Blog

Notes on real bugs I've found and fixed, and what building things has taught me.

The two-factor check that never checked anything

August 20, 2026 (2w ago)

A login flow had a full 2FA setup screen, backup codes, and a settings toggle — and none of it was ever enforced at login. Here's how I found it and how I fixed it.

From frontend to full-stack: two years at Efiko

July 5, 2026 (2mo ago)

I joined a Nigerian freelance marketplace in 2018 knowing HTML, CSS, and JavaScript. By the time I left, I'd shipped Laravel backend tickets too. Nobody planned that — it just happened one task at a time.

Double-booking, six times over

June 12, 2026 (2mo ago)

Every appointment-time-change endpoint in Local Medical Diary guarded against overlapping bookings — except one I hadn't checked yet. Finding it meant reading the pattern, not just the bug report.