thegdsks

Microsoft tried to kill the printer driver. 90% of US healthcare said no. In late 2025,...

On May 18 Google started rolling out new gradient icons for thirteen of its Workspace apps. Gmail,...

I shipped a working landing page in 14 KB. Here is every byte. In May 2026 a coder who...

The portfolio math. When 30 small apps beat 1 big one. For a decade the indie hacker...

How to read any legacy codebase. The archaeology playbook. Somewhere on a hard drive sits...

In February 2026 a developer named daivuk shipped a playable Quake-like first person shooter in a 64...

The afternoon I learned what my AI subscription was actually doing, and the 200 lines that took my...

Last quarter we migrated 47 Lambda functions off AWS. The monthly bill dropped from $8,362 to $1,790....

A 91 second experiment, an $11.78 charge, and a moment of hesitation that surprised me more than the...

A revenue chart that goes vertical does not tell you who pays. It tells you who gets charged. A...

A 300 megawatt deal, a $180 a month decision, and the strange feeling of having a vendor solve your...

I track my own AI spend across three projects. In March, the line item that grew fastest was not...

On April 30, Cloudflare quietly published a blog post and a docs page that nobody outside the agentic...

Giving an AI agent permission to spawn sub-agents (without losing control) A reader asked...

Three free SVG brand icon libraries compared on icon count, color support, license, and integration. Pick the right one for your project.

Most TypeScript auth libraries assume Node.js. They reach for crypto.randomBytes, Buffer, the Node fs...

If you're building an MCP server, sooner or later someone is going to ask: how does authentication...

I noticed a pattern looking at three months of Anthropic invoices. The same 8 KB system prompt was...

A Vercel employee clicked Allow All on an AI app's OAuth consent screen. Three weeks later, customer environment variables were on a hacker's drive with a $2 million asking price. Here is the four-layer audit your org probably has not run.

Microsoft announced Copilot Pro is still $10 per month, but $10 now buys $10 in AI credits, and a single Opus agent session can consume that. Here is what your real bill looks like.

Kevin Lynagh published a short essay this week about how he sabotages his own projects by...

For about four weeks in March and April, Claude Code felt noticeably worse. I was not imagining it....

A four-layer teardown of what you are actually buying when you follow an AI tutorial in 2026, with real numbers and a checklist you can run before you commit hardware or a subscription.

A real Auth0 migration to kavachOS, with the bill, the diff, the things that broke in prod, and the call I would make again.

Password reset is where most apps leak. Here is a working Next.js 15 implementation, the 3 security mistakes I keep finding in code reviews, and a 12 line version using kavachOS.

A working login flow in Next.js 15. The form, the session cookie, CSRF, remember me, and a look at the constant-time comparison that keeps attackers from enumerating accounts.

A working register user flow in Next.js 15. Frontend form with real validation, a server endpoint that does the right things, the database schema, and the email verification handoff.

Day 2 of the auth from scratch series. The full Postgres schema for users, sessions, OAuth, reset tokens, magic links, verification, passkeys, and agent tokens. Every column, every index, every decision.

A 12 part series on building real authentication from scratch in Next.js and Postgres. Start here for the architecture, the tables you will need, and a diagram of the whole system

A cert expired on one of our staging services last month. Nobody noticed for two hours because our...