Elixir & Phoenix Engineering

Deep-dives on Elixir, Phoenix, OTP and distributed systems — code first, from two decades of shipping production software.

Choose a reading path, or browse the latest articles below.

Product audits and rescue

Read the method, then follow the evidence through published product audits. Articles are listed in suggested reading order.

7m read

Vibecode Rescue: supaflo.cc

An active product with paying customers and a massive security issue 36.5/100 — Broken. An anonymous visitor can read customer records and secret keys straight from the database — reported privately, and the operator declined to fix it.

12m read

Vibecode Rescue: paylog.space

A subscription tracker asking for your financial data, scored from the outside. 29/100 — Broken. Manual entry as the only way in, contact addresses that bounce or reach a stranger, a template placeholder live in the privacy policy, and a backend that stopped resolving.

Continue from this reading path

Discuss an audit →