security I scanned the leaked Claude Code source before building it I scanned a widely-shared copy of leaked Claude Code source before running it. The scanner returned a critical score. Here is what the findings actually mean, and why the repository distributing it deleted my comments.
ai Introducing elvatis-mcp: Control Your Entire Infrastructure from Claude Desktop A new open-source MCP server that connects Claude, Cursor, and Windsurf to your smart home, memory, cron jobs, notifications, and local LLMs -- with 32 tools across 7 domains.
security How We Swept 25 Repos for Security Issues in an Afternoon (and What We Actually Found) A practitioner's account of running a full Dependabot and CodeQL sweep across an entire GitHub organization, fixing real vulnerabilities, and hardening a production server the same day.
security NIS2 for Mid-Sized Companies: What Actually Matters NIS2 is here and most mid-sized companies don't know if they're affected. Here's a practical checklist from someone who's been through TISAX.
security How GlassWorm Gets In (and How We Locked It Out) A supply-chain malware campaign hit hundreds of repos across GitHub, npm, and VS Code. Here's what I found when I scanned my own projects.
ai Two Bugs, One Sunday Morning: What Debugging Your AI Gateway Actually Teaches You A plugin crash and a process fork bomb walked into a Sunday. What I learned about tool schemas, token limits, and why reading vendor specs matters.
ai Who's Responsible When AI Breaks the Rules It Wrote Itself? Here's something that should make you uncomfortable.
ai Human-in-the-loop: Why Autonomy Should Not Be All or Nothing I woke up at 2:30 a.m. replaying the same question: what does autonomy really mean when you are the one who still has to clean up the mess.
FoundersNote The Myth of Going Offline When Your Job Never Sleeps I wrote about shattering glass houses. Then I tried to step away from the screen. Turns out, when you run the systems that keep a company alive, "offline" is just a word other people get to use.
ai How I Built a Day/Night AI Development Loop with AAHP A file-based protocol and two tools that let AI agents pick up where the last one left off. One for your VS Code sessions, one for overnight autonomous runs.