Backups with Restic: 2-year retrospective

NixOS first impressions: writing system-level tests

Designing safer listItems and getItem permissions

ESP32 time bootstrap problem

My first two months using AI

I'm changing my mind about serverless

Why I prefer multi-tenant systems

AppSync subscriptions: waiting for start_ack can still result in missing events

Closing issues because they are unplanned is bad UX

Hardening with Firejail, Landlock, and bubblewrap

Another AWS footgun: Cognito custom attributes

Edge cases in CloudFormation

Retries are still a best practice for serverless architectures

Key management and cryptography

Porting my neovim config to Nix

AWS best practice: reuse the SDK clients

How to install a full Linux on a pendrive

GraphQL tip: Have the subscription types contain all filterable fields on the top-level.

Bigger things are usually more complex

The response size of an AWS Lambda function can be reduced with compression

The "new hire test"

What is the ExpiredToken error with S3 signed URLs and how to avoid it

What is POSSE and how it changed how I use social media

GraphQL tip: Only make fields required if they are present for all users

JavaScript best practice: use return await

How hard it is to disable an IAM user when it does something suspicious?

Thoughts on abstractions

Finally, it's possible to host EC2 instances without paying the public IPv4 price using CloudFront VPC origins

What is the iam:PassRole permission in AWS IAM

AppSync footgun: util.error does not work if called with non-string arguments

A one-liner for getting the exact versions of applications

AWS CDK best practice: include the region in the stack's ID