Personal notes and thoughts on software engineering by Ramón Miklus.https://ramonmiklus.com/https://ramonmiklus.com/writing/constant-time-string-comparison/https://ramonmiklus.com/writing/constant-time-string-comparison/Why comparing secrets with === leaks timing information, and how two bitwise operators — XOR and OR-assign — remove the signal entirely.Fri, 14 Aug 2026 00:00:00 GMThttps://ramonmiklus.com/writing/upgrading-to-pnpm-11/https://ramonmiklus.com/writing/upgrading-to-pnpm-11/pnpm 11 stops running dependency build scripts by default. What changed, why it's a real security win, and how to audit what you whitelist.Mon, 18 May 2026 00:00:00 GMThttps://ramonmiklus.com/writing/secure-flag-in-cookies/https://ramonmiklus.com/writing/secure-flag-in-cookies/One cookie attribute, enforced entirely by the browser, that shuts down a whole class of network-level attacks — and what it deliberately doesn't protect against.Mon, 10 Feb 2025 00:00:00 GMThttps://ramonmiklus.com/writing/deep-copying-an-object-in-javascript/https://ramonmiklus.com/writing/deep-copying-an-object-in-javascript/The spread syntax and Object.assign() only copy one level deep — nested values are still shared with the source. What that breaks, and the two ways to get a real copy.Thu, 16 Aug 2018 00:00:00 GMThttps://ramonmiklus.com/writing/why-this-site-exists/https://ramonmiklus.com/writing/why-this-site-exists/Documenting software engineering lessons, trade-offs, and practical insights in a personal technical log.Wed, 01 Jun 2016 00:00:00 GMT