Tag: #web
Writing on GPUs, LLMs, MLOps, Kubernetes — and mindset · 12 posts
12 posts are tagged #web; the most recent was published on 2026-09-10.
Often tagged together: #performance 2 #reliability 2 #security 2 #2026-04 1 #ai 1
Most read in the last 90 days:
VBR MP3 breaks transcript clicks — CBR vs VBR, measured
Clicking a transcript line jumped to the wrong place. The cause was the audio container, not the timestamps. Why the Xing TOC in a VBR file drifts up to 0.9 seconds, why CBR stays within 0.04, and what 96 real episodes s
2026-09-10 · 6 min read #audio#mp3#ffmpeg#web#debuggingFollowing 657,607 Links, and the Lifespan of a URL — Why Links Die of Connection Failure, Not 404
A study published its results after following, in 2026, every one of roughly 655,000 shortened links created between 2009 and 2014. More important than the headline number is the composition of the failures: most dead li
2026-08-14 · 6 min read #web#data-engineering#archival#reliability#url-designJWT or Sessions, and When — Settling the Authentication Choice by Asking Where the State Lives
The difference between JWT and sessions is not encryption or performance. It is one question: does authentication state live on the server or on the client? From that choice follows the fundamental weakness of JWT, the i
2026-07-26 · 13 min read #web#jwt#session#authentication#securityWebSocket, SSE, and Polling — Choosing a Realtime Transport, and Why Most Cases Do Not Need WebSocket
Most requirements labelled realtime turn out to be one-directional delivery from server to client, and in that case SSE is far simpler than WebSocket while running on the HTTP infrastructure you already have. Automatic r
2026-07-26 · 13 min read #web#websocket#server-sent-events#realtime#scalabilityCORS Errors and Why You Fix the Server — How the Browser Policy Actually Works, and the Wrong Ways Around It
CORS is not a security device that protects your server. It is a policy that decides whether the browser will hand a response to a script. That is why curl succeeds while only the browser is blocked, and why the place to
2026-07-26 · 14 min read #web#cors#http#browser-security#apiChoosing a Rate Limiting Algorithm — What Really Separates Fixed Window, Sliding, and Token Bucket
Letting 200 requests through a 100-per-minute limit is not a bug. It is the defined behaviour of the fixed window algorithm. This post compares the memory and accuracy tradeoffs of four approaches — fixed window, sliding
2026-07-26 · 12 min read #web#rate-limiting#api-design#redis#reliabilityUsing HTTP Caching Properly — What Cache-Control, ETag, and stale-while-revalidate Actually Mean
no-cache does not mean do not cache. It means store it, but revalidate before reusing it. Starting from that one-word difference, this post lays out the exact meaning of each Cache-Control directive, what conditional req
2026-07-26 · 11 min read #web#http-caching#cache-control#cdn#performanceContent-Encoding: zstd — Safari 26.3 Fills In the Third Engine, and What's Next Is RFC 9842 Dictionary Compression
In February 2026, Safari 26.3 added support for Content-Encoding: zstd, so all three browser engines now receive zstd responses, following Chrome 123 (2024-03) and Firefox 126 (2024-05). Because it's negotiation-based, a
2026-07-17 · 12 min read #performance#web#network#browserWhat Happens When You Type a URL and Hit Enter: A Full-Stack Tour from Browser to Pixel
How much really happens in the one second between typing a URL and seeing a page? URL parsing, DNS resolution with recursive queries and caches, the TCP three-way handshake, the TLS handshake, the HTTP request and respon
2026-07-02 · 11 min read #networking#web#fundamentalsBuilding Web APIs in Rust: Axum and Actix
A practical guide to building web backends in Rust. Axum's handlers, extractors, routing, and shared state; tower middleware; JSON with serde; database access with sqlx; robust error handling; and a comparison with the o
2026-06-28 · 10 min read #rust#web#axum#backendThe Age of Mandatory Age Verification — Is Privacy-Preserving Identity Possible?
Examining the push toward mandatory age verification on social media and the privacy concerns it raises, this post walks through privacy-preserving authentication technologies from a developer perspective: zero-knowledge
2026-06-12 · 14 min read #privacy#identity#zero-knowledge#verifiable-credentials#securityTypeScript & Next.js Practical Guide — Type-Safe Full-Stack Development ♪ Listenable
Everything about modern web development, from TypeScript advanced type system to Next.js 15 App Router, Server Components, and Server Actions.
2026-04-12 · 21 min read #ai#typescript#nextjs#react#fullstack