Posts
Things I’ve tried, problems I’ve spent too long fixing, and opinions on software, AI, hardware, and working on products. Some of these are guides. Others are me getting something off my chest.
Why I wouldn't run a random vibe-coded tool that touches my screen or my data, why I'd still tell you to release it, and what a world of one-off personal software does to trust, security and careers.
Two unrelated abuse cases - pirated video hidden as .woff2 fonts, and phishing pages hosted on r2.dev - share the same root cause: attackers exploiting inherited trust rather than breaking anything.
Shopify Ops started as a small Shopify vs ShipStation audit. It turned into a self-hosted operations toolkit for catching order, fulfillment, and catalog issues before customers do.
ChatGPT wrapper plugins in WooCommerce stores have no guardrails for e-commerce context. Wrong prices, wrong policies, and hallucinations aren't just UX problems.
Plugin redundancy in WooCommerce isn't just technical debt - it actively expands your attack surface. Here's how it happens and what to do about it.
A genuinely good city-builder that never fixed its core problem - and then made a sequel instead. Here's where it broke.
A practical checklist of the first things I look at when auditing a WooCommerce store for security issues - from plugin bloat to exposed debug info.
A thought experiment: what if we tied wealth taxation to customer satisfaction metrics?
Anthropic disclosed a large cyberattack almost entirely carried out by AI - a preview of what automated offensive security looks like.
SOC 2 compliance isn't something you do once and forget - it's an ongoing quarterly effort. Here's what I learned the hard way.