Blog3 articles
Notes from building. On technology, business, and what breaks.
Post-mortems, disclosures and investigations: what turns up when you open DevTools on the products everyone else just clicks through.
Earlier in 20262
6 min read
A Winner Every Time: The Uber Promo Where the Prize Pool Shipped to the Client
A post-mortem on an expired Uber Eats promo microsite where the bigger failure wasn't the wheel logic - it was embedding 20,000 promo-code entries directly in client-side JavaScript.
5 min read
ChatCut, Waitlists, and the Browser as a Security Boundary
A real-world lesson from ChatCut: how invite-only flows fail when enforcement stays in the UI, why even VC-backed teams ship this, and how responsible disclosure closes the gap fast.