https://ijazurrahim.com/blog/ Technical writing on reverse engineering, bot mitigation, security research, and full-stack development. en Tue, 22 Sep 2026 13:46:29 GMT https://ijazurrahim.com/blog/obfuscated-javascript-vs-claude-gpt-6-gemini-grok-cursor.html https://ijazurrahim.com/blog/obfuscated-javascript-vs-claude-gpt-6-gemini-grok-cursor.html I asked 9 AI models to recover code from 8 JavaScript obfuscators. The VM-based ones fell in minutes, every time. The real danger: agents returned wrong code that passed thousands of tests. Tue, 22 Sep 2026 09:00:00 GMT security reverse-engineering javascript https://ijazurrahim.com/blog/stealth-browsers-on-a-vps-2026.html https://ijazurrahim.com/blog/stealth-browsers-on-a-vps-2026.html The same seven stealth browsers, the same tests, run on a 40-core VPS instead of a laptop. Six of seven stop passing - and the reason is the machine, not the tool. Fri, 18 Sep 2026 09:00:00 GMT security reverse-engineering scraping architecture https://ijazurrahim.com/blog/stealth-browsers-tested-2026.html https://ijazurrahim.com/blog/stealth-browsers-tested-2026.html Camoufox, Patchright, SeleniumBase, Botasaurus, Zendriver and Nodriver benchmarked against real fingerprinting pages - 42 runs, a human baseline, and the headless leaks nobody mentions. Fri, 18 Sep 2026 09:00:00 GMT security reverse-engineering python scraping https://ijazurrahim.com/blog/the-bot-identity-problem.html https://ijazurrahim.com/blog/the-bot-identity-problem.html Web Bot Auth lets bots cryptographically prove they are bots - and get better treatment for it. How RFC 9421 signing works, where implementations break, and what it means if you run scrapers. Thu, 17 Sep 2026 09:00:00 GMT security reverse-engineering https://ijazurrahim.com/blog/extracting-data-from-spas.html https://ijazurrahim.com/blog/extracting-data-from-spas.html Strategies for scraping JavaScript-rendered content - network interception, hidden APIs, and when to actually reach for a headless browser. Wed, 11 Feb 2026 09:00:00 GMT python scraping javascript https://ijazurrahim.com/blog/web-scraping-tools-2026.html https://ijazurrahim.com/blog/web-scraping-tools-2026.html An honest comparison of requests, HTTPX, Scrapy, Playwright, and when to use each. No hype, just real tradeoffs from years of production scraping. Wed, 04 Feb 2026 09:00:00 GMT python scraping https://ijazurrahim.com/blog/server-management-for-developers.html https://ijazurrahim.com/blog/server-management-for-developers.html Practical cPanel and VPS guide - deploying Node.js and Python apps, SSL, cron jobs, and keeping things alive without Kubernetes or a dedicated ops team. Wed, 28 Jan 2026 09:00:00 GMT tooling architecture https://ijazurrahim.com/blog/the-freelancers-stack.html https://ijazurrahim.com/blog/the-freelancers-stack.html Opinionated stack choices after 100+ client projects - Next.js, Django, PostgreSQL, and why simplicity wins every time when you're a team of one. Wed, 21 Jan 2026 09:00:00 GMT architecture javascript python https://ijazurrahim.com/blog/packaging-python-desktop-apps.html https://ijazurrahim.com/blog/packaging-python-desktop-apps.html The pain points nobody warns you about - hidden imports, asset bundling, cross-platform builds, and keeping the binary size sane. Wed, 14 Jan 2026 09:00:00 GMT python tooling https://ijazurrahim.com/blog/django-in-production.html https://ijazurrahim.com/blog/django-in-production.html Real-world patterns that survived production traffic - query optimization, signals vs. Celery, connection pooling, and caching strategies from years of iteration. Wed, 07 Jan 2026 09:00:00 GMT python django architecture https://ijazurrahim.com/blog/async-scrapers-that-scale.html https://ijazurrahim.com/blog/async-scrapers-that-scale.html asyncio + HTTPX patterns for scraping thousands of pages concurrently without melting your machine - connection pooling, rate limiting, and retry strategies that work. Wed, 31 Dec 2025 09:00:00 GMT python architecture https://ijazurrahim.com/blog/fingerprinting-beyond-ja3.html https://ijazurrahim.com/blog/fingerprinting-beyond-ja3.html Deep-dive into HTTP/2 SETTINGS frames, header order fingerprinting, and why JA3 alone is no longer enough to evade modern anti-bot systems. Wed, 24 Dec 2025 09:00:00 GMT security reverse-engineering python https://ijazurrahim.com/blog/bypassing-cloudflare-turnstile-2026.html https://ijazurrahim.com/blog/bypassing-cloudflare-turnstile-2026.html A breakdown of Cloudflare's latest challenge mechanism, how it differs from previous versions, and what signals it actually collects behind the scenes. Wed, 17 Dec 2025 09:00:00 GMT security reverse-engineering https://ijazurrahim.com/blog/decoding-protobuf-in-the-wild.html https://ijazurrahim.com/blog/decoding-protobuf-in-the-wild.html How to identify, decode, and work with Protobuf-encoded data when scraping apps that don't publish .proto files - from raw bytes to structured data. Wed, 10 Dec 2025 09:00:00 GMT security reverse-engineering python https://ijazurrahim.com/blog/reverse-engineering-anti-bot-systems.html https://ijazurrahim.com/blog/reverse-engineering-anti-bot-systems.html A deep-dive into how enterprise bot detection works under the hood - TLS fingerprinting, JavaScript challenges, and behavioral analysis - and how to think like the systems you're trying to bypass. Wed, 03 Dec 2025 09:00:00 GMT security reverse-engineering python