200+ holes
closed on a site under attack
What Does the Nerd See?
The hard part. If you have ever said “I love this idea but have no idea if it can be done,” then that is where I come in.
I’ve gathered requirements from everyone from the CEO of a hospital network to the people who use the software every day, and turned what they needed into software that works. I explain things in plain English, too.
I also maintain servers. Not everything is about clickable interfaces. I use SSH and Vim. A lot. I use AI, but it either writes the code or checks it, never both.
6 sites
on one IP, each broken into separately
Same Server, Same Plugin
An attacker went after every site on one server’s IP address and got into all six the same way, through one outdated plugin. There was no sign that one site had been used to reach another. I found the backdoor’s signature, cleaned and checked every file, reinstalled core files, updated plugins, removed three admin accounts the attacker had created, rotated credentials and turned on auto-updates. Each site now runs as its own Linux user, so one compromised site can’t reach the others.
2 min → 2 sec
for one product lookup
Finding the Slow Part
A store’s product lookup used 128 MB of memory and 2 minutes of CPU time. One custom SQL query brought it to 2 seconds and under 32 MB.
4 hours → 5 min
of engineering calculations
Software People Can Keep
Calculations that took engineers 4 hours by hand now take under 5 minutes. I wrote it in Visual Basic on purpose, so the engineers could maintain it themselves. The same thinking in Perl took WHM customer onboarding from 2 hours to 2 minutes.
12+ languages
written, not spoken
Multilingual
I’ve written production code in more than 12 programming languages, including PHP, Java, Ruby, C and Python. That’s before anyone argues about whether HTML, CSS and XSLT count. Some of the websites I’ve built speak more than one language too: on Xtreme Clutch’s site, readers could switch languages on any page, and the sitemap listed every language so search engines could find each one.
100+ domains
across 10 servers for 5 clients
Keeping the Lights On
I look after my clients’ servers, whether they sit in the client’s own server room or with a cloud provider: DNS, mail servers with SPF and DKIM, networking, firewalls, and PCI DSS compliance. I once moved a whole server room overnight, re-cabling the racks, with zero business disruption.
8 gyms
on one multi-tenant platform
The Box Tracker
I co-founded a gym management platform for 8 CrossFit gyms. Recurring ACH billing ran in-house: failed payments rolled back for an automatic next-day retry, and no member was charged more than once per billing cycle. I security-tested it for 2 years with Burp Suite and fuzzing.
8 years
in production, watching 800+ sites
Built to Last
A multithreaded C daemon, backed by MySQL, monitored 800+ websites and stayed in production for about 8 years.
4 design firms
on 3 continents
A Pretty Big Town
I’ve built the custom features 4 web design firms needed, after working through each problem with their UX designers. I’ve worked with companies in California, Arizona, Texas, Georgia, France, England and Australia.The Latest
- DMARC Help: Email Trust Monitoring (01 Dec 2017)
- The End of http.sh (15 Nov 2016)
- Distributor Search for a Clutch Maker (26 Aug 2012)
Tell Me About Your Project
Describe what you want to build, and I will get back to you as soon as possible. Use your own words. You don’t need the technical terms.