Who Saw the Connection? #04 — Railways × Human Factors × Software
If you spend enough time on a railway platform in Japan, you may notice something that looks oddly theatrical.
A conductor checks the platform, points down it, says something aloud, looks toward another reference point, and repeats
When an application is running, knowing that it is up does not necessarily mean knowing what it is doing.
For example, imagine an API request that takes several seconds to complete. We would want to answer questions such as:
Is the application receiving more requests than usual?
What happened dur
GPT-6 Astra at high reasoning effort produced the implementation I decided to keep. I still plan to use medium effort by default.
High handled the interactions between retries and persisted state more completely, but its implementation run took about 48 minutes against medium's 31. In a separate re
"What does */5 * * * * actually mean?" — anyone setting up a scheduled task on a server has probably stared at that row of asterisks at some point. If you run WordPress, you may already be familiar with inspecting WP-Cron's internals through WP-CLI, but the actual crontab syntax used by the OS itsel
I've been encountering this error for a few weeks now and it's finally starting to bother me enough to ask for advice. I get the following error intermittently on any service protected by Pocket ID: error "Failed to reach OIDC issuererror "Failed to reach OIDC issuer But if I reload/refresh the
Hardening a Linux Server with UFW
Introduction
# 1.1 "Teaser" overview
In this project, I tested how a Linux host-based firewall changes the way a server appears during network reconnaissance.
Using Nmap, I scanned a TripleTen play-server before and after enabling UFW. Before the firewall was
After nearly 18 months, my PR to add rootless and readonly filesystem support to bitwarden-lite has been merged and released with v2026.8.1 🚀🚀🚀. Shoutout to MtnBurrit0 from the BW team for getting it across the finish line. This means you can now run as an arbitrary user with literally no privileges
My homelab includes a small VPS hosted on the internet; let's call it myserver.example.com. It provides me with a static IP address and it mainly runs an application that gathers data for me. For security reasons, the only open port is the SSH one (22) with the password disabled, I can only access w
Running an Ubuntu Linux box with docker containers for Jellyfin, portainer, and the cloudflare tunnel. (I know that's against ToS for the free version, but this is just proof of concept for now). Goal is to present my media server to extended family over the internet. The cloudflare tunnel imposes a
For those who are not familiar with the framework yet: it implements the actor model, a design pattern from the Erlang/Elixir world. It is not a BEAM virtual machine, but rather an analogue of the OTP library for building distributed systems. This release is very large, so I’ll focus on the key chan
Your AI stream can die silently at exactly 30 seconds because the proxy's read timeout kills idle connections—not because the model stopped. I traced this while testing a chat widget against MonkeyCode's free server, and the fix is a client-side watchdog that turns a lying spinner into an honest sta
My deploy wizard runs on the cheapest models on the market - Haiku in Claude Code, a free bundled model in OpenCode - and walks a stranger to a working, live-tested deployment in about an hour, two dashboard tours included: GitHub's and Stripe's. Not because those agents are clever. Because they don