How Short.io is built — architecture, performance, migrations, and the occasional post-mortem, from the team writing the code.
Latest
We wiped a bare metal provider's AlmaLinux installs and rebuilt them with LUKS. Then PCR 7 turned out not to stop a kernel command line edit — signed UKIs did.
Hand-picked
We implemented Chrome's Email Verification Protocol: the registration email still goes out, but some signups are verified without anyone clicking the link in it. Why we want it standardised, what we verify, and how to opt in.
We split the engineering writing out of the main blog. Here's what lives at /dev, why it's a separate section, and what to expect from it.