Now

A /now page. Last updated April 2026.

Building #

Somewhere around project 20 of the vibe coding series. The pace has slowed from one-a-day to one-when-it’s-ready, which I think is the right call — the point was never the count.

Recent things: a browser-only OWASP vulnerability lab with an AI tutor, a blackout poetry generator from Hacker News headlines, a Wodehouse quote bot on Bluesky that posts twice a day.

Reading #

Working through the curl source code, slowly. It’s been running on virtually every computer since 1998 and most people treat it like a given. I wanted to know what’s actually in there.

On the book side: dipping in and out of Mankutimmana Kagga by DVG. 945 verses of Kannada philosophy written in the 1940s. The kind of book that rewards returning to.

At work #

Risk, governance, incident response. The usual. The gap between what organisations think their security posture is and what it actually is remains a rich seam of material.

Not doing #

Chasing frameworks. Building things that need a slide deck to explain. Optimising anything before it’s shipped.