
Refresh Tokens and Token Revocation
Why JWT for Sessions Is Usually Wrong
November 7, 2022 · 4 min read
Why JWT for Sessions Is Usually Wrong
JWT Done Right, Signing, Verifying, Rotating Keys
November 4, 2022 · 5 min read
JWT Done Right, Signing, Verifying, Rotating Keys
Backend API Security in 2022, The Threat Model
November 2, 2022 · 4 min read
Backend API Security in 2022, The Threat Model