The webhook that reads the cloud's metadata
9/7/2026SSRF isn't solved by cleaning up the input, it's solved by controlling the output, in order of effectiveness
26 min read
Software engineering by Michael Douglas.
Elixir/OTP, Ruby, Go, security and distributed systems.
Featured
BOLA is not an authentication bug
9/6/2026Authentication is the door, object-level authorization is the lock on every drawer, most systems lock the door with great care and leave the drawers open
32 min read
Split payment is not a VARCHAR problem
7/31/2026The PSP is the one who withholds, you're left with the hard part
27 min read