Bot Detection, Honeypots, and SMS Checks on Sales Leads
Identity checks prove a lead is a real person at a real company. What bot detection, honeypots, and SMS verification cost an AI-equipped attacker.
I write about web development, tooling, and whatever I happen to be experimenting with. If you're here for the web work, the WordPress exit intent plugin build is a good starting point, or head straight to the case studies.
Identity checks prove a lead is a real person at a real company. What bot detection, honeypots, and SMS verification cost an AI-equipped attacker.
An idea for scoring sales leads with AI checks on the email domain, the site behind it, and the person who submitted it, averaged into one score.
Prism's line-numbers plugin measured the gutter against the wrong line-height when the stylesheet loaded late. One rule in the critical CSS fixed it.
Subset and re-compress self-hosted WOFF2 fonts with pyftsubset and Brotli to cut the font payload by 89%, with the exact commands and byte numbers.
The Shai Hulud worm poisoned a pnpm cache in GitHub Actions to hit TanStack and 170+ npm packages. How it worked and the steps I took to harden my repos.
Five defaults in the Claude Code VS Code extension I changed with a companion extension that patches its files and re-applies after every update.