Blog
Technical Blog
Thoughts, tutorials, and experiments in modern web development and software engineering.
How to Build a $0 Cost Agentic RAG AI Assistant from Scratch using Cloudflare
A complete step-by-step guide to building a stateful, latency-free Agentic Retrieval-Augmented Generation (RAG) assistant using Cloudflare Workers, Vectorize, and D1—all within the free tier.
How to Elegantly Monitor Google Antigravity Model Usage on macOS
Spinning up fleets of autonomous agents with the Google Antigravity SDK is powerful, but tracking costs is painful. Here is why I built a native macOS app, GravityQuota, to monitor API usage in real-time.
Google Antigravity 2.0: Pure Genius or Just an Expensive Token Burner?
Google just dropped Antigravity 2.0 at I/O. Is it the agent-first savior of software engineering, or a runaway database-wrecking train? Let’s break down the suite.
Prototype Pollution Reloaded: Deep-Diving n8n's Five 9.4-Score RCE Vulnerabilities
A rigorous technical analysis of the May 2026 vulnerabilities in the n8n automation platform. We dissect how JavaScript Prototype Pollution in xml2js chains into Remote Code Execution.
The 11-Minute Nightmare: Inside the Nx Console VS Code Extension Compromise
A deep-dive analysis of the May 2026 supply chain attack on the Nx Console extension. We reconstruct the 'Orphan Commit' exploit and discuss how threat groups are hunting for developer AI assistant credentials.
The Free Account Backdoor: Inside the Canvas LMS ShinyHunters Breach
A detailed architectural review of the May 2026 security crisis at Instructure's Canvas LMS. We dissect tenant boundary escapes, lateral movement, and incident response transparent disclosures.
