Notes on web security, headless Shopify, AWS, data, and the shell.https://www.adaminnes.dev/https://www.adaminnes.dev/blog/agent-harness-design/https://www.adaminnes.dev/blog/agent-harness-design/The same model can look brilliant or broken depending on the code wrapped around it. Here's what an agent harness is, what the big labs put in theirs, and why the best move is often deleting a piece.Sat, 12 Sep 2026 00:00:00 GMTAI AgentsLLMAgent HarnessSecurityhttps://www.adaminnes.dev/blog/ontologies-for-ai-agents/https://www.adaminnes.dev/blog/ontologies-for-ai-agents/A JSON schema tells an agent what shape its output should have, not what the words mean. Here's how W3C ontologies fill that gap, and why you want SHACL guarding the door.Thu, 10 Sep 2026 00:00:00 GMTAI AgentsOntologiesKnowledge GraphsSecurityhttps://www.adaminnes.dev/blog/how-ai-agents-work-under-the-hood/https://www.adaminnes.dev/blog/how-ai-agents-work-under-the-hood/Strip away the branding and an AI agent is a model, some tools, a loop and a context window. Here's how each piece works, and where the security and cost problems hide.Sat, 15 Aug 2026 00:00:00 GMTAI AgentsLLMMCPSecurityhttps://www.adaminnes.dev/blog/hermes-agent-self-improving-ai-agent/https://www.adaminnes.dev/blog/hermes-agent-self-improving-ai-agent/A practical look at Nous Research's open-source Hermes Agent: its skills loop, deliberately small memory, messaging gateway, and the security controls worth setting before you let it run unattended.Wed, 27 May 2026 00:00:00 GMTAI AgentsHermes AgentLLMAutomationSecurityhttps://www.adaminnes.dev/blog/hermes-agent-first-look/https://www.adaminnes.dev/blog/hermes-agent-first-look/Nous Research just tagged the first real release of Hermes Agent. A casual first look at the practical jobs it's good for right now, and the safety switches worth flipping before you hand it a terminal.Sun, 15 Mar 2026 00:00:00 GMTAI AgentsHermes AgentAutomationSecurityhttps://www.adaminnes.dev/blog/python-ml-setup-uv-pytorch/https://www.adaminnes.dev/blog/python-ml-setup-uv-pytorch/How I'd set up a Python ML project in February 2026 with uv and PyTorch 2.10, so you get the right GPU build, a lockfile you can trust, and a coding agent that doesn't quietly wreck your environment.Sun, 15 Feb 2026 00:00:00 GMTPythonMachine LearningPyTorchuvAI Agentshttps://www.adaminnes.dev/blog/machine-learning-lead-scoring-technical-deep-dive/https://www.adaminnes.dev/blog/machine-learning-lead-scoring-technical-deep-dive/Explore how machine learning transforms lead scoring from rule-based systems into dynamic, adaptive models that maximize conversion rates and ROI.Thu, 13 Nov 2025 00:00:00 GMTMachine LearningMLModel TrainingLead Scoringhttps://www.adaminnes.dev/blog/mcp-vs-api-what-the-protocol-adds/https://www.adaminnes.dev/blog/mcp-vs-api-what-the-protocol-adds/An MCP server doesn't replace your REST API, it describes it to AI apps that have never seen it. Here's what the protocol adds on top, and where the security work lands.Sun, 15 Jun 2025 00:00:00 GMTMCPAI AgentsAPIsSecurityhttps://www.adaminnes.dev/blog/data-imputation-best-practices/https://www.adaminnes.dev/blog/data-imputation-best-practices/Best practices when doing data imputation.Fri, 31 Jan 2025 00:00:00 GMThttps://www.adaminnes.dev/blog/effective-debugging-for-shopify-hydrogen-oxygen/https://www.adaminnes.dev/blog/effective-debugging-for-shopify-hydrogen-oxygen/Sun, 14 Jul 2024 00:00:00 GMTShopifyHydrogenRemixGraphQLhttps://www.adaminnes.dev/blog/navigating-bugs-in-shopifys-hydrogen-runtime-overcoming-the-lack-of-a-node-environment/https://www.adaminnes.dev/blog/navigating-bugs-in-shopifys-hydrogen-runtime-overcoming-the-lack-of-a-node-environment/Sat, 13 Jul 2024 00:00:00 GMTShopifyRemixHydrogenOxygenhttps://www.adaminnes.dev/blog/headless-shopify-updating-custom-metafields-for-a-company-object/https://www.adaminnes.dev/blog/headless-shopify-updating-custom-metafields-for-a-company-object/Sun, 07 Jul 2024 00:00:00 GMTGraphQLRemixHeadless