• Your Hotel Room Has an API. It Probably Shouldn’t.

    Your Hotel Room Has an API. It Probably Shouldn’t.

    5–7 minutes

    I just wanted to turn the lights off. What I found instead was every guest’s name, room number, and door override code sitting behind an API with no authorization check.

  • The Curious Case of Mongolian Script for Web

    The Curious Case of Mongolian Script for Web

    3–4 minutes

    I’ve been learning about writing systems. Most languages today flow either left-to-right (like English) or right-to-left (like Arabic), always moving down the page. But Traditional Mongolian script? It’s a total outlier – you read it in vertical columns, moving from left to right across the page. Pretty unique, right? I got curious about where you…

  • The 18-Second Request: Tracing a Latency Bug to a Hidden Retry Loop

    The 18-Second Request: Tracing a Latency Bug to a Hidden Retry Loop

    3–5 minutes

    It wasn’t the database, and it wasn’t the network. It was a “helpful” driver feature burying us in latency. A walkthrough of the red herrings—from server upgrades to phantom successful requests—and the logic bug that caused them.