Pasting a Claude or DeepSeek API key straight into your code "just to test it quick" leaves a trail in your git history and your logs. A no-nonsense guide to environment variables, rotation, and what to check before sharing a repo.
Sep 09 2026 · 7′ · Tutorials · nextjs · anthropic
I installed Sniffnet to check what network traffic Cline and background LLM API calls actually generate. Here's what the tool shows you, and what you can't conclude from a single observation session.
Sep 07 2026 · 8′ · Tutorials · agentes-ia · networking
Cline lets you auto-approve every action the agent takes without asking permission. The button exists. The question is why, as an architect, I'd rather not touch it — and what hidden cost total autonomy has in a real codebase.
Sep 02 2026 · 7′ · Tutorials · AI agents · arquitectura de software
Docker's HEALTHCHECK is information, not a routing guarantee. If Kubernetes or Swarm isn't reading it, your container can be "healthy" and still keep taking requests that are going to fail.
Aug 28 2026 · 7′ · Tutorials · docker · devops
Spring Boot Actuator exposes more by default than most teams realize. The difference between an endpoint that's useful for monitoring and a map of environment variables handed to an attacker comes down to a decision almost nobody makes explicitly: allowlist versus disabling what looks obvious.
Aug 23 2026 · 8′ · Tutorials · spring-boot · java
Stateless JWT isn't the universal answer tutorials promise. If your system needs immediate revocation or fine-grained auditing, state isn't the enemy — it's the solution. Here's the decision framework I use in real identity systems.
Aug 18 2026 · 9′ · Tutorials · seguridad · JWT
Cline can create files, run commands, and open the browser autonomously from inside VS Code. That sounds like productivity. It also smells like risk if you haven't thought through the permissions before you start. My thesis: the mental model matters more than the tool.
Aug 17 2026 · 9′ · Tutorials · TypeScript · LLM
CAdES and XAdES aren't interchangeable even though both are "advanced signatures." The choice depends on document type, trust profile, and what the CA actually expects to validate. A technical guide with DSS and Java to make the right call before you sign anything.
Aug 12 2026 · 9′ · Tutorials · seguridad · certificados
Qwen3 landed with thinking mode and real improvements in code generation. But before you replace the model already running in your Ollama setup, there are technical questions you need to answer first. I answer them here without selling hype.
Aug 02 2026 · 9′ · Tutorials · TypeScript · Inferencia Local
Architecture, real systems, product decisions and technical lessons. Everything reviewed with my own judgment before it ships.
228 articles published