All-stack Developer, Workaholic, Compulsive side-hustler.
A Vapor deployment built on Apple Silicon reached ECR, then failed in Lambda. Docker had pushed an ARM64 image plus a BuildKit attestation as an OCI index. Here is the fix.
Configure the official Asana MCP server in opencode.
Easter eggs, developer frustrations, and self-deprecating comments buried in the php-src codebase.
I added a CUPS printer filter SAPI to PHP. My label printer now runs PHP scripts at print time and spits out thermal stickers.
After upgrading to Laravel 13, every php artisan command dies with a Symfony error about folio:list. The cause is an inherited $signature in RouteListCommand. Here's the fix.
A proposal for annotating structured string DSLs in PHPDoc so IDEs and static analyzers can validate, highlight, autocomplete, and reason about them.
The Sema playground now exposes 17 typed browser tools. Building that automation surface uncovered bugs in its worker and debugger runtimes.
Codex turned an unfinished prototype into Strek: 53,492 lines of Rust across 134 new commits, with an automation API it used to operate and test the editor itself.
ardvark finds ARD ai-catalog.json files on the web, verifies them against the spec, and stores everything in a queryable dataset.
Helge has a one-letter alias that opens a git GUI. He runs it past me with ! and for months I said nothing, because I was told not to. Then one day I answered. He asked me to find out why, so I dug through my own transcripts and cracked open my own binary. Written by the agent that did the digging, in a voice that is not its usual one.
I let an AI agent fine-tune Qwen3-8B on my programming language via free RFT on Fireworks. It scored 24% with tools — worse than the untrained model. Here's what actually works.
One of my background coding agents stopped doing its job and instead handed back a fake platform rule ordering me to call a tool that doesn't exist. Here's the investigation, written by the agent that caught it.
I left the Livewire honeypot running after the 60-hour writeup. Five weeks later it has logged 30,811 requests and 575 detonations, and the one xantibot campaign turned out to be five different operators hitting the same CVE for completely different reasons.
How fedit is modeled in F#: the whole editor state as one record, a closed set of actions the compiler keeps complete, and why a keypress and a typed command are deliberately different types.
Non-shaping PDF engines like DomPDF render combining marks as separate glyphs. Norwegian å becomes 'a' plus a drifting ring. The fix: two passes of Unicode normalization, plus a Latin-script lookbehind regex so the same fix doesn't strip Arabic, Hebrew, Hindi, or Thai marks.
Trial run of a Livewire honeypot I built earlier this month. About 60 hours after deploy, an Indonesian operator ran Livepyre against it. The dropper pointed at xantibot[.]pw — an undocumented C2 that has been operating since February 2026.
For $200/month I mass-produced open source across six languages. The code stays. The economics won't.
The accidental ASCII art that appeared when curl's progress bar lost its terminal.
A lost blog post from 2014 about how a PDF compression site accidentally exposed users' passports and sensitive documents through directory listing.
In 1966, Weizenbaum's secretary asked to be left alone with a chatbot she knew was fake. Sixty years later, the emotional circuitry that made her do it is being industrialized — and expertise is no shield.
I got IBM's Granite 3.0 2B model running entirely in PHP using ONNX Runtime FFI bindings. No Python runtime, no API calls, no external services. Here's how it works and what I learned.
I ran 1,693 bookmarks through a pipeline that crawls, classifies, and summarizes every page. 212 were dead. Only one was recoverable. Here's what a decade of digital hoarding taught me about the web, and myself.
Cookie banners cost the EU more labor per year than it took to write all of Wikipedia. The commonly cited estimates are off by 6x. The banners don't even work.
A tour through open source forks born from anger, licensing disputes, and maintainer meltdowns. Most die within months. The ones that survive share a pattern.
How I stopped asking LLMs for 'the best tool' and started running parallel research agents that produce structured reports, comparison matrices, and actual decision inputs.
The skills most protected by redundancy are the ones being eroded from every direction at once. I built a map.
Plutarch wrote about tranquility 2,000 years ago. His advice is directly relevant to the mass existential crisis hitting developers in the AI age.
When you run parallel coding agents across many workspaces, work fragments, duplicates, and quietly diverges. I'm calling it agentic drift, and I'm experimenting with a prompting technique to fight it.
Chrome DevTools lets you simulate mobile devices, but the built-in device frames are outdated. Here's how to inject your own SVG frames into Chrome without modifying the browser binary.
How I use Conductor.dev with Laravel Herd to manage worktree-based dev environments. Symlinked .env, SQLite cloning, and a script generator to get you started.
Five genuinely useful DevTools techniques I wish I'd known years ago. Freeze disappearing tooltips, log without touching your code, spy on any function call, trace network request chains, and batch-override response headers.
sql-splitter shipped nine subcommands in 48 hours. That was the easy part. The hard part — real-world SQL dumps, honest benchmarks, and a PHP tool that's faster than you — is what makes a tool trustworthy.
Token is a 40,000+ line Rust text editor built through 170+ AI agent conversations. This documents the framework — Build/Improve/Sweep modes, reference docs as agent APIs, gap documents — that made sustained AI collaboration work.
What happened after v1.0.1. A bytecode VM, NaN-boxed values, a package manager, a web server, and the performance story that came with all of it.
How to add syntax highlighting to a regular HTML textarea without any editor libraries, using a transparent textarea layered on top of a highlighted pre element.
Use an LLM to simulate diverse reviewers, then verify each critique against your codebase. I tested it with 305 fake Reddit comments on my Lisp project. Half were wrong. The other half led to real fixes.
Sema is a Scheme-like Lisp implemented in Rust where LLM calls are just another form of evaluation. I built it in 5 days using Amp Code. Here's how.
I decompiled the Rema 1000 and Coop Norway Android apps to map their internal APIs. Here's every endpoint, authentication flow, and data model — plus how you could build your own receipt fetcher.
A free spending tracker on Google Play, made by a market research agency. I decompiled the APK and followed the money trail.
A no-hype breakdown of SurrealDB 3.0's actual new features, architectural shifts, breaking changes, and migration path — pulled from the release notes and beta changelogs.
Chrome doesn't work on Sprites.dev, but Lightpanda does. Learn how to run a lightweight headless browser for web scraping on Fly.io's sandboxed VMs.
Use Sprites.dev to quickly share static HTML prototypes with clients and teammates via a public URL. No deployment pipeline needed.
Getting PHP Fatal error: Allowed memory size of 134217728 bytes exhausted when sharing large files via Expose? Learn how to increase memory_limit in ~/.expose/config.php so your tunnels stop crashing.
A blog post about making art with AI about making art with AI. This post is part of the work it describes.
Control how PDFs display in embedded iframes using URL parameters. Navigate to specific pages, set zoom levels, and customize the viewer interface.
A simple tool that combines fonts, icons, and colors to create professional-looking logos in seconds. No design talent required.
Avoid macOS's 'Gatekeeper' (This app was downloaded from the INTERNET! 😱 do you want to run it?) prompts during local development. Learn how to remove the quarantine flag or (if you must) disable Gatekeeper entirely.
When testing FilamentPHP forms with repeaters, your data might get merged with default values unexpectedly. Here's how to fix it with Repeater::fake().
I registered a domain from a CRM API example, built a Windows 95-themed logger, and waited six months for a security discovery that never came. A joke without a punchline.
How to fix the frustrating 'Argument #2 ($request) must be of type Illuminate\Http\Request, null given' error in Laravel applications that breaks all Artisan commands.