5 min read
An Extra Passenger for the Postgres Index
How the INCLUDE clause allows you to sidestep the 'Heap Fetch' and achieve index-only scans without the overhead of a multi-column B-tree.
postgres
Read article
Blog
Articles, guides, and thoughts on web development and technology
4 min read
Is Your 'Logout' Button Actually Deleting Anything?
Unmasking the limitations of client-side session cleanup and the server-driven header that provides a true 'nuclear option' for web hygiene.
web-security
Read article
6 min read
The `Wasm Data Segment` Is a Binary Payload Optimizer
Why switching to passive data segments is the secret to reducing the initial memory footprint of massive WebAssembly modules.
webassembly
Read article
7 min read
The Pipelined Query Is a Latency Cheat Code
An in-depth analysis of the Postgres wire protocol’s pipeline mode and how it eliminates the round-trip penalty for sequential database operations.
postgres
Read article
4 min read
Why Does Your 'Perfect' Dark Mode Still Fail the High-Contrast Test?
Discover why OS-level high contrast modes aggressively strip your custom gradients and how the `forced-colors` media query allows you to build a truly accessible UI.
css
Read article
4 min read
Will 'Insertable Streams' Finally Bring True End-to-End Encryption to Your WebRTC Stack?
An engineering deep-dive into the Insertable Streams API and how it allows developers to intercept raw media frames to implement custom, end-to-end security beyond standard DTLS.
webrtc
Read article
8 min read
Stop Increasing Your Memory Limits: Why the Linux OOM Killer Is Actually Hunting Your RSS (Not Your Heap)
Learn why scaling your JavaScript heap size often fails to prevent container crashes and how to audit the kernel-level 'badness score' that actually determines which process dies first.
linux-internals
Read article
4 min read
How to Secure Your Dynamic Module Imports Without Abandoning Subresource Integrity
Dynamic imports are a massive performance win for modern apps, but they often silently bypass your security policy—here is how to apply SRI to lazy-loaded code.
web-security
Read article
7 min read
The Identity of a Connection: Why QUIC Migration Is the End of the Mobile Handover Penalty
Discover how UDP-based connection IDs liberate modern web sessions from the fragility of the IP-based 4-tuple during network transitions.
networking
Read article
4 min read
Stop Using the `private` Keyword: Why Native `#private` Fields Are the Only Real Way to Encapsulate Your TypeScript Classes
The `private` modifier is a compile-time illusion that disappears at runtime, potentially leaking state and missing V8 optimizations—here is why your classes need the hard encapsulation of native `#private` fields.
typescript
Read article