TKTuhin Kumar Duttaintechtrail.tuhindutta.com·21h ago · 9 min readBuilding Scratchpad: Rethinking the Local AI WorkspaceMost conversations around local AI still revolve around the models themselves. Which model should I run? How much VRAM do I need? Should I use a larger reasoning model or a smaller, faster one? Those 00
JTJAY TANKinjaytank.hashnode.dev·6h ago · 6 min readThe one XML upload that read your /etc/passwdImagine a boring feature: your app accepts an XML upload — an invoice, a sitemap, a SOAP request, an SVG. A user sends this file: <?xml version="1.0"?> <!DOCTYPE invoice [ <!ENTITY secret SYSTEM "fi00
ATAnakin Techinanakinwriters.hashnode.dev·1d ago · 6 min readRedaction Is a Security Boundary, Not a Formatting DetailThe safest log line is not the one an engineer remembers to sanitize. It is the one where the sensitive value has no printable representation in the first place. If a password can honestly describe it00
JTJAY TANKinjaytank.hashnode.dev·2d ago · 10 min read`verify=False`and the day your HTTPS stopped meaning anythingIt usually starts on a Friday, with a stack trace nobody wants: ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate The de00
ARAI ROUTERinai-router.hashnode.dev·3d ago · 12 min readA 200 from /models Is Not an OpenAI-Compatible API Smoke TestYour new API base URL resolves. TLS succeeds. GET /models returns HTTP 200. That is useful evidence. It is not proof that the endpoint is ready for your application. The response might have the wrong 00
JTJAY TANKinjaytank.hashnode.dev·3d ago · 8 min readThe spreadsheet export that emailed your database to an attackerPicture the least dangerous ticket in your backlog: "Add an Export to CSV button." You wire up a loop, write a header row, dump each record, and ship it. No parsing, no eval, no network — just text go00
CNChukwuebuka Nwokikeinebuka-blog.hashnode.dev·4d ago · 10 min readHow i built the Backend of a Speech-to-text Software.I recently built a speech-to-text software that lets you record voice notes and turns them into clean, structured text using AI. You speak, it transcribes, removes your filler words, and gives you a p00
FFerinferztyle.me·5d ago · 22 min readBuilding ferctl top: Kubernetes resource usage vs requests and limitsSeries: Platform engineering with Go | Topics: Go, Kubernetes, Cobra, client-go, metrics-server, Platform Engineering This is part of the Platform Engineering with Go series. This post builds on the 00
JTJAY TANKinjaytank.hashnode.dev·4d ago · 9 min read The JWT function everyone mistakes for a security checkLet me hand you a valid-looking token and an app that trusts it. // The endpoint that decides who you are on every request. function currentUser(req) { const claims = jwt.decode(req.headers.authoriz00
JTJAY TANKinjaytank.hashnode.dev·5d ago · 8 min read Anatomy of a cross-tenant cache leakUser A refreshed the page and saw User B's dashboard. Not a blurry avatar or a stale badge count. The whole thing — B's account name, B's revenue numbers, B's open invoices — rendered inside A's sessi00
