Posts
All the articles I've posted.
Refactoring Analogies
Published:7 min readA trash pile, a tube of toothpaste, and two moving trains: three ways I think about improving legacy code and keeping rewrites manageable.
Two Trains Talk
Published:1 min readSlides from my SoCal Python talk on improving legacy code, the risks of rewrites, and the two-trains analogy for switching systems.
Strategies for Writing Useful Tests
Published:9 min readI used to hate writing tests. Writing them as I go and treating them as first-class code made them useful enough to change my mind.
How to Land the Right Tech Job for You
Published:21 min readLessons from my tech job searches and time as an interviewer, covering finding opportunities, preparing for interviews, and evaluating offers.
How to Prepare for Talks
Published:6 min readHow I prepare a technical talk: write about the topic, choose a few takeaways, sketch slides, and rehearse aloud before the talk feels ready.
Answers to Django Security Questions
Published:9 min readI found a list of Django security questions but couldn't find clear answers anywhere. So I dug in and wrote them myself, covering everything from CSRF and SQL injection to password hashing and mass assignment.
Using Bandit in the Field
Published:7 min readA field report from testing Bandit on Python projects in 2015: running scans, interpreting warnings, and deciding which findings need attention.
Finding Vulnerabilities with Bandit
Published:2 min readSlides from my SoCal Python talk on Bandit, including findings from scanning 16 open-source Python projects for potential security flaws.
10 Software Talks to Listen to on Your Way to Work
Published:6 min readI felt like I didn't know enough as a developer, so I started listening to conference talks on my commute. Here are ten of my favorites that genuinely changed how I think about building software.
Dangerous Python Functions, Part 2
Originally:updated Feb 21, 20266 min readThe second installment covers pickle and YAML deserialization, SQL injection, and information leakage, with examples and safer alternatives.