Problems Solved

Stripe Says Publishable Keys Are Safe to Expose. They're Not.

Stripe's documentation says publishable keys are "not secret" and safe to embed in client-side code. But attackers are using them to validate stolen credit cards at scale - and Stripe blames the merchants.

Safari Hanging on Page Reloads? OPNsense, QUIC.

Spent a week debugging Safari hanging on page reloads. Turns out it was my OPNsense firewall's UDP timeout killing idle QUIC connections. Here's how to fix it.