Dusan Malusev

JWT promises stateless authentication and delivers neither. It's a cargo cult that makes your app slower, less secure, and harder to maintain — and almost every developer shipping it has no idea why.

A C23 pattern using __attribute__((constructor)) and a topo-sorted registry to replace the hand-maintained MINIT class list in the ScyllaDB PHP driver — plus the build-time generator that emits the de

How shared libraries load at runtime — the dlopen/dlsym mechanics behind PHP extensions, with a minimal C23 example and a safe Rust wrapper using libloading.

Why I replaced Laravel's default AES-256-CBC with libsodium-backed AEGIS and XChaCha20, then built per-user encryption so not even APP_KEY can decrypt your users' data.

How a broken compile on PHP 8 became a two-year open-source project, a C-to-C++ migration I regret, and a codebase I still want to ship properly.