8 min read
The Hidden Costs of Shipping a Mobile App
Building a mobile app is getting easier every year. Turning it into a commercial product - especially from Spain, without a formal company - still has expensive, non-obvious walls.
BlogWriting← Home
Notes on security, code, and other things I find interesting.
Here you can find some of the things I find interesting and some of the things I've been working on.
Subscribe via RSS14 min read
How ML-KEM Works: From Noisy Equations to a Shared Secret
A walkthrough of FIPS 203: Module-LWE, the K-PKE building block, the Fujisaki-Okamoto transform, NTT multiplication, and why ML-KEM-768 is the default.
7 min read
Post-Quantum Crypto for Sysadmins: What You Actually Update
PQC is not a new TLS version. It is new key-exchange and signature algorithms inside your TLS stacks. Here is the mental model, what to inventory, and how to verify OpenSSL, Nginx, Java, and friends.
7 min read
Why I Stopped Generating Code from OpenAPI in Mirror
Design-first OpenAPI looked clean until Spring generics, pagination, and response wrappers outgrew what a YAML spec can honestly express. Here is why Mirror moved control back into the code.
4 min read
Why Doesn't LinkedIn Do Anything?
LinkedIn is the default professional network, and the product is full of noise: games, broken job search, half-baked services, and emails that lie. It has the money to fix this. It doesn't.