All notes

Security
The Auth Check on the Wrong Side of the Network

And somewhere in your Supabase dashboard, every row of their data is sitting unprotected — because your browser showed a login screen, and everyone, including the AI that built it, assumed that meant the database was locked.

Mar 21, 2026 · 7 min read
Security
How to Read a Security Scan Without a Security Background

Here is the moment you are in: a security scan report just landed in your inbox, full of terms like CVE scores, SAST findings, and dependency vulnerabilities — and you cannot tell whether you are looking at a catastrophe or a formality.

Mar 14, 2026 · 7 min read
Reliability
Timezone Bugs at Scale — Why the Report Is Off by a Day for Half Your Customers

Her weekly report is showing Friday's numbers — data that, by the clock on her wall, has not happened yet.

Mar 14, 2026 · 8 min read
Migration
Owning Your Data: Exports, Backups, and the Right to Leave

Owning your SaaS data is not a maintenance task you schedule for later — it is a decision you make in advance, before a pricing change, a pilot launch, or an investor's due-diligence request makes the cost of not deciding visible.

Mar 11, 2026 · 7 min read
Reliability
Race Conditions in a Vibe-Coded App — What They Look Like, How to Find Them

Your app reads one open slot, both users win it, and you've just double-booked — or charged one person and recorded nothing.

Mar 7, 2026 · 6 min read
Reliability
Uncaught Promises — The Bug Your Users See but Your Logs Don't

Picture this: a pilot user opens your app for the first time, clicks through the onboarding flow you demoed perfectly yesterday, and hits a blank screen.

Mar 7, 2026 · 8 min read
Load more