Blog & TechTalks

Write-ups with the numbers left in.

Benchmarks, architecture decisions, and lessons from production. Everything here is real published work — when we have nothing worth saying, we say nothing.

BlogSecurity

Securing the Model Context Protocol (MCP): A Production-Ready, OAuth 2.1 Authenticated Server over HTTP

A spec-compliant OAuth 2.1 authorization layer for remote MCP servers over HTTP: the 401 → Protected-Resource-Metadata discovery handshake, PKCE (S256) on every client, Client ID Metadata Documents in place of static secrets, and constant-time token verification to close timing side-channels. Open-sourced, with a live demo.

Read on dev.to

BlogEngineering

Why I Chose ClickHouse Over PostgreSQL for a Billion-Row Analytics Platform

The benchmark methodology, the numbers, and the trade-offs behind taking a critical aggregation query from 42,000ms to 380ms — measured on the real dataset, not synthetic data.

Read on dev.to

TechTalkArchitecture

IoT Architecture Playbook: decisions and benchmarks in the open

A living playbook of architecture decisions for IoT-scale data systems — the reasoning, the trade-offs, and the benchmark numbers, published so the thinking can be inspected.

Read on GitHub

More on the way — follow dev.to/umarali1 for new posts as they land.