Tech Guides

The Problem: Your Index Is Eating Your RAM and Your Queries Are Still Slow The thing that catches most people off guard is the sheer scale of a common word’s postings list. Take a 50-million-document corpus — not unusual if you’re indexing a news archive or a mid-sized e-commerce catalog. The posting list for the … Read more

The Problem That Bit Me in Production My WireGuard setup was textbook. Full-tunnel mode, kill switch via DISALLOW_BYPASS, all traffic routed through 0.0.0.0/0 and ::/0. I’d tested it with a packet capture, confirmed DNS was resolving through the tunnel, and shipped the app. Then a colleague ran a more thorough session with Charles Proxy and … Read more

Why I Kept Confusing These Three Forms (Until I Got Burned) The bug that finally made this click for me: I had an orchestrator function doing a direct HTTP call using axios.get() inside the orchestrator body. Not inside an activity — inside the orchestrator itself. Local testing? Flawless. Deployed it, threw some load at it, … Read more

The Problem That Made Me Look at Stackless Coroutines The callback hell wasn’t obvious at first. We had 400+ NPCs each running layered AI behaviors — patrol, investigate, combat, flee, idle chatter — and every transition between states lived in a different callback registered somewhere across six files. Debugging a report like “guard gets stuck … Read more

The Moment I Started Taking Kernel CVEs Seriously The thing that woke me up wasn’t a breach. It was doing a post-incident audit and realizing our production API server had been running a 6-month-old kernel with three unfixed privilege escalation CVEs — two of which had public PoC exploits on GitHub. We hadn’t been hit. … Read more

The Gap Between ‘Kernel Patched’ and ‘Your Server Is Safe’ The thing that caught me off guard the first time I seriously tracked a kernel CVE was realizing I had no idea what “patched” actually meant. I’d see a CVE entry marked as resolved, open a terminal on my Ubuntu 22.04 box, run uname -r, … Read more

I Needed a Private Sync Network for My Journals — So I Tried Both The thing that broke my patience with raw WireGuard wasn’t the first node or even the third — it was adding a VPS to a mesh that already had my home server and laptop talking to each other. Suddenly I’m juggling … Read more

I Needed a Home Server OS and Couldn’t Stop Second-Guessing Myself The thing that sent me down this rabbit hole wasn’t a technical problem — it was a Reddit thread where someone asked “Ubuntu or Fedora for a home server?” and every single reply was “just use Ubuntu.” No explanation. No trade-offs. Just vibes. I’d … Read more

The Error That Wastes Half Your Afternoon The worst CI failure mode isn’t a red build — it’s a build that looks like it never existed. You push a tag like v2.4.1, watch the CircleCI dashboard for a few seconds, and see… nothing. Not a failed pipeline. Not a warning. Just the tag sitting there, … Read more