Let Hope Breathe in Practice
AI experiments, tool explorations, and productivity notes. For a reusable future self.
AI Practice
AI tools / Automation / Agents / Productivity. Starting from real-world scenarios, exploring the boundaries of AI.
Tool Explorations
Open source projects, dev toolchains, and tech experiments. Reusable and extensible.
Efficiency Notes
Workflow optimization, troubleshooting retrospectives, and learning methods. Making experience stick.
Latest posts
Latest Posts
October 23, 20268 minutes
Eight Compromised CA Keys and a Week of Emergency Upgrades: the eMudhra Incident
A P-384 key that should carry 384 bits of security ended up with a handful of effective bits. Fixing it took every major language ecosystem, and the keyword of this incident is not 'revoke' — it's 'rebuild'.
#tls#pki#ca+5
Read MoreMay 26, 20266 minutes
When CSP Monitoring Met InfluxDB: A 7.5 Billion Series Disaster
Building a front-end security monitoring system for a SaaS platform with ~10M MAU. InfluxDB seemed like the right call. Test passed in 3 days. Production exploded in 20 minutes. The root cause? Using a time-series database as a search engine.
#InfluxDB#time-series database#CSP+3
Read MoreMay 12, 202610 minutes
npm Package Poisoning Is Getting More Frequent: What the TanStack Incident Teaches Us
The painful part of the TanStack incident was not a stolen npm token. It was how several reasonable pieces of CI/CD trust were chained into a publish path.
#npm#supply-chain-security#github-actions+3
Read More