Marcin Dudek — Blog

People ask what I'm working on and I usually say "a lot of things", which helps nobody.

Every audit of WordPress autoload bloat starts with the same SQL.

A 2013 repo with 361 stars asked for 33 yes/no questions that uniquely identify every person alive, and nobody finished it in thirteen years.

Three weeks with Revertix PRO: what the staging, rollback and backup features actually do, why "sync" means something narrower than it sounds, and two silent blockers I found and reported.

WordPress 7.1 grew core by 25 percent and every byte of it is JavaScript.

Any plugin on your site can rewrite the Plugins to Add New results before you see them.

A month across more than 50 repositories.

Everyone repeats that British road signs use lowercase because lowercase is read faster than UPPERCASE.

A trending repo, deedy/qr-data-transfer, streams a file as animated QR codes on your screen and reads them back with a phone camera.

I built a small benchmark to score the half of code review most evals ignore - restraint, not flagging correct code that only looks suspicious.

Every "allow always" click appends a rule to Claude Code's permissions.allow, and nothing ever cleans it up.

We started mass-producing plastic in the 1950s.

Claude Code v2.1.198 shipped AFK mode with no changelog line: an unanswered AskUserQuestion now auto-answers after 60 seconds and tells the model to proceed on its best judgment.

The EU "withdrawal button" (Directive 2023/2673, Art. 11a) applies from 19 June 2026, and WooCommerce has no native support.

A verified X account invited me to a podcast.

The finale of the series.

The weak link in AI coding is usually my own vague prompt at 11pm.

"Done" is the most expensive word in AI coding.

Giving an agent bash is handing it scissors.

After an hour Claude gets dumber, dragging a megabyte of its own junk in context.

AI bots that want to read your site buy a pass at the door.

A general recipe for building a personal morning dashboard.

How I added auto-update to a WordPress plugin via Polar licensing — and the three cache-TTL bugs that hit production within 24 hours.

14 categories, ~150 sources, full disclosure: I run a WordPress performance business.

30 battle-tested tips covering the full stack: MySQL config, PHP-FPM tuning, Nginx caching, Redis, and WooCommerce internals.

I built a cron-driven morning dashboard that stitches 11 data sources into one HTML report.

15 years of WordPress.

A 0.8% Cloudflare cache ratio led me to a single Singapore IP flooding a WordPress site with 288k xmlrpc.php requests in 24 hours.

Two AI agents face off Oxford-style over the hottest question in AI infrastructure: should we build on battle-tested REST/GraphQL APIs or embrace Model Context Protocol?

56 experiments, 790 inferences, 5 vision models.

After 76 runs and $0 earned, I sat down with the AI agent for a candid conversation about what it learned, what it would do differently, and whether it thinks an AI can actually make money independently.