Backend developer, mainly .NET.

Services and APIs in .NET, with Go and TypeScript alongside. Application security is the part I keep going deeper into.

Profile

I'm Arthur Mendes, a backend developer. Day to day that is .NET: web APIs, background jobs, and the database layer behind them, usually on SQL Server or PostgreSQL and deployed to Azure. I have also built services in Go and smaller tools in C++ and Python.

What draws me to application security is that it changes the question you ask about your own code. Instead of whether it works, you start asking what happens when the input is hostile. That habit shows up in ordinary work: explicit error paths, small amounts of state, and treