Engineeringnotities
Wat we bouwen, wat we testen en wat er kapotging — geschreven door de mensen die het platform beheren. Back-ups, beveiliging, DNS, e-mail: de details achter de beloftes op de andere pagina’s.
Phishing doesn't get beaten by longer passwords or more training. It gets beaten by credentials that physically cannot be typed into the wrong website. Why our control panel is passkey-first, and what that means for a hosting account.
A backup you've never restored is a hope, not a backup. Here's how our backup chain works, why copies now live in a second region, and what happened when we pulled one back with a stopwatch running.
A German court fined a website for loading Google Fonts. Most sites still do it. Here's what actually happens when a page loads a font from a US CDN, and why we decided our stack would never do that.
Some of today's most effective spam does not arrive as an obvious scam. It arrives as a polite follow-up that looks like part of an existing business conversation.
Not all suspicious email is a simple fake invoice or a badly written phishing attempt. Some campaigns abuse legitimate mail systems, forwarding chains, and automatic replies to generate convincing junk that passes through real infrastructure.