Software engineer. Building @usefathom since 2019. Sharing all the technical details from behind the scenes.

Joined May 2008
I’ve spent nearly seven years documenting how we built Fathom: outages, DDoS attacks, migrations, $100k AWS savings, my cofounder’s retirement, and a divorce. I write transparently because I want other people to learn from my mistakes. These 18 posts tell the story:
26
24
7
595
83,495
Not a bad payout for a week of work
8
16
1,069
The exploits of the last few days are a good reminder of why we use SaaS. Our company pays for ~20 SaaS services. If we self-hosted them, we’d now be responsible for all of the security patches this week. Instead, our small monthly bill pays for their teams to handle everything.
18
13
3
148
3,717
Does it mean SaaS are immune from being hacked? No, absolutely not. But if you pick good vendors, the probability is reduced. There are lots of red flags that have led us to avoiding risky vendors. We prioritize mature vendors (4+ years) who have strict reviews of AI code.
3
1
16
569
I've lost my patience with GitHub. Going to be migrating our CI pipeline off of Actions because I'm fully tired of the regular outages from this platform. I know they're having growing pains, I get it, but I'm so tired of issue after issue. They have Microsoft money!
44
2
113
10,192
Got access to Mythos 5.1, time to hack Fathom 😈
12
85
7,425
Update: Nothing critical found. Boring. Will be good to run it regularly though.
2
8
957
There are more vulnerable PHP sites right now than patched ones. Most people have no idea what went down today.
7
8
2
156
7,781
Look at how every vendor behaved today in response to the gigantic PHP security release and make your future choices based on the evidence. Laravel was the winner today. DigitalOcean was six hours late and sent nothing yesterday. Better late than never, I guess...
27
5
1
186
13,498
A huge thank you to the Laravel team for everything they've done (and are still doing) in response to the critical PHP security advisory. We took preventative measures yesterday and I was very happy to receive a "we are handling it" email from them. Well done to all involved.
4
6
1
98
4,153
One of the top exchanges I've seen on this platform. Someone tries to dunk on PHP developers and... well... 🤣
Never deleting this app.
9
4
90
4,432
This would be a pretty funny time for GitHub to have another outage.
39
24
15
685
76,722
Great timing
8
1
84
4,940
I gave the same audit prompt to Opus fast mode on Cursor and Conductor with my Claude subscription powering it. I paid Cursor $3.61, which is API pricing, but the audit was finished in 2 minutes. Conductor was still going after 16 minutes. Cursor caught everything. Time is money.
4
19
3,330
I have Cursor Ultra, Claude Max 20x and ChatGPT Plus. The only harness that gives me a flow state is Cursor. You pay API pricing to move rapidly and the harness is absolutely top tier. But if you're happy with your current setup, don't try Cursor, because you'll be hooked.
Is anyone still using Cursor?
18
4
74
10,796
Last night I asked ChatGPT to build a replacement for an app I pay $10/month for. I wanted to build out some features specifically for my use case. Today I woke up and checked it, it was the perfect clone. Then I decided that this project was a waste of my time and deleted it.
129
76
33
5,591
541,379
What should a junior software engineer do in 2026? Learn. You have an infinite supply of educational resources. Learn to prompt, make mistakes, ship things, break things, get hacked, and document your journey. When I had my first job interview at 17, I had shipped 20+ projects.
11
3
1
62
4,125