Shopifye-commercehttps://www.adaminnes.dev/blog/shopify-hydrogen-remix-and-oxygen/https://www.adaminnes.dev/blog/shopify-hydrogen-remix-and-oxygen/Tue, 02 Jan 2024 00:00:00 GMTShopifyHydrogenRemixOxygenE-commercehttps://www.adaminnes.dev/blog/preventing-dom-clobbering/https://www.adaminnes.dev/blog/preventing-dom-clobbering/DOM Clobbering refers to a specific form of injection attack that doesn’t require javascript to be added to implement. In a DOM Clobbering attack, the intention of the attacker is to confuse the client-side JavaScript code of web applications.Mon, 14 Aug 2023 00:00:00 GMTcybersecuritycertification researchcomptia security+dom clobberinghttps://www.adaminnes.dev/blog/defending-against-clickjacking-attacks/https://www.adaminnes.dev/blog/defending-against-clickjacking-attacks/Best practices for defending against clickjacking in web applications.Sat, 15 Jul 2023 00:00:00 GMTcybersecuritycertification researchcomptia security+clickjackingcontent security policieshttps://www.adaminnes.dev/blog/setting-up-multiple-gitlab-accounts-and-ssh-keys-on-linux-mac-os/https://www.adaminnes.dev/blog/setting-up-multiple-gitlab-accounts-and-ssh-keys-on-linux-mac-os/Setting up multiple Gitlab accounts and ssh keys on Linux/MacOSWed, 14 Jun 2023 00:00:00 GMTgitlabssh configurationkeyshttps://www.adaminnes.dev/blog/using-split-and-awk-commands-to-chunk-and-process-massive-text-file/https://www.adaminnes.dev/blog/using-split-and-awk-commands-to-chunk-and-process-massive-text-file/Split up and format each line of a massive ~4.5G text file with split and awk.Mon, 01 May 2023 00:00:00 GMTbeowulf clusterraspberry pidata parsinghttps://www.adaminnes.dev/blog/react-hook-to-determine-element-width-dynamically/https://www.adaminnes.dev/blog/react-hook-to-determine-element-width-dynamically/One common requirement when working with dynamic layouts is the need to determine the width of an element dynamically. In this post, we will create a React hook that calculates the width of an element dynamically.Tue, 14 Feb 2023 00:00:00 GMTreacthooksnextjshttps://www.adaminnes.dev/blog/securing-passwords-for-storage-with-hashing/https://www.adaminnes.dev/blog/securing-passwords-for-storage-with-hashing/How and why to store password data securely.Wed, 14 Dec 2022 00:00:00 GMTcybersecuritycertification researchpassword hashingcomptia security+https://www.adaminnes.dev/blog/responsive-images-with-aws-serverless-image-handler-using-s3/https://www.adaminnes.dev/blog/responsive-images-with-aws-serverless-image-handler-using-s3/Cheap Responsive Images with Amazon's Serverless Image Handler (S3)Sun, 04 Sep 2022 00:00:00 GMTaws serverless image handlerresponsive imagesaws lambdahttps://www.adaminnes.dev/blog/securely-using-dangerously-set-inner-html-in-a-react-application/https://www.adaminnes.dev/blog/securely-using-dangerously-set-inner-html-in-a-react-application/A tutorial on how to securely use dangerouslySetInnerHTML in a React application.Sun, 28 Aug 2022 00:00:00 GMTcybersecuritycertification researchcomptia security+https://www.adaminnes.dev/blog/software-security-testing-static-code-analysis-for-react/https://www.adaminnes.dev/blog/software-security-testing-static-code-analysis-for-react/Wed, 01 Jun 2022 00:00:00 GMTcybersecuritycertification researchcode analysiscomptia security+https://www.adaminnes.dev/blog/fetch-a-pizza-google-home-action-webhook-with-nightwatchjs-chromedriver-aws-lambda/https://www.adaminnes.dev/blog/fetch-a-pizza-google-home-action-webhook-with-nightwatchjs-chromedriver-aws-lambda/Creating a Google Home Action that triggers a webhook automatically placing an order for a pizza.Sat, 14 May 2022 00:00:00 GMThome automationseleniumnightwatchjsgoogle home actionshttps://www.adaminnes.dev/blog/aws-event-bridge-as-a-crontab-for-lambda/https://www.adaminnes.dev/blog/aws-event-bridge-as-a-crontab-for-lambda/This post explains how to configure a cron job for an AWS Lambda function using AWS EventBridge.Sun, 01 May 2022 00:00:00 GMTaws eventbridgecronjobcron expressionshttps://www.adaminnes.dev/blog/understanding-and-using-web-components/https://www.adaminnes.dev/blog/understanding-and-using-web-components/Overview of Web Components as a concept and technology, including a brief example of how to create one.Thu, 03 Feb 2022 00:00:00 GMThtmlcomponent-based designweb componentshttps://www.adaminnes.dev/blog/setting-up-drupal-as-a-graphql-backend-for-gridsome-or-gatsby/https://www.adaminnes.dev/blog/setting-up-drupal-as-a-graphql-backend-for-gridsome-or-gatsby/Lock down Drupal to use it as a GraphQL data source for a Gridsome/React ProjectTue, 23 Mar 2021 00:00:00 GMTdrupalgraphqlgridsomegatsbyhttps://www.adaminnes.dev/blog/chicago-cta-bus-tracking-dashboard-in-react-gatsby/https://www.adaminnes.dev/blog/chicago-cta-bus-tracking-dashboard-in-react-gatsby/Creating a Chicago Transit Authority Bus Tracking Dashboard in React/Gatsby.Fri, 08 Mar 2019 00:00:00 GMThome automationcontrol panelaws lambdahttps://www.adaminnes.dev/blog/safeguarding-digital-assets-the-importance-of-data-loss-prevention/https://www.adaminnes.dev/blog/safeguarding-digital-assets-the-importance-of-data-loss-prevention/Thu, 16 Aug 2018 00:00:00 GMTcybersecuritycertification researchdlpcomptia security+https://www.adaminnes.dev/blog/the-cia-triad-is-a-foundation-of-cybersecurity/https://www.adaminnes.dev/blog/the-cia-triad-is-a-foundation-of-cybersecurity/The CIA Triad is a cybersecurity model that defines the three main goals of information security: Confidentiality, Integrity, and Availability.Mon, 05 Mar 2018 00:00:00 GMTcybersecuritycertification researchcia triadcomptia security+https://www.adaminnes.dev/blog/secure-http-headers-hardening-security-with-headers/https://www.adaminnes.dev/blog/secure-http-headers-hardening-security-with-headers/Most websites today are taking advantage of the security benefits of SSL. The web is becoming progressively more encrypted and safer thanks to the adoption of HTTPS and the efforts of projects promoting it like the Electronic Frontier Foudation's Certbot initiative and the HTTPS Everywhere browser extension.Wed, 10 May 2017 00:00:00 GMTcybersecurityhttp headersaws amplifyhttps://www.adaminnes.dev/blog/useful-git-commands-and-configuration/https://www.adaminnes.dev/blog/useful-git-commands-and-configuration/Useful git commands and configuration to speed up interacting with a repository via the command line.Wed, 12 Oct 2016 00:00:00 GMTgithttps://www.adaminnes.dev/blog/poodle-sslv3-turn-it-off/https://www.adaminnes.dev/blog/poodle-sslv3-turn-it-off/POODLE needs a man in the middle, a browser pushed down to SSL 3.0, and a server willing to go along with it. That server part is yours, so here's how to turn SSL 3.0 off in nginx and Apache and check that it worked.Mon, 20 Oct 2014 00:00:00 GMTSecurityTLSnginxApachehttps://www.adaminnes.dev/blog/shellshock-bash-environment-variable-bug/https://www.adaminnes.dev/blog/shellshock-bash-environment-variable-bug/A plain explanation of the Shellshock bash bug, why a web request can reach it, how to check your own machines, and why one patch turned into a week of them.Tue, 30 Sep 2014 00:00:00 GMTSecurityBashLinuxCGIhttps://www.adaminnes.dev/blog/docker-1-0-for-web-developers/https://www.adaminnes.dev/blog/docker-1-0-for-web-developers/Docker hit 1.0 last week. Here's what images, containers and a Dockerfile change for local development and deploys, plus the security questions worth asking before you lean on it.Mon, 16 Jun 2014 00:00:00 GMTDockerContainersDevOpsSecurityhttps://www.adaminnes.dev/blog/heartbleed-after-the-patch/https://www.adaminnes.dev/blog/heartbleed-after-the-patch/Upgrading to OpenSSL 1.0.1g closes the Heartbleed hole, but it doesn't undo whatever leaked before you patched. Here's what the bug exposes and the cleanup order that actually matters.Mon, 14 Apr 2014 00:00:00 GMTSecurityOpenSSLTLSLinuxhttps://www.adaminnes.dev/blog/useful-gawk-programs-and-things-to-know/https://www.adaminnes.dev/blog/useful-gawk-programs-and-things-to-know/Useful gawk programs and things to know when getting starting using gawk or awk variants on the command line.Thu, 02 Jan 2014 00:00:00 GMTgawkawkmawktawksed