The Blog

This article explains Anti-Aliasing (AA) and VSync in games, with a focus on Unity. It describes why jagged edges happen and compares MSAA, FXAA, SMAA, and TAA, including how each works, their performance tradeoffs, and when to use them in URP and HDRP. It also covers how VSync prevents screen tearing, the pros and cons of turning it on or off, and gives practical advice for mobile, PC, and console projects, including Unity settings like QualitySettings.vSyncCount and Application.targetFrameRate.

This article compares Unity’s two main scripting backends, Mono and IL2CPP, and explains how they work, their strengths and weaknesses, and when to use each one. It covers Mono’s fast build times and easier debugging versus IL2CPP’s better runtime performance, stronger security, and required support for platforms like iOS and WebGL, then gives practical guidance on choosing Mono for development and IL2CPP for release.

This article introduces Unity Addressables from basic to advanced, explaining how it differs from Resources and AssetBundles for lazy loading, async loading, memory management, and content updates. It covers key concepts like Address, AssetReference, Label, Group, and Profile, then walks through setup, loading, instantiation, reference counting, label-based loading, Play Mode Scripts, remote/CDN updates, and best practices to avoid duplicate bundles and improve performance.

This article explains the differences between Reverse Proxy, Load Balancer, and API Gateway, which are easy to confuse because all sit between clients and backend servers. It shows how a Reverse Proxy hides backend servers and can handle SSL/TLS termination, caching, security headers, compression, and URL rewriting; how a Load Balancer distributes traffic across multiple backend instances using L4 or L7 approaches, common balancing algorithms, health checks, and sticky sessions; and how an API Gateway becomes a single entry point for microservices, handling authentication, authorization, rate limiting, request/response transformation, API aggregation, circuit breaking, service discovery, logging, monitoring, and versioning. The post also compares the three roles directly, gives real-world deployment patterns, and offers practical advice for choosing and combining them in backend architectures.

This article explains the difference between Authentication (AuthN) and Authorization (AuthZ) in backend security. It defines AuthN as identifying who a user is and AuthZ as checking what they are allowed to do, then walks through common authentication methods like Basic Auth, session-based auth, token-based auth with JWT, and SSO using SAML, OAuth2, and OpenID Connect. It also covers authorization models such as RBAC, ABAC, and ACL, compares AuthN and AuthZ in a summary table, and shows how they are typically split across an API Gateway and microservices in a modern system, including practical notes on JWT revocation with short-lived access tokens, refresh tokens, and Redis blacklists.

This article introduces TruffleHog, an open-source tool for finding and handling exposed secrets such as API keys, database passwords, private keys, and tokens. It explains how TruffleHog discovers secrets across Git history, filesystems, Docker containers, S3, CI logs, chat, and wikis; classifies more than 800 secret types; validates findings by testing them; and analyzes common secrets with API lookups. The post also covers scanning Git repositories and AWS S3, and shows how to read results such as Verified: false versus Verified: true, including when to revoke, delete from Git history, and rotate credentials.