Blog / Engineering notebook

Working things out, in public.

Technical notes, research, and implementation decisions. Dates and reading times appear only after source verification.

externalAuthentication · JWT · Security

The bcrypt trap: How hashing JWTs silently breaks refresh token rotation

An external article about token identity, bcrypt, and refresh-token rotation.

Read article →
externalBitcoin · Privacy · Rust

Bitcoin Dust Attacks: What They Are and How to Defend Against Them

An external Dev.to article about Bitcoin UTXOs, dust attacks, and Hoover.

Read article →