Daniel Alfocea's Picture

Daniel Alfocea, known for years as cr0hn

Twenty years turning technical complexity into clear decisions. I used to build and break systems; now I help decide what to do with them.

Slow JSON Stream: 64 connections at 1 B/s takes down PHP/Laravel in under 2 minutes

New DoS attack: 37/41 HTTP frameworks vulnerable by default. 64 connections at 1 byte/s exhausts PHP/Laravel in <2 min. Full PoC + paper + Docker testbed included.

The Saga pattern as the backbone of AI agents that act in the real world

An AI agent doesn't reason, it acts. And when it acts on real systems, you need Saga. Not as an architectural fashion, but as a philosophy of responsibility.

Supabase Auth vs Auth0: The Lie of Easy Authentication and the Real Risk

If you think wiring up OAuth2 with Google is easy, read this before you walk into a mess you won't know how to walk out of. A brutal comparison between Supabase Auth and Auth0.

How to Call APIs Without Getting Blocked

A practical guide to avoiding the 429 Too Many Requests error, throttling API calls and staying unblocked with jitter, backoff and circuit breakers.

Security incident notification email template (end customer)

Copy, paste, fill in the fields and send. A template for telling your customers about a security incident without spin or euphemisms.