Notes from the build

Tutorials and deep dives on AI agents, automation, and shipping real software.

Updated Aug 10, 2026
18 min read
Security

I discovered a sophisticated C2 backdoor quietly living inside my GitHub repos for over a year. It used the Ethereum blockchain to hide its server IP, triggered on every build, and left almost no traces. Here is exactly how it worked, how I found it, and how I wiped it from history.

#Security#GitHub#Malware#Supply Chain Attack#C2#Ethereum#Node.js#git filter-repo#DevSecOps
Updated Jun 1, 2026
14 min read
AI Automation

A real estate professional was drowning in 3 inboxes, scattered tasks, and missed follow-ups. I built a multi-agent AI system with 23 real tools, live Gmail access, and a daily briefing pushed to Telegram every morning. Here's exactly how it works.

#AI Agents#Gmail API#Google Calendar#Mem0#OpenRouter#Langfuse#Supabase#Telegram Bot#Automation
Updated Feb 24, 2026
10 min read
AI Development

Cloudflare's vinext is a drop-in Next.js replacement built on Vite that deploys to Cloudflare Workers. One engineer and an AI model rebuilt the most popular front-end framework from scratch — 4x faster builds, 57% smaller bundles, and it cost about $1,100 in tokens.

#vinext#Next.js#Vite#Cloudflare Workers#AI#Open Source
Updated Feb 14, 2026
12 min read
Architecture

How to fix the generic Open Graph preview problem in React SPAs — using Cloudflare Workers to intercept crawler requests and serve dynamic meta tags from Supabase in real time.

#SEO#Cloudflare Workers#React#Supabase#Open Graph#SPAs
Updated Feb 12, 2026
5 min read
Troubleshooting

If you're seeing 'Failed to fetch' or ERR_QUIC_PROTOCOL_ERROR when calling the Gemini API from Cloud Functions, here's the exact cause and the 2-line fix — it's not your code.

#Gemini#Google Cloud#Networking#QUIC#Cloud Functions#Debugging