Senior full-stack engineer with 8+ years building products on Ruby on Rails and React. I ship performance work, AI-assisted developer tooling, and platforms that scale.https://fkhach.meenhttps://fkhach.me/blog/rebuilding-this-site-with-astro-and-vite-plushttps://fkhach.me/blog/rebuilding-this-site-with-astro-and-vite-plusIntroducing a new toolchain into a product I'm shipping adds nothing to that product, so I never get to evaluate anything at work. Personal projects are the only place I do, and this time the thing under evaluation was Vite+.Sun, 13 Sep 2026 00:00:00 GMTVite+AstroToolingLearninghttps://fkhach.me/blog/rails-signed-id-is-underratedhttps://fkhach.me/blog/rails-signed-id-is-underratedEmail verification and password resets get re-implemented in every codebase. Most approaches add schema clutter or JWT machinery when Rails has a built-in solution.Sun, 23 Aug 2026 00:00:00 GMTRuby on RailsSecurityArchitecturehttps://fkhach.me/blog/scrubfs-privacy-focused-fuse-filesystemhttps://fkhach.me/blog/scrubfs-privacy-focused-fuse-filesystemA VPN hides your location, but file metadata leaves fingerprints everywhere. I built scrubfs to strip metadata on read without modifying original files.Sun, 26 Apr 2026 00:00:00 GMTRustLinuxPrivacyOpen Sourcehttps://fkhach.me/blog/websockets-from-a-pwa-to-a-raspberry-pihttps://fkhach.me/blog/websockets-from-a-pwa-to-a-raspberry-piBrowsers won't open an insecure WebSocket from an HTTPS page, and a secure one needs a certificate they already trust. Getting one onto a Pi at a private address came down to a single decision: the Pi runs its own Wi-Fi.Sun, 19 Oct 2025 00:00:00 GMTPWAWebSocketsTLSRaspberry PiLet's Encrypthttps://fkhach.me/blog/nested-validation-in-rails-8https://fkhach.me/blog/nested-validation-in-rails-8Handling a three-tier model hierarchy in one request often leads to hand-rolled loops that get messy. Rails has solved this natively since version 2.3.Sun, 09 Feb 2025 00:00:00 GMTRuby on RailsRails 8Architecture