Shout-out to this excellent post I just came across from @jakelazaroff.com about homomorphically encrypting CRDTs!
I love the bits of interactivity and clear presentation of both topics. It's a great example of the benefits of personal blogs.
jakelazaroff.com/words/homomo...
"HATEOAS for Haunted Houses"
A case-study in using Hypermedia as the Engine of Application State (HATEOAS) architecture to build a flexible control system for a local haunted house on a tight delivery schedule.
www.sanfordtech.xyz/posts/hateoa...
Ever thought about the tech behind haunted houses?
I built a control system for 15 rooms in 10 days on Arduino controllers with 8kb RAM. HATEOAS eliminated the coordination tax between client and server. Full write-up in comments: #software #dev #hateoas
Thanks for the link. I'll keep an eye out for updates!
I'd love to try to build a personal finance app built on ATProto. Apps in that space are very sticky exactly because people value their history so much.
From what I can tell, the protocol is missing the ability to encrypt a person's data repository. That's a hard requirement.
Congratulations on the migration! Signed up for your newsletter.
Here's a complete implementation guide with configs and screenshots:
www.sanfordtech.xyz/posts/aws-ss...
When your security setup enables faster development instead of fighting it, you can focus on shipping features rather than managing access or compromising security.
I've used this at two companies: a fintech handling compliance audits and my own startup managing multiple contributors.
Same setup works whether you're onboarding contractors or handling compliance requirements.
No expensive SSO provider needed.
The magic happens in your local development setup. Instead of hardcoded keys, you get temporary credentials that automatically expire, generated from a single command.
AWS Organizations + IAM Identity Center solve this with two key principles: separate AWS accounts for environment isolation and temporary credentials through SSO.
Each environment gets its own account. Dev work stays in dev, prod stays locked down, billing stays consolidated.
The problem with most startup AWS setups:
❌ Shared root credentials
❌ No isolation between dev/staging/prod
❌ Manual access requests slowing down work
Stop sharing AWS credentials across your team. Here's how to set up proper environment isolation with SSO that actually improves your development workflow.
Takes 60 minutes, costs nothing, and works from 3 people to 300. 🧵
#aws #security #startups
I haven't used it myself, but I was pitched by a vendor using Coast:
www.trycoast.com
They used it to show what experiences their API could bring to my app. It's been my favorite sales call to date.
Not a person, but I learned a lot from this book:
www.refactoringui.com
JPMorgan wants to charge FinTechs up to 1000% of their per-transaction revenue for data access.
Here's how data aggregation actually works, why these fees don't benefit consumers, and what it means for the apps that connect to your bank:
www.sanfordtech.xyz/posts/new-jp...
#fintech
A fun post a finished about ranking restaurants based on their Google Maps data. I came up with and tried out two models traveling back to Louisiana from New York.
It was a long drive...
www.sanfordtech.xyz/posts/a-math...
#mathematics #statistics
Just filled out the survey! I'm looking forward to learning more about ElementInternals and Mutually exclusive <details>.
Thanks for the link!
🚀 The #StateOfHTML 2025 survey is now open!
➡️ Take it now: survey.devographics.com/en-US/survey...
💡 Spending time to fill these out is an investment into your craft, as browsers are using the results to make prioritization decisions.
You don't have to do it in one sitting (or even one device).
The meta tag support includes standard content and extensions.
The JSON-LD functionality helps your site utilize Google's enhanced search results.
Check it out! Contributions welcome.
github.com/san4d/astro-...
I reworked patterns from websites I've built into a library called "astro-headstart": one library that helps managing your head in @astro.build . The library manages two essential types of head content: HTML meta tags and JSON-LD.
Thanks, man! I've built my startup with Astro, HTMX, Web Components, and a lightweight SQL client (DrizzleJS) and it's been amazing how quickly I can implement features.
I'd like more people to think about whether their app is truly client-side focused.
Fair enough. Daisy has good theming support, which might be helpful.
Whatever tooling you choose, if ClaudeCode struggles try using the Context7 MCP server. It allows Claude to pull a library's most-recent documentation.
I've had a good experience with Astro and ClaudeCode. It outputs static HTML by default and works well with Tailwind. Check out DaisyUI as well, since you're using Tailwind.
Thanks for this. I'll update the post. Playing around with it a bit more, it's an `HTMLUnknownElement` if its parsed as native tag (one word, no hyphen) and a `HTMLElement` otherwise.
Thanks for the heads-up! Here's the full link:
www.sanfordtech.xyz/posts/youre-...
Table of contents for my post "You're overthinking web components"
Just finished up my post about using #webcomponents for progressive enhancement. I've had a great experience using them to add interactivity to my @astro.build apps and wanted to share some of the patterns.
Very excited to check out the live collections!
