Cogini Blog
Featured articles
Deploying an Elixir app to Digital Ocean with mix_deploy Port forwarding with iptables
KYC wall of shame
There is a saying that frustration is an occupational hazard of being a user experience designer (or an excessively logical engineer). Once you start designing processes, you see process problems everywhere, whether or not you want to. As an American living in Taiwan, I am used to being the weird … Read more…

Debugging your space probe
Years ago we were building an embedded vehicle tracker for commercial vehicles. The hardware used an ARM7 CPU, GPS and GPRS modem, running uClinux. We ran into a tough bug in the initial application startup process. The program that read from the GPS and sent location updates to the network … Read more…

Is it time for Lisp in DevOps?
We have been working on a project migrating a big Rails app from physical hardware to AWS, and I have been doing a lot of automation work. It strikes me how we are doing the same thing over and over with different tools: reading variables, templating files and running semi-declarative … Read more…

PayPal Know Your Customer failure
Applying for a merchant account so you can accept credit cards traditionally takes weeks. You meet with the bank, show them your financial statements, and explain your business. Then they make you an offer for e.g. 2.8% + $0.30 per transaction (plus other mystery fees that you find … Read more…

Secure web applications with GraphQL and Elixir
In traditional applications, the web application talks directly to the database. It has rights to do anything, relying on application rules to control access. If an attacker compromises it, then they can do anything, e.g. grab all the data or create a funds transfer transaction. When security is critical … Read more…

Incrementally migrating a legacy app to Phoenix
Over the years we have done lots of projects where we migrated an application from one platform to another. We might do this to solve performance issues or to switch to a better technology stack. This can be a challenge when you have a big app that is in production … Read more…

Abuse and cryptocurrency business models
When I design systems, one of my favorite things is looking at "abuse cases" which define how they behave when confronted by bad actors. I am a big fan of cryptocurrencies. They give us an opportunity to design systems which enforce and incentivize behaviors, e.g. removing risk and rewarding … Read more…

ABC device support and explicit release criteria
One of the most important decisions we make in product development is when to make a release. From a business perspective, it's better to release early and often, with a "minimum viable product". It's also important to define explicit technical quality criteria, or we will waste a lot of resources … Read more…

Anti-pattern: graphical design driven development
Everyone wants to have a beautiful graphical design for their product. The problem comes when graphical design becomes more important than usability and affects the efficiency of the development process. There is an anti-pattern we call "graphical design driven development." The way it goes is that the client starts by … Read more…

Development effort of Android vs iOS
We often need to estimate development projects which have both iOS and Android. It's tempting to say that Android will be the same, but what we have found is that Android takes more effort. The rule of thumb in Silicon Valley is that it takes two to three times the … Read more…