We Deployed a "Small Fix" and Took Down Production — Here's What Actually HappenedApr 17, 2026·3 min read
Rate Limiting Isn't Optional Here How to Actually Implement It in Node.jsIf your API has no rate limiting, any client can send as many requests as it wants. A broken retry loop, a scraper, or a user who refreshes too fast all of it hits your server with no limit. This guidMay 1, 2026·9 min read·1
Environment Variables You're Leaking to the Frontend Without Knowing ItYou added NEXT_PUBLIC_ to your API key "just to test something quickly". That was six months ago. It's still there. Most developers know the rule: secret keys go in .env, never in client code. But thApr 5, 2026·5 min read·2
