📰 Dev.to · Harshit Luthra

Ten years of git, distilled. The daily eight, the weekly five, the archeology pack, and two AI shell helpers as a bonus.

Opening a chat UI to ask 'what's the kubectl command to decode a secret' is too much friction. Two tiny zsh wrappers — one prints the answer, one pre-types the

Snowflake taught everyone what happens when an infostealer runs on a contractor's personal Mac. The laptop is the perimeter.

Four DNS records that close the entire phishing impersonation class. SPF, DKIM, DMARC, CAA, two monitors, one afternoon.

Identity, network, default creds, attestation, audit logs — the controls that close most of the gap Parts 1 and 2 left.

Hardening GitHub Actions for small teams. SHA pinning, OIDC, cooldowns, and the trigger Future You at 3am should not touch.

Originally published at harshit.cloud on 2026-01-21. TIL: Blocking AI Crawlers is the...

Tried booking a flight. Got blocked. VPN didn't help. IP was clean. Turns out Akamai thinks my 21 security extensions make me look like a hacker. They're not wr

After benchmarking VictoriaLogs and Loki on 500 GB of logs over 7 days, we found VictoriaLogs delivered 94% lower query latencies, 37% smaller storage, and ran

Woke up to Netlify suspending 5 sites I'd run free for years. Had 15 minutes before my girlfriend noticed her appreciation site was down. Here's how I migrated

Originally published at harshit.cloud on 2025-10-17. TIL: Delivery Service Impersonation...

After two years of running both GitHub Actions and GitLab CI across 50 microservices, here is which one I'd reach for and when.

Originally published at harshit.cloud on 2024-12-19. TIL: Git Interactive Rebase: Clean...

Originally published at harshit.cloud on 2024-12-12. TIL: kubectl JSONPath: Extract...

Originally published at harshit.cloud on 2024-12-10. TIL: kubectl neat - Remove...

Your containers are probably insecure. Here's how I learned to harden Docker containers the hard way, and the security mistakes that almost cost us.

Originally published at harshit.cloud on 2024-12-05. TIL: Docker Build Cache: The...

Ivanti made everyone re-read their VPN architecture in January 2024. Tailscale, Cloudflare Tunnel, and WireGuard in one afternoon.

A startup-grade defense against npm supply-chain attacks, written for Future You at 3am. Chainjacking, postinstall scripts, and the smallest install that buys t

I got tired of trusting third parties with my email privacy. Here's how I self-hosted SimpleLogin with Docker, Postfix, and Brevo, plus the TLS gotcha that cost

Hard-learned lessons from debugging Kubernetes issues at 3 AM. These tricks will save you hours of frustration.

Originally published at harshit.cloud on 2024-12-14. TIL: Docker Volume Debugging:...

Our AWS bill hit $50k/month. Here's exactly how we reduced it to $20k without sacrificing performance or reliability.

Learning Terraform the hard way. Here are the mistakes that cost me sleep, money, and a bit of my sanity.