Technical notes, project documentation, and lessons learned across software, DIY, writing, and more.
My wife scored 0.1 on reCAPTCHA. From our couch. On her phone. Here's what Google doesn't tell you about score thresholds and mobile users.
Same codebase, same deployment. API routes use JWT bearer tokens, web routes use cookies. A 10-line policy selector makes them coexist without conflicts.
You've seen the padlock in your browser. You know some sites are 'secure.' But what does it actually mean? What's being locked?
I once committed an API key to a public repo at 3 AM. That incident taught me secrets in source control are a when problem, not an if problem.
You download a game. You tap buttons. Things happen. But what's actually going on behind the scenes — and how do people peek behind the curtain?
Your phone and the game server have a constant conversation. With the right tools, you can listen in.
Adding invisible bot protection to a contact form with Google reCAPTCHA v3 and a honeypot field - no puzzles, no friction, no spam.