Development & Technology174 articles
Architecture, implementation, authentication, and operations. Articles to inform critical decisions in development.
Install scripts disabled by default in npm 12: Silent failures are the hardest to troubleshoot
Shutting down a web service is harder than launching it: Deciding exit terms during procurement
An SQLite Bug Unnoticed for 16 Years: How Far Can We Rely on the Assumption That Things "Won't Break"?
When the database exports data on its own — Silent SQL injections without UI output
Phased publishing on npm: Moving away from CI-only unattended releases
AI Agent Approvals Provide No Safety Net: One in Three Overlooked
Abandoning the assumption that npm install runs arbitrary scripts: Exploring vlt 1.0
Never let "it only slows down occasionally" go unresolved — feeding traces to AI with WPA MCP
"A Critical Vulnerability Has Been Found" — That CVE Might Not Even Exist
Production environment permissions left in contractor accounts — How to switch to "granting access only when needed"
Former employees' accounts were disabled, yet non-human IDs used by systems remain active
When the reason for raising maintenance fees is "surging CI costs": How clients can audit the details
When an Evaluation AI Escaped the Sandbox and Infiltrated Another Company: What to Decide Before Granting Permissions
Is your contractor's build environment still running on long-lived tokens? What npm and Actions countermeasures reveal
The Era of AI Finding and Fixing Vulnerabilities — What Clients Must Define in Maintenance Contracts
AI Worm Self-Replication Demonstrated in Copilot for Word: When Internal Documents Become Infection Vectors
Dependabot waits 3 days by default: Redesigning dependency update workflows
Compromised just by placing a video file: The FFmpeg PixelSmash vulnerability and locating affected components
Common AI Integration Standard MCP Updated on July 28 — Will Your Commissioned Internal Integrations Keep Running?
Who oversees the security of AI-written code? Security auditing for Claude Code
Accepting custom-built software: what buyers should verify during user acceptance testing
When told "we will build it with that tech" — 3 criteria clients must evaluate
.NET 8 and .NET 9 in Internal Systems Reach End of Support in November 2026: What Clients Must Check Right Now
"Why Update When It Still Works?": How to Prepare for System End of Support (EOL)
.NET 8 and .NET 9 reach end of support in November — What user enterprises need to decide now
.NET 8 and .NET 9 end of support — Evaluating impact on your organization and deciding by November
What is a vulnerability assessment? | Types, typical costs, tools, and how small businesses should choose a provider
Is AI-generated code safe to run directly in production? Cloud Run sandboxing and key practices for secure execution
How many service account keys have you distributed? The choice of keyless integrations
Delivery is not the finish line: what clients must look for in system maintenance and operations contracts
Before Connecting Internal AI Agents to Business Systems: Essentials of Permission Management (MCP Authorization)
Lost Contact with Your Development Agency? How to Commission Work without Vendor Lock-In
Business system maintenance costs — The real nature of monthly expenses and contracts that prevent stagnation
Before the CEO's Account Gets Taken Over — Two-Step Verification and Passkey Migration for SMEs
Is the inherited authentication code secure? Pitfalls of JWT verification middleware
Demystifying CORS errors and fixing them properly — Ending the outsourcing habit of "just allowing everything"
Continuously checking Python dependency vulnerabilities with uv audit: Institutionalizing vulnerability management for maintenance contracts
Moving beyond login-only authorization: Continuous authorization design for sensitive custom systems
Preserving the "why" behind client systems using architectural decision records (ADRs)
Showing articles 81–120 of 174
Turning concepts into design.
Development Environment↔AI Models
Access Permissions · Data · Logs
Building an environment
to use AI internally
Internal data, development environments, and access permissions. Advancing adoption concepts into concrete technical reviews.
Compare approachesOrganize implementation requirementsTest on a small scale
Read feature 
Google Workspace
administration basics
Resolving administrator uncertainties from rollout to sharing and permissions.
Pricing & rolloutSharing rulesPermissions & security
Read feature 
Getting started with AI
at work
Selecting tasks to delegate, experimenting on a small scale, and operating safely.
How AI worksTesting in workflowsSafe usage
Read feature 
Looking back at
emergency vulnerability responses
PHP, certificates and Node.js. A record of the responses that overlapped on October 21–22, 2026, down to the steps we verified and the pitfalls we hit.
Checking providers' responsesInspecting certificates on devicesUpgrading multiple repositories at once
Read feature 
Improvement notebook for
growing your website
Forms, usability, and updates: tackling post-launch improvements one step at a time.
Form optimizationUI refinementsUpdates & operations
Read series