Engineering notes from the trenches.
Reverse-engineering APIs, automation that survives production, security research, and honest takes on the tools I ship with.
Filtered by tag:#nodejs×
Sort
2 posts ← reset filters
AutomationBullMQ, Socket.io, and Webhooks Done Right: What NodeFlow Gets (and What It Could Add)
A deep-dive into NodeFlow's async job orchestration platform: the process separation, Redis-backed WebSockets, HMAC webhooks, and circuit breaker patterns that every engineer should understand—plus the security and reliability tweaks I'd add before production.
Jul 6, 2026 · 11 min- Security
CVE-2025-11954: WISECP's CSRF Flaw and Why We Still Can't Get Complacent
A deep dive into CVE-2025-11954, a CSRF vulnerability in WISECP with a CVSS score of 8. I break down how the attack works mechanically, why this 'old' class of vulnerability keeps showing up, and provide detailed defense strategies with production-ready code examples.
May 20, 2026 · 5 min