•6 min read
FeaturedKnock Knock, Who's There?
A static site with no login pages, no forms, and no commercial value still attracts thousands of unsolicited requests per month. This is what that traffic contains.
Read moreEngineering, architecture, and continuous learning.
Notes on cloud infrastructure, software design, and building reliable systems with a focus on practical trade-offs, automation, and long-term maintainability.
Featured Posts
•4 min read
FeaturedAccessibility as Engineering
Reflections on the shift from compliance to structural engineering and a curated reading list for building deeper accessibility literacy.
Read more•5 min read
FeaturedArchitecture as Memory
Codifying lessons into architectural constraints and automated tests to prevent regression.
Read more•4 min read
FeaturedPrivacy as a Design Constraint
Why privacy belongs in the architecture, not bolted on after.
Read more•5 min read
FeaturedCaching for Consistency: A Balanced Static Site Strategy
Implementing a tiered caching strategy that balances high-performance delivery for assets with immediate consistency for content updates.
Read more•6 min read
FeaturedModern AWS Authentication: Humans vs Automation
How to simplify your AWS security model by clearly separating human access from automated deployment.
Read moreLatest Posts
View all posts•4 min read
The Path Not Found Is the Point
Scanners arrive with a shopping list: WordPress, admin panels, .env files, and login forms. A static site has none of those. That absence turns the site into a passive honeypot.
Read more•5 min read
Mechanical vs structural
Some code changes can be verified by reading the diff. Others require understanding the code. The split matters.
Read more•5 min read
Why Toronto! and Why, Toronto?
One CloudFront edge location dominated the probe traffic by a factor of six. Pulling that thread led to Azure Canada Central and a particular kind of internet scavenger.
Read more•4 min read
The Ambiguity of 2n
A homework photo turned a simple maths question into three valid answers and a late-night lesson in why notation matters.
Read more•6 min read
Knock Knock, Who's There?
A static site with no login pages, no forms, and no commercial value still attracts thousands of unsolicited requests per month. This is what that traffic contains.
Read more•5 min read
Why I Used CloudFront Functions Instead of Lambda@Edge
Why a CloudFront Function was the right choice for canonical host redirects and URL rewriting, and what would change that decision.
Read more•4 min read
Why CI took three minutes or fifteen
How a slow GitHub Actions run led to a handful of small fixes: browser caching, dropping WebKit, and understanding what --with-deps actually does.
Read more•8 min read
Self-Hosted Analytics on AWS
A privacy-preserving analytics pipeline on AWS, built to cost almost nothing.
Read more•4 min read
Accessibility as Engineering
Reflections on the shift from compliance to structural engineering and a curated reading list for building deeper accessibility literacy.
Read more•5 min read
Architecture as Memory
Codifying lessons into architectural constraints and automated tests to prevent regression.
Read more