The Problem: Game Logic That Fights Your Code The cutscene example is one I keep coming back to because it’s so brutally mundane — yet it exposes the exact fracture between how programmers think about game logic and how we’re forced to implement it. You want to express: walk to door, wait 2 seconds, open … Read more
What Actually Happened to Canonical’s Infrastructure The attack surface Canonical operates is genuinely unusual — ubuntu.com isn’t just a homepage, it’s load-bearing infrastructure for millions of automated processes running 24/7. Every apt update, every CI runner pulling fresh package indexes, every snap daemon phoning home on a timer, every PPA pipeline in Launchpad — they … Read more
The Console Is Lying to You (By Omission) The thing that breaks your focus isn’t the bug — it’s spending four minutes scrolling through console noise trying to find the bug. A real Next.js app with Segment analytics, Intercom’s chat widget, and a lazy-loaded Google Maps SDK will dump somewhere between 150 and 300 console … Read more
The Problem That Made Me Actually Care About Storage Engines Write latency went from 2ms to 400ms in about 90 seconds. No deployment had happened. No traffic spike. The cluster metrics looked fine — CPU at 40%, heap usage normal, no GC pressure. My first instinct was to blame the query pattern, so I spent … Read more
The Problem: Your Index Is Eating Your RAM and Your Queries Are Still Slow The thing that catches most people off guard is the sheer scale of a common word’s postings list. Take a 50-million-document corpus — not unusual if you’re indexing a news archive or a mid-sized e-commerce catalog. The posting list for the … Read more
The Problem That Bit Me in Production My WireGuard setup was textbook. Full-tunnel mode, kill switch via DISALLOW_BYPASS, all traffic routed through 0.0.0.0/0 and ::/0. I’d tested it with a packet capture, confirmed DNS was resolving through the tunnel, and shipped the app. Then a colleague ran a more thorough session with Charles Proxy and … Read more
Why I Kept Confusing These Three Forms (Until I Got Burned) The bug that finally made this click for me: I had an orchestrator function doing a direct HTTP call using axios.get() inside the orchestrator body. Not inside an activity — inside the orchestrator itself. Local testing? Flawless. Deployed it, threw some load at it, … Read more
The Problem That Made Me Look at Stackless Coroutines The callback hell wasn’t obvious at first. We had 400+ NPCs each running layered AI behaviors — patrol, investigate, combat, flee, idle chatter — and every transition between states lived in a different callback registered somewhere across six files. Debugging a report like “guard gets stuck … Read more
The Moment I Started Taking Kernel CVEs Seriously The thing that woke me up wasn’t a breach. It was doing a post-incident audit and realizing our production API server had been running a 6-month-old kernel with three unfixed privilege escalation CVEs — two of which had public PoC exploits on GitHub. We hadn’t been hit. … Read more
The Gap Between ‘Kernel Patched’ and ‘Your Server Is Safe’ The thing that caught me off guard the first time I seriously tracked a kernel CVE was realizing I had no idea what “patched” actually meant. I’d see a CVE entry marked as resolved, open a terminal on my Ubuntu 22.04 box, run uname -r, … Read more