-
The time I shipped my API key in page source
Before Beacon shipped, I caught a security mistake on my own link-in-bio. A Hardcover bearer token grants account deletion. Mine was visible in view-source for a while.
-
The dependency I shipped on purpose
Beacon's Twitch tile depends on a free, unofficial scraper called decapi.me. Here's why I shipped it knowing the dependency could disappear tomorrow.
-
Renting my online life
Every time I close a tab on another subscription notification, I notice the pattern. Nothing I've built online actually belongs to me.