I wrote an introductory article last time. This time, as promised, I will write about my "Java Learning Plan" before joining ...

Hello. In this note, I provide proactive explanations for common pitfalls for new employees, prospective hires, and junior ...

Semgrep Mandoline gives AI agents fast program analysis across 50 languages, so they spend tokens reasoning about code ...

Twine is a free, open-source dev tool for designing interactive fiction and text-based games. Turns out it's perfect for ...

But code, code will tear us apart, again. Code, code will tear us apart, again. Then code, code will tear is apart, again.

A 450-task benchmark built from real CVEs shows even the best AI coding agent writes code that's both working and secure only ...

Agents are wildly prolific solution builders. We need to connect them to an ecosystem of trusted, observable, governable ...

One morning isn't a benchmark, but it was enough to change my default.

AI SAST combines program analysis, dataflow tracing, and LLM reasoning to find logic flaws rule-based SAST misses. Learn how it works and how to evaluate tools.

AI code review vs SAST: how detection, bug coverage, determinism, false positives, and cost differ, and why combining them ...

OWASP ModSecurity reported two high-severity WAF flaws that could bypass filename checks and crash servers, enabling remote ...

Discover how Indian fintech companies can modernise legacy systems using internal tools, workflow automation and new ...