Blog
Practical writing about building fast websites and web apps, working with AI, and getting found on Google and in AI search — in plain English.
5 min read
Google’s fourth spam update of 2026 took almost 14 days to roll out — far longer than the others. Here’s a simple Search Console check to see if your traffic was affected, what spam policies usually trip up small business sites, and how to recover.
5 min read
Node2Shell is a high-severity bug in the Brotli decoder bundled with Node.js that can lead to remote code execution. Here’s who is exposed, how to check your servers, Docker images and CI, and which versions fix it.
6 min read
Next.js 16.4.1 and 15.5.28 fix two critical remote code execution bugs and a Server Actions denial of service. Here’s how to tell if your app is affected, how to upgrade safely, and what the November 3 security release means for you.
6 min read
Tools like Claude Code, Cursor and GitHub Copilot can now plan, edit files, run tests and open pull requests. Here’s how to use AI coding agents on production code without losing quality, security or understanding — with concrete team guidelines.
6 min read
A demo that works on ten examples is not a product. Here’s a practical production checklist for AI features — evaluation sets, guardrails, fallbacks, cost and latency control, monitoring and rollout — so your LLM feature stays reliable after launch.
6 min read
The best AI features aren’t built on clever prompts — they’re built on giving the model exactly the right information at the right moment. Here’s what context engineering is, why it matters more as models get smarter, and production guidelines for doing it well.
6 min read
More customers now ask an AI assistant instead of scrolling through search results. Here’s how AI search actually finds and chooses businesses — and the practical steps that make yours easy to recommend.
9 min read
Tokens, embeddings, attention, training and sampling — what really happens between your prompt and the model’s answer, explained without the hype and without a math degree.
6 min read
Every login form hides a set of design decisions — sessions or tokens, cookies or headers, passwords or passkeys. Here’s how modern web authentication works and how to choose a setup that’s secure without being complicated.
7 min read
Forget magic phrases. Good prompts are clear briefs — context, a precise task, examples, structure and a way to check the result. Here are the techniques that consistently make AI output better.