Writing
Notes on cloud architecture, system design, and where AI is genuinely useful. I've also been spending a lot of time vibecoding lately—building with AI tools as a real part of the workflow—and writing down what actually works, what doesn't, and what surprised me along the way.
A look at how Wiz's CLI directory scanning works, how it fits alongside Wiz's cloud-side scanning, and the real benefits and friction points of using it day to day.
Read article →How a SonarQube finding introduced me to Zip Slip — what the vulnerability is, a vulnerable code example, and how to safely extract archives in any app.
Read article →A practical automation pattern combining web extraction, structured prompts and document generation to create a brochure from website content.
Read article →Practise with 421 questions, explanations and offline mock exams. My free Australian citizenship test app for iPhone and Android has no ads or subscriptions.
Read article →CloudFormation practices and lessons for building repeatable, reviewable and safer AWS infrastructure through code.
Read article →Keep the conversation going
Send me a note. I read every message and I’ll reply myself.
Say hello →