The BackArch Blog

Engineering notes
from the field.

Frontend, backend, infra, AI & everything between — deep dives, post-mortems, and hard-won lessons from engineers building real systems.

Latest posts

4 articles
BackendAug 17, 2026
RDS SSL and the Connection String Parameter That Changed Names Between Drivers
The application health check was green. Alembic was silently failing. Two drivers, one protocol, two different parameter names for the same setting — and a bug that passes every test until your first production deploy.
PK
Piyush Kumar
5 min
BackendAug 13, 2026
The Timing Attack Hiding in Your Login Endpoint
If your login endpoint takes measurably different amounts of time to respond to "email not found" vs "wrong password," an attacker can enumerate every valid email on your platform without ever seeing an error message.
PK
Piyush Kumar
6 min
DevOps & InfraJun 3, 2026
Your CI and Your Deploy Are Racing. CI Is Losing.
The default on: push trigger fires CI and deploy simultaneously. If your tests take four minutes and your deploy takes two, broken code reaches production before the first test result comes in.
PK
Piyush Kumar
6 min
BackendJun 1, 2026
Structure Your FastAPI Backend by Feature, Not by Layer
The layered structure every FastAPI tutorial teaches looks clean in a screenshot. It falls apart the first time you add soft deletes and have to touch five directories for one logical change.
PK
Piyush Kumar
6 min

One engineering deep-dive, every other week.

No fluff. Frontend, backend, infra, and AI — real post-mortems, walkthroughs, and lessons from engineers shipping in production.