kishorek.dev is a blog focused on software engineering, AI, backend development, scalable architectures, microservices, cloud, and modern developer workflows. Expect practical insights, production learnings, system design patterns, DevOps strategies, AI engineering content, and real-world experiences from building reliable and scalable systems. Built for developers who value thoughtful engineering over hype.
A WebSocket is one TCP connection, so one lost packet freezes every message behind it, and it only knows reliable-and-ordered delivery. WebTransport runs over HTTP/3 and fixes both: many independent streams plus a lossy express lane.
A password is a secret you have to share, then keep secret from everyone you shared it with. Passkeys retire that contradiction: your device keeps a private key, the server keeps a useless public one, and phishing stops working.
Chrome and other browsers now ship a small language model on the device. Call it from plain JavaScript and inference runs locally — private, free, offline, and low-latency. It's not a GPT replacement; it's a new tier.
Every search endpoint you've built quietly cheats with POST and loses caching, idempotency, and honesty. QUERY is the proposed method that fixes the thirty-year-old workaround
Both ship wide open by default. The layered way to lock them down in Spring Boot — expose less, authenticate, role-gate, isolate.
The response headers worth sending on everything, the request headers you must never trust, and the CORS line that quietly opens the door.
What's new, what got better, and when it's actually worth the premium.
Same trick as everything else: give the model a rulebook and a leash.
The hardest part of backend engineering isn't writing code. It's deciding what code not to write — and what discipline to add around the code you do.
