Skip to content

WorthPosting

  • Home
  • About

Category: Software Engineering

Cat Links Software Engineering

JWT Security Pitfalls: Algorithm Confusion, Header Injection, and the Claims Everyone Forgets to Check

Posted on September 14, 2026

JWTs are everywhere because they solve an ugly problem: how does a stateless service know who’s calling without a database

Continue readingJWT Security Pitfalls: Algorithm Confusion, Header Injection, and the Claims Everyone Forgets to Check

Cat Links Software Engineering

PostgreSQL Connection Pooling: Session vs Transaction Mode, PgBouncer, and How to Size It

Posted on September 14, 2026September 15, 2026

Every PostgreSQL backend process is a full Unix process with its own megabytes of memory. That design choice buys you

Continue readingPostgreSQL Connection Pooling: Session vs Transaction Mode, PgBouncer, and How to Size It

Cat Links Software Engineering

Prometheus Metric Cardinality: How Explosions Happen and the Five Controls That Stop Them

Posted on September 13, 2026September 14, 2026

Every Prometheus failure I’ve seen in production started the same way: someone added a label. A user ID on a

Continue readingPrometheus Metric Cardinality: How Explosions Happen and the Five Controls That Stop Them

Cat Links Software Engineering

Structured Logging in Go: slog, OpenTelemetry, and the Fields That Matter in Production

Posted on September 12, 2026

At 02:14 on a Sunday, an alert fires: payment success rate dropped four percent. You run kubectl logs across a

Continue readingStructured Logging in Go: slog, OpenTelemetry, and the Fields That Matter in Production

Cat Links Software Engineering

gRPC Server Reflection in Production: Gate It, and Use Health Checks Instead

Posted on September 11, 2026

Here is a debugging story that repeats across every gRPC team. A developer runs grpcurl -plaintext localhost:50051 list against a

Continue readinggRPC Server Reflection in Production: Gate It, and Use Health Checks Instead

Cat Links Software Engineering

LLM Routing and Cascading: Send Every Query to the Cheapest Model That Can Handle It

Posted on September 11, 2026September 12, 2026

If you run a large language model behind a product, you have probably internalized an uncomfortable trade-off. The big frontier

Continue readingLLM Routing and Cascading: Send Every Query to the Cheapest Model That Can Handle It

Cat Links Software Engineering

MVCC and VACUUM in PostgreSQL: Dead Tuples, Autovacuum Tuning, and What PG18 Changed

Posted on September 10, 2026September 11, 2026

Every UPDATE in PostgreSQL is secretly an INSERT-plus-a-tombstone. The old row version stays on disk, fully readable to any transaction

Continue readingMVCC and VACUUM in PostgreSQL: Dead Tuples, Autovacuum Tuning, and What PG18 Changed

Cat Links Software Engineering

epoll Under the Hood: How Linux Event Loops Actually Work

Posted on September 9, 2026

Every high-concurrency network server on Linux eventually converges on the same bottleneck: not CPU, not memory, but the question of

Continue readingepoll Under the Hood: How Linux Event Loops Actually Work

Cat Links Software Engineering

Defending Against Supply Chain Attacks: An npm and PyPI Defense Playbook

Posted on September 9, 2026September 10, 2026

When a popular npm package turns malicious, the window between publication and detection is measured in hours, and the first

Continue readingDefending Against Supply Chain Attacks: An npm and PyPI Defense Playbook

Cat Links Software Engineering

The Rust Borrow Checker Demystified: Aliasing, Memory Model, and When to Fight Back

Posted on September 8, 2026

What the borrow checker actually enforces, what Rust’s memory model promises, and which patterns — RefCell, Mutex, ownership restructuring — resolve the common contention points. … Continue readingThe Rust Borrow Checker Demystified: Aliasing, Memory Model, and When to Fight Back

Posts navigation

Older posts
Newer posts
  • Home
  • About
Copyright © 2026 WorthPosting | Signify by WEN Themes
Scroll Up