Christian Heilmann

AI is Dunning-Kruger as a service

October 30th, 2025

On January 6th, 1995 two bank robbers in Pittsburgh confused law enforcement by not making any attempts to conceal their faces but instead brazenly looking at security cameras as if they were invisible. The reason is that they actually thought they were. Clifton Earl Johnson had convinced his fellow in crime, McArthur Wheeler that covering […]

Abandonware of the web: do you know that there is an HTML tables API?

October 8th, 2025

When people turn data into HTML tables using JavaScript, they either use the DOM methods (createElement() and the likes), but most of the time just append a huge string and use innerHTML, which always is a security concern. However, did you know that HTML tables also have an old, forgotten API ? Using this one, […]

Time to separate the art from the artist

September 28th, 2025

A lot of technical people currently spout regressive and harsh messages about race, religion, identity and women’s rights to side with “strong man” politicians and parties. That’s their right, but it also is an abuse of reach and power. Time to focus. A lot of the people whose work I adore and admire are terrible […]

As I remember London

September 25th, 2025

When I moved to the UK at the tail end of the last millennium, I wasn’t in a good place. I was hired by a US company to work in their German office, and they sent me over to the US to work on their product. I lived in a hotel for a few months, […]

Newsletter

Check out the Dev Digest Newsletter I write every week for WeAreDevelopers.

Don't stop thinking, AI Slop vs. OSS Security, rolling your own S3 Despite AI you still need to think, Bitter lessons from building AI products,  AI Slop vs. OSS security and pointer pointer…
200: Building for the web, what's left after rm -rf & 🌊🐴 vs AI What remains after you do a rm -rf? Why do LLMs know about a seahorse emoji? What image formats should you use? How private is your car?
Word is Doomed, Flawed LLM benchmarks, hard sorting and CSS mistakes Spot LLM benchmark flaws, learn why sorting is hard, how to run Doom in Word and how to say "no" like a manager.
30 years of JS, Browser AI, how attackers use GenAI, whistling code Learn how to use AI in your browser and not on the cloud, why AI makes different mistakes than humans and go and whistle up some code!
197: Dunning-Kruger steroids, state of cloud security, puppies>beer

My other work: