Latest Articles
Page 1
Implicit and Confidential are not opposites. Sorts OIDC / OAuth 2.0 vocabulary into flow, client type and client authentication axes, and shows how PKCE broke the old assumption.
Lists the JWA algorithms usable for OIDC id_token signing, explains why to avoid HS256, how alg confusion attacks work, and shows code that pins the expected alg.
m4a files made with ffmpeg play on Toyota car navigation but show no tags. The cause is the hdlr atom, afconvert fixes it, and here is what does not.
Fix persistent audio dropouts on Mac after high-load Xcode builds. Restart the Core Audio daemon with `sudo killall coreaudiod` to restore playback.
A Claude custom connector is just an MCP server. Here is how to authenticate one against your own OIDC provider, with the security details that matter.
Build, Developer ID sign, and notarize a Tauri macOS app on GitHub Actions, then publish it to a GitHub Release, with auto-versioning.
How to show the shimmering status line next to your Slack agent bot's name, from configuring the app as an Agent to implementing setStatus.
Run Qwen3.5-9B locally on an M4 Mac mini 16GB with the right model and runtime choices. Includes setup steps and fixes for common pitfalls around `thinking`, `presence_penalty`, and `num_predict`.
AWS Amplify Hosting passes CloudFront geo headers (country, region, ASN, device type, postal code, lat/long) to SSR. How to access them in SvelteKit.
When developing an app on a local port, the ghost of previously developed app appears in the browser
Stale fragments of another app flickering on localhost? It's likely an old Service Worker. Here's how to detect it and disable SW in SvelteKit dev mode.
A summary of ytyng.com being featured in the "Useful Content" section of FreelanceHub, operated by Leverages Co., Ltd. Covers the context of the featured article, the FreelanceHub service, and the 5 media/blogs listed alongside ytyng.com.
Compare ULID and UUIDv7 as 128-bit sortable IDs — standardization, library support, and how to use UUIDv7 as a primary key in Django 5.2 + Python 3.14 + PostgreSQL 18.
Build a macOS 26 screensaver (.saver bundle) without Xcode — compile with `swiftc` alone and display a WebView as your screensaver.
When CSS `opacity` transitions don't animate inside WKWebView, force a layer with `will-change` or `transform: translateZ(0)` — the usual workaround.
Tried Cloudflare's new CMS EmDash on Cloudflare Workers and saw TTFB of 500ms–3000ms. Even a text-only about page lands above 400ms. With comparisons, a breakdown of the bottleneck, and links to third-party benchmarks.
How I shipped a custom plugin that calls Brevo's HTTP API to make magic-link auth work on an EmDash site deployed to Cloudflare Workers. Covers what's wrong with the existing plugins, why Brevo, the sandboxed-vs-plugins trap, and how to store the API key.
Build a single-file executable Python script with PEP 723 inline metadata and uv shebang support, including dependency management. Add the metadata block and run it directly with uv.
Open a specific 1Password desktop item straight from the CLI by rewriting the private-link URL scheme. Launch the app directly without going through a browser.
Find out which Claude Code settings actually carry over to Gemini CLI, Codex CLI, and GitHub Copilot. Breaks down what can be shared via symlinks for CLAUDE.md, slash commands, skills, and MCP configs—and what cannot.
Hands-on benchmark: Claude Code operates the same web app via Playwright CLI, agent-browser, and Claude in Chrome. Token efficiency, usability, and stability compared side by side.