CSRF: One Click, Account Drained
I just clicked an interesting link, and money was transferred under my name. My journey to understanding CSRF, the sneaky attack that exploits your logged-in session.

Writing about development and technology.
I just clicked an interesting link, and money was transferred under my name. My journey to understanding CSRF, the sneaky attack that exploits your logged-in session.

I thought adding a 'Login with Google' button would be easy. Instead, I faced Redirect URI errors, State parameters, and HTTPS issues. I share the 4-step 'dance' of OAuth 2.0, practical solutions with NextAuth.js, and how to handle mobile deep linking.

Users complained about getting logged out after I scaled the servers. Here's my journey from Sticky Sessions to Redis Store, and finally to JWT.

The definitive guide for Architects. Covers Storage Engines, Distributed Systems Theory (CAP, PACELC), Transactions, Sharding, Glossary, and FAQ.

Clarifying the confusion between login and permission checks through real security incidents and the 'Airport Security' analogy. Deep dive into JWT structure, OAuth 2.0, and Authentication strategies in Microservices.

Understanding high availability and read performance improvement through database replication

Understanding database sharding and handling massive traffic through practical experience

Add one small feature and suddenly your DB CPU hits 100%. The culprit is usually the N+1 problem caused by ORM's Lazy Loading. Here's how to diagnose it, cut 1000 queries down to 1, and avoid the ORM mistakes that cause it.

I wasted 50% of my disk space because I didn't know the difference between Copy and Link. Deep dive into Inode, the secret of `rm` command, and why `pnpm` is faster than `npm`.

Understanding database connection pooling and performance optimization through practical experience

Hardware vs OS Virtualization. A deep dive into Hypervisors (Xen, KVM) vs Containers (LXC, Docker). Includes Glossary, FAQ, and Cost Analysis.

How OS creates the illusion of multitasking. Preemptive vs Non-preemptive, The Starvation problem, and how modern OSs use Multi-Level Feedback Queue (MLFQ) and Red-Black Trees (Linux CFS) to keep everyone happy.

Understanding database transactions and ACID properties through practical experience

Definitely No, Maybe Yes. How to check membership in massive datasets with minimal memory using Bit Arrays and Hash Functions. False Positives explained.

The ultimate guide for Engineers. Includes Architecture Deep Dive, 20-term Glossary, 10-item FAQ, and detailed Security Hardening checklists.

Foundation of DB Design. Splitting tables to prevent Anomalies. 1NF, 2NF, 3NF explained simply.

Why 'SELECT * FROM words WHERE word LIKE "app%"' is too slow. How Tries solve prefix search in O(L) time. Implementation guide and Radix Tree optimization.

If it takes >3s, 53% users leave. Google's Core Web Vitals (LCP, INP, CLS) and how to optimize them.

For visually impaired, for keyboard users, and for your future self. Small `alt` tag makes a big difference.

Tired of naming classes? Writing CSS directly inside HTML sounds ugly, but it became the world standard. Why?
