Blog

Thoughts & Stories

Sharing my experiences, learnings, and adventures in tech and beyond.

Browse by Topic

DevOps & Cloud Infrastructure (193)AI & LLMs (143)Backend & APIs (102)Web Development (90)ERP Systems (77)Security (65)Software Development (58)Career Reflections (29)Cloud (29)AI / Machine Learning (18)Product & SaaS (12)University (1)Hackathons (1)

SecurityOctober 202612 min read

NIST AI Agent Standards Initiative: What CAISI Covers

What NIST's CAISI AI Agent Standards Initiative covers: three pillars, the security RFI, the NCCoE agent identity paper, and what engineers can do now.

AIOctober 202612 min read

Stack Overflow Developer Survey 2026: AI Agent Trust

Stack Overflow's 2026 survey says 26.2% use AI agents at work and only 6.6% trust AI for important decisions. What the numbers allow, and a review policy.

DevOpsOctober 202612 min read

AI Code Review Bottleneck: What CMU and Stanford Measured

AI doubled output per developer but reviewers grew only 1.5x. A CMU and Stanford study of 196,212 PRs found written review feedback fell from 39% to 21%.

SecurityOctober 202612 min read

AIBOM Hugging Face Study: 97,940 Models, Docs Missing

A 97,940-model study shows generated AI bills of materials are structurally complete but documentation-poor. The numbers, the limits of the method, and what to add by hand.

SecurityOctober 202612 min read

Pickle Model Scanner Evasion: ShadowPickle and Safetensors

A clean Hugging Face pickle scan is not proof of safety. What the ShadowPickle paper measured across ten scanners and four hubs, and a safetensors-first loading policy you can enforce.

SecurityOctober 202612 min read

PP 33/2026 Pelindungan Data Pribadi: A Developer Guide

Indonesia's PDP implementing regulation read against the 2022 law: which of the 3x24-hour notice, DPO and 2% fine rules are new, and what to build before January 2027.

Showing 37–42 of 818 posts

Explore More

Projects

See the projects I've built

Experience

My professional career

Certifications

Professional certifications