最新资讯

IaaS in practice: hosting a community app on AWS

Ever wondered what people actually mean when they say "we deployed it to the cloud"? Let's find out together. We'll use Amazon EC2 to explore Infrastructure as …

A Token Ledger That Refuses Work: Keeping a Solo AI Feature at Zero Cost

A zero-cost AI feature is not a feature that happens to cost nothing. It is a feature whose code refuses to run once the day's allowance is gone. Repeat traffic…

The Role Split Card: A Pairing Session That Assigned Model Work and Server Work Before Any Benchmark

The rule that survived the session A two-hour pairing session left exactly one line in the repository README: the free model writes the patch, the free server r…

AWS CloudTrail Basics: Who Did What, When and From Where

This week I locked the root account and set a budget. Now the question that comes after both: when something changes in the account, how do I find out who did i…

IaaS in practice: hosting a community app on AWS Ever wondered what people actually mean when they say "we deployed it to the cloud"? Let's find out together. We'll use Amazon EC2 to explore Infrastr

Understanding Infrastructure as a Service (IaaS): A Case Study of Amazon Web Services (AWS) Introduction

Introduction Cloud computing has become one of the most important technologies in modern computing. It allows individuals, businesses, and organizations to acce…

How 1,000 Companies Handle CSV Import

Research into how 1,000 companies handle CSV import revealed a recurring problem. Customers are still asked to prepare, correct, and split data outside the prod…

My Script Logged 88 Messages Sent. 87 Never Arrived

This morning a browser script of mine announced 88 new scrapers in a Discord channel. The log said 88 posted. The channel showed one. Discord had silently dropp…

Node.js Secure Direct Browser Uploads for Generic Gaming Files (Object Storage at Scale)

Large product-image batches change this decision: the browser should send bytes to storage, while the Node.js application issues narrow, tenant-scoped permissio…

The Link Layer of app.onepassapps.com: 491 Link Tags, Two Shapes and One Preload Set

I work on OnePassApps, the team behind app.onepassapps.com, so this is our own site. Everything below was measured on 8 November 2026 with plain HTTPS from outs…

Six small open-source helpers for Indian government schemes, in Hindi and English

Over the last two weeks I built six small web helpers for Code for a Billion 2026, the hackathon run by Code for India. Each one answers a question an Indian fa…

quem fica de fora do seu site? — boas práticas de acessibilidade na web

deixa eu contar por que decidi escrever sobre esse tema. no projeto integrador do meu curso de front-end, fiz um portal de esportes e coloquei um menu de acessi…

I Tested REA (Reverse Engineer Anything) on My Own Tool — Here's What It Actually Found

I had seen REA — Reverse Engineer Anything — mentioned everywhere, so instead of repeating the hype, I decided to test it on something I know inside out: my own…

Know what AI will actually cost before you pay: I built NotCheapAI

Most AI pricing pages are a small accounting nightmare. Headline plans advertise a simple "$20/month", but once you start building and producing work, you run i…

I scanned 8 newly shipped Next.js + Supabase AI repos on GitHub - 5 scored an F (288 security findings)

AI coding agents (Claude Code, Cursor, Windsurf) are incredible at getting a full-stack app working on localhost:3000 in an afternoon. Wait until you look at wh…

Why your app sends the welcome email twice (5 bugs and how to fix each)

How to Prevent Duplicate Emails in Your Application: 5 Common Causes and Fixes A user signs up once. They receive two welcome emails, just a few seconds apart. …

Build from award winning sites with Awwwards-mcp in Claude Code

Asking an AI agent to "make it look award winning" gives you generic output. Awwwards-mcp is an MCP server that lets Claude Code or Codex search Awwwards sites,…

What counts as Specified Information under CPCSC?

Specified Information is government of Canada information that must be protected when a non-government organization handles, processes, or stores it. That is PS…

Why PDF Passwords Don't Stop Sharing (and 5 Things That Actually Work)

PDF Password Protection: How It Works, Where It Fails, and What to Use Instead A PDF password protects the file, not who reads it. Here's how PDF encryption rea…

Classify the Field, Not the File: A Redaction Gate for Free Model Tiers

Here is a request body I keep finding in agent logs. Nothing exotic — a stack trace, a config dump, a database URL with the password still attached: { "role" : …