A practical guide to building APIs that are secure by default — covering input validation, auth patterns, rate limiting, logging, and error handling.
Building a Secure API 90 Percent of the Time Let me be upfront about the title. You cannot build a perfectly secure API. Anyone who tells you otherwise is selling something. But you absolutely can bui...
How security fits into the platform engineering movement — and why platform engineering done right makes secure defaults the path of least resistance.
Platform Engineering Is Security's Best Friend (If You Do It Right) Here's a frustrating truth about enterprise security: most of the vulnerabilities I see in production aren't there because developer...
Your hands touch the keyboard thousands of times a day — investing in that skill compounds over a career. Touch typing, vim motions, mechanical keyboards, ergonomics, and the resources that actually helped.
Get Better at the Keyboard: The Investment That Compounds Every Day Here's a rough calculation: if you type for 6 hours a day, 5 days a week, 48 weeks a year, you're at the keyboard for around 1,440 h...
Security patterns and practices for production-ready Go APIs
Building Secure REST APIs in Go: A Developer's Guide to Security-First Design After building APIs that handle millions of requests daily, I've learned that security can't be an afterthought. In this g...