Writing
Essays on identity, security, and the systems that break when assumptions change.
Google externalised the cost of renaming Gmail
Google shipped Gmail address renaming. They didn't ship a webhook. 124 open-source projects still key OAuth identity on email. Here's what breaks and who pays.
12 Apr 2026
124 repositories. Four ecosystems. One broken assumption.
The data behind the essay. 2M+ repos scanned on Sourcegraph. Severity tiers, ecosystem breakdown, methodology. The full audit.
13 Apr 2026