Security and operations
45 posts on security and 40 on devops, organized around what you decide before something happens: where secrets live, how a backup gets restored, which dependency gets in.
Recommended reads
View moreStateless JWT vs stateful sessions: the framework I use to choose in identity systems
Stateless JWT isn't the universal answer tutorials promise. If your system needs immediate revocation or fine-grained auditing, state isn't the enemy — it's the solution. Here's the decision framework I use in real identity systems.
Aug 18 2026 · 9′ · Tutorials · seguridad · JWT
Cline in production: the autonomous code agent for VS Code I use with deliberate constraints
Cline can create files, run commands, and open the browser autonomously from inside VS Code. That sounds like productivity. It also smells like risk if you haven't thought through the permissions before you start. My thesis: the mental model matters more than the tool.
Aug 17 2026 · 9′ · Tutorials · TypeScript · LLM
CAdES vs XAdES Digital Signatures in Java: The Differences That Matter When Your CA Asks for One and You've Built the Other
CAdES and XAdES aren't interchangeable even though both are "advanced signatures." The choice depends on document type, trust profile, and what the CA actually expects to validate. A technical guide with DSS and Java to make the right call before you sign anything.
Aug 12 2026 · 9′ · Tutorials · seguridad · certificados
Qwen3 locally with Ollama: what changed in the architecture and whether it's worth switching
Qwen3 landed with thinking mode and real improvements in code generation. But before you replace the model already running in your Ollama setup, there are technical questions you need to answer first. I answer them here without selling hype.
Aug 02 2026 · 9′ · Tutorials · TypeScript · Inferencia Local
Node.js: the runtime that changed how we think about backend
Node.js isn't just "JavaScript on the server." It's a paradigm shift in how we handle I/O. Thirty years in tech taught me to recognize when something genuinely moves the ground beneath your feet.
Jul 08 2026 · 5′ · Experiments · javascript · node.js
Sniffnet: monitor your network without losing your mind to tcpdump
Sniffnet is a cross-platform network traffic monitor written in Rust. Real UI, real-time charts, no security PhD required to understand what's actually going on.
Jul 02 2026 · 5′ · Experiments · networking · open source