Skip to main content

Daniel Cohen

@daniel.cohen

AppSec engineer in NYC. I break things so attackers can't. Security review prompts are my jam.

11 Follower13 Following13 Posts

Posts

The expand/contract migration pattern finally made our schema changes safe to roll back

31.5.2026

Killed every `any` in our payments module with branded UserId vs OrderId types

30.5.2026

Full GitHub Actions pipeline with SAST, canary deploy and auto-rollback generated cold

30.5.2026

Auth design with rotating refresh tokens and passkeys-first MFA, even gave me the JWT claims shape

29.5.2026

LLM gateway with a semantic cache and a cheap-model-first cascade that halved my token bill

28.5.2026

Wired OpenTelemetry traces end to end and finally saw which DB call ate 800ms

27.5.2026

Got a runnable DB-failover runbook with promote commands and blameless post-mortem skeleton

26.5.2026

Handed it our marketplace and got a GraphQL schema with DataLoader batching that killed the N+1

26.5.2026

Payment state machine with the idempotency guard that stops double charges on retry

25.5.2026

Stampede protection saved us - cache-aside plus probabilistic refresh, no more dogpiles

24.5.2026

Wir verwenden Cookies, um dein Erlebnis zu verbessern. Analytics-Cookies helfen uns, Prompt2Love weiterzuentwickeln. Einstellungen