Juanchi.dev
Digital Native · real systems
·
HomeCVBlogLabContact
Juanchi.dev
Digital Native · real systems
·
HomeCVBlogLabContact

Security and operations

45 posts on security and 40 on devops, organized around what you decide before something happens: where secrets live, how a backup gets restored, which dependency gets in.

  • Secrets and credentials

    Vault, secret proxies, and why environment variables are not enough.

  • Backups you can restore

    Postgres, barman, pgbackrest, and the restore drill almost nobody runs.

  • Supply chain

    How to evaluate a dependency before it becomes an incident.

Recommended reads

View more
Aug 18 2026

Stateless JWT vs stateful sessions: the framework I use to choose in identity systems

Stateless JWT isn't the universal answer tutorials promise. If your system needs immediate revocation or fine-grained auditing, state isn't the enemy — it's the solution. Here's the decision framework I use in real identity systems.

Aug 18 2026 · 9′ · Tutorials · seguridad · JWT

9′
Aug 17 2026

Cline in production: the autonomous code agent for VS Code I use with deliberate constraints

Cline can create files, run commands, and open the browser autonomously from inside VS Code. That sounds like productivity. It also smells like risk if you haven't thought through the permissions before you start. My thesis: the mental model matters more than the tool.

Aug 17 2026 · 9′ · Tutorials · TypeScript · LLM

9′
Aug 12 2026

CAdES vs XAdES Digital Signatures in Java: The Differences That Matter When Your CA Asks for One and You've Built the Other

CAdES and XAdES aren't interchangeable even though both are "advanced signatures." The choice depends on document type, trust profile, and what the CA actually expects to validate. A technical guide with DSS and Java to make the right call before you sign anything.

Aug 12 2026 · 9′ · Tutorials · seguridad · certificados

9′
Aug 02 2026

Qwen3 locally with Ollama: what changed in the architecture and whether it's worth switching

Qwen3 landed with thinking mode and real improvements in code generation. But before you replace the model already running in your Ollama setup, there are technical questions you need to answer first. I answer them here without selling hype.

Aug 02 2026 · 9′ · Tutorials · TypeScript · Inferencia Local

9′
Jul 08 2026

Node.js: the runtime that changed how we think about backend

Node.js isn't just "JavaScript on the server." It's a paradigm shift in how we handle I/O. Thirty years in tech taught me to recognize when something genuinely moves the ground beneath your feet.

Jul 08 2026 · 5′ · Experiments · javascript · node.js

5′
Jul 02 2026

Sniffnet: monitor your network without losing your mind to tcpdump

Sniffnet is a cross-platform network traffic monitor written in Rust. Real UI, real-time charts, no security PhD required to understand what's actually going on.

Jul 02 2026 · 5′ · Experiments · networking · open source

5′

Juanchi.dev is Juan Torchia’s public notebook — architecture, real systems and product decisions. Written and reviewed by hand in Buenos Aires. Built with Next.js, Prisma and PostgreSQL; deployed on Railway. No third-party trackers beyond aggregate analytics.

BlogUsesNowGitHubRSS© 2026 Juan Torchia · All rights reserved.