Preventing Broken Object Level Authorisation in ASP.NET Core APIsAn authenticated user calls your API with a valid access token. The token contains the right role and the endpoint requires authorisation. Everything appears secure. The user then changes /claims/8d61Jul 18, 2026·10 min read·104
The Most Dangerous Line in a .NET Background WorkerEvery production system has a few lines of code that look too simple to question.In a .NET background worker, one of them is usually this: while (true) { await DoWorkAsync(); } It looks ok. It loJun 20, 2026·12 min read·384
The Enum That Became a Production IncidentEnums are one of those C# features that feel too small to deserve much architectural attention. You use them for status. You use them for type. You use them for source, category, reason, mode, provideJun 18, 2026·17 min read·181
The C# Code That Looks Synchronous But Isn’tSome of the most confusing C# bugs do not come from complicated syntax. They come from code that looks like it runs now, but actually runs later. Thats where IEnumerable<T>, LINQ, yield return, IQueryJun 17, 2026·9 min read·98
How to DDoS your own .NET appMost people think about DDoS as something hostile. Someone floods your public API, your infrastructure starts to bend, and the conversation moves towards rate limiting, WAF rules, autoscaling, cachingJun 13, 2026·12 min read·75
The New Copilot .NET SDK Changes More Than AutocompleteGitHub Copilot started as something most developers experienced inside the editor. You wrote a method. Copilot suggested the next few lines. Sometimes it was useful. Sometimes it was noisy. Either wayJun 11, 2026·10 min read·55
Claude Opus 4.8 for .NET Developers Anthropic has released Claude Opus 4.8, and the headline is easy to understand. It is the stronger Opus model. Better coding. Better agentic work. Better long-context behaviour. Better judgement. MoreMay 30, 2026·12 min read·175
