Blog
Notes from building MockBase.
How the product gets built, what broke, and why -- written as it happens.

Why 169.254.169.254 Should Scare You
How one URL field caused the Capital One breach — and how to stop SSRF in any feature that fetches a user-supplied URL.
September 4, 2026Xerat02

You're Probably Using "Mock" Wrong
You're probably using "mock" wrong. It doesn't matter — but knowing why is useful.
September 4, 2026Xerat02