
Development & Technology174 articles
Architecture, implementation, authentication, and operations. Articles to inform critical decisions in development.
Articles are ordered by popularity over the past 30 days.


"A Critical Vulnerability Has Been Found" — That CVE Might Not Even Exist

Never let "it only slows down occasionally" go unresolved — feeding traces to AI with WPA MCP

Abandoning the assumption that npm install runs arbitrary scripts: Exploring vlt 1.0

When the database exports data on its own — Silent SQL injections without UI output

Before Adding Redis and Queues — How Far Can a Single Postgres Instance Go?

Chat discussions turn straight into code — Where to draw the boundary with contractors

"Backup completed successfully" does not mean you can restore

Meetings Where AI Adoption Dies with "That Data Cannot Leave the Building"

Written for readers a decade from now — Where to begin post-quantum cryptography migration

Moving beyond the binary choice of accepting or declining all app permission requests

Six months after incidents started auto-remediating, nobody can explain the root cause

Java 27 is not the upgrade — what helps business systems is the monthly patch

An AI coding tool was sending code along with its .git history — what to check when you develop for clients

How far Oracle procedural code runs on MariaDB 13: the order for deciding on a migration

Moving to shared infrastructure without leaving Beanstalk: whether an app qualifies depends first on whether it is stateless

Peer dependency updates no longer force major bumps on dependents — Changesets v3

New fields in the GA4 Data API for spotting incomplete aggregates

2026 Supply Chain Attack Summary: Practical Defenses Learned from the Axios and LiteLLM Incidents

Halving monthly Claude Code costs: battle-tested patterns for multi-session and token conservation

Preparing for NVIDIA GPU Rowhammer attacks: practical security audit guide for enterprise AI infrastructure

The Era of AI Agents Creating Cloudflare Accounts and Buying Domains — Autonomous Spending Governance in Custom Development 2026

GitHub Agentic Workflows CI/CD defense-in-depth: Security design for contract agent operations 2026

Who oversees the security of AI-written code? Security auditing for Claude Code

Production environment permissions left in contractor accounts — How to switch to "granting access only when needed"

Who Fixes Base Image CVEs? Buildpacks Graduates from the CNCF

Behavioral change of DATE in MySQL 9.7 — an update where only the numbers quietly change

Outbound traffic in AI sandboxes: Auditing allowlists and trust boundaries

Not Relying Solely on VM Isolation — Updates and Permissions Learned from Public Validation of AI Agents

What was lost was not a single server but a whole region

FastAPI OpenTelemetry export is off by default as of 0.143

Pillow vulnerability fixed only in 13.0.0: no 12.x fix, Python 3.11 or later required

Designing authentication and authorization for AI agents — incorporating permissions and delegation into custom projects

When should you migrate your .NET Framework business systems?

5 Items to Check Before Sharding Slow PostgreSQL Databases — An Entry Point for Considering Neki

Zimbra vulnerability CVE-2026-73570: checking SNMP and investigating after a compromise

Before running open-weight models in-house: who owns governance?

Over 10,000 vulnerabilities disclosed per month: using GTIG statistics to set patch priorities

Abuse of ConnectWise integration apps: logs to check in Microsoft 365

Tampered LiteLLM 1.107.0: how to investigate affected environments and rotate keys
Showing articles 121–160 of 174
Turning concepts into design.
Development Environment↔AI Models
Access Permissions · Data · Logs
Building an environment
to use AI internally
Internal data, development environments, and access permissions. Advancing adoption concepts into concrete technical reviews.
Compare approachesOrganize implementation requirementsTest on a small scale
Read feature 
Google Workspace
administration basics
Resolving administrator uncertainties from rollout to sharing and permissions.
Pricing & rolloutSharing rulesPermissions & security
Read feature 
Getting started with AI
at work
Selecting tasks to delegate, experimenting on a small scale, and operating safely.
How AI worksTesting in workflowsSafe usage
Read feature 
Looking back at
emergency vulnerability responses
PHP, certificates and Node.js. A record of the responses that overlapped on October 21–22, 2026, down to the steps we verified and the pitfalls we hit.
Checking providers' responsesInspecting certificates on devicesUpgrading multiple repositories at once
Read feature 
Improvement notebook for
growing your website
Forms, usability, and updates: tackling post-launch improvements one step at a time.
Form optimizationUI refinementsUpdates & operations
Read series