Tagged Security

Why I stopped hardcoding API keys in .env files and built CipherStack instead. The four-state machine behind LRU vending, the PostgreSQL lock that saved it under concurrency, and what an evening's worth of race conditions taught me about treating provider keys as a fleet.

Why I stopped shipping a Python client to 9,000 Linux servers for a security-critical credential fetch, what static linking actually buys you at fleet scale, and the surprising moment a stripped Go binary weighed less than the Python container image it replaced.