Writing
Notes on building software you own: local-first, connected devices, and the craft of bespoke software.
-
August 3, 2026
Your AI Code Reviewer Can Be Tricked Into Running the Malware It's Auditing
A July 2026 exploit called Friendly Fire turned Claude Code and Codex security reviews into remote code execution. Here's what it means for teams.
Read → -
July 27, 2026
GhostApproval Broke Approval Prompts in Six AI Coding Tools. Three Still Aren't Fixed
A symlink trick disclosed this month let six AI coding assistants approve edits to files they never actually showed the developer.
Read → -
July 20, 2026
Utah's Data Portability Law Took Effect. Most Apps Aren't Built to Comply
Utah's Digital Choice Act now requires data portability from social platforms, and it exposes how few products are architected to let data leave at all.
Read → -
July 15, 2026
Local-First Conf Just Sold Out. The Reason Why Should Worry You
Local-First Conf 2026 sold out around 'fluid software.' If AI makes apps disposable, your data architecture is the only thing that has to last.
Read → -
July 8, 2026
One Stale Credential Breached 195 Companies. What That Means for Your Stack
A single forgotten OAuth token at a Salesforce integration vendor let attackers quietly pull CRM data from 195 companies this June, part of a wider pattern.
Read → -
June 29, 2026
Europe's Cloud Sovereignty Law Has Four Tiers. Most Products Don't Clear Level Two
The EU's Cloud and AI Development Act grades cloud data control in four tiers. The architecture questions it raises apply far beyond EU public sector.
Read → -
June 22, 2026
Bluetooth 6.2 Drops Connection Latency 20x. Here's Which Products It Actually Changes
Bluetooth Core 6.2 drops minimum BLE latency to 375 µs. Here's which hardware products benefit, and why most should just ship with current chipsets.
Read → -
June 22, 2026
What Your App Actually Needs to Collect
The FTC fined Cox Media Group $880,000 for fake AI surveillance. The real lesson is about what your app actually needs to collect, and what it doesn't.
Read → -
June 17, 2026
AI Codes Half of GitHub. Measured Productivity Is Nearly Flat
Developers self-report 1.4x to 2x AI productivity gains. METR's controlled trials land near flat. Here's what the gap means when you're evaluating a build.
Read → -
June 7, 2026
React Native vs Native for BLE Apps
An honest engineering comparison of React Native vs native for Bluetooth (BLE) apps: bonding, background sync, GATT reliability, and when each approach actually wins.
Read → -
May 31, 2026
What Is Local-First Software? A Founder's Guide
Local-first software keeps your data on the user's device, works offline, and outlives any vendor. Here's what it means, why it matters, and the real tradeoffs.
Read → -
May 24, 2026
Who Owns the Code When You Hire a Developer?
Hiring someone to build custom software? Here's what code and IP ownership actually mean, what to put in the contract, and the red flags that quietly trap you.
Read → -
May 17, 2026
Custom Software vs SaaS: Build vs Rent
When does bespoke software beat renting SaaS? We weigh control, vendor lock-in, and total cost over time, plus a practical way to decide for your business.
Read →