Writing
Technical articles on building production web applications. View all on Medium ↗
August 31, 20265 min read
A Two-Minute Privacy Fix Uncovered a Signed-URL Leak
Three day-one decisions turned a privacy scare into a two-minute file swap. Fixing it revealed a signed URL sitting in the page source for every visitor.A UbuntuScamBank user reached out recently.…
Read on Medium
June 21, 20268 min read
What Shipping an MVP Actually Looks Like: UbuntuScamBank, 18 Days In
Production was broken. Profile edits were silently returning 500s. Report pages were crashing. Local dev and the preview environment: perfect. The same secrets, the same code. Two different…
Read on Medium
May 26, 20267 min read
Building UbuntuScamBank: AI Triage, Cloudflare Workers, and Zero Infrastructure Cost
The Vercel paywall on private GitHub organisation repos was the first real constraint this project hit. Paying for a Pro plan to share a work-in-progress preview wasn’t the move. That constraint led…
Read on Medium
April 20, 20267 min read
When Git History Stops Representing Intent, Stop Fixing It
How a wrong branching assumption turned into a lesson on rebase vs cherry-pick — and when reconstruction beats repair.tangled history vs recovered intentThe Workflow (and Why It Exists)I’ve been…
Read on Medium
April 16, 20266 min read
The Tailwind v4 CSS Rule That Silently Overrides Your Utilities
Why unlayered CSS in your stylesheet wins the cascade – and how fixing it led to a cleaner design token architecture.This is part of an ongoing series documenting the full engineering lifecycle of…
Read on Medium
March 13, 20269 min read
Never Use Display Names as Firestore Query Identifiers
How a renamed Google account exposed a data integrity flaw — and the migration script that fixed it permanently.This is Part 2 of a series documenting the full lifecycle of The SMM Place rebuild.…
Read on Medium