Field notes / Engineering, product, security, delivery

Technical thinking
without the theater.

Practical articles for people making decisions about software, websites, mobile products, AI, infrastructure, security, search, and product delivery.

Feb 2025 · Security

Software Supply Chain Security for Teams That Still Need to Ship

Software supply chain security is mostly disciplined delivery work: know what you ship, protect the path to production, reduce blind trust, and rehearse what happens when a dependency turns bad.

Read article ↗
Feb 2025 · Engineering

Post-Quantum Readiness: An Inventory Before a Migration

Post-quantum planning starts with finding where cryptography lives, who controls it, and how long the protected data must remain private. Buying a new algorithm is not the first step.

Read article ↗
Feb 2025 · Engineering

Passkeys and Passwordless Sign-In: Plan the Recovery Path Too

Passkeys can make sign-in easier and much harder to phish. The real design work is in enrollment, recovery, device changes, and the awkward period when old and new methods coexist.

Read article ↗
Jan 2025 · Software

Green Software Without the Vague Claims

Lower-impact software work starts with ordinary engineering: measure the busy parts, move less data, keep hardware useful longer, and stop paying computers to do work nobody needs.

Read article ↗
Jan 2025 · Engineering

From a Monolith to Services: Decide What Actually Needs to Move

A monolith is not automatically a problem, and services are not automatically an upgrade. Move only the boundaries that solve a problem you can name and measure.

Read article ↗
Jan 2025 · Cloud

Edge AI: When Inference Belongs on the Device

Running AI on a phone, camera, or factory floor can improve speed and privacy. It can also create a fleet of hard-to-update models. Here is how to tell whether edge inference earns its keep.

Read article ↗

Browse all field notes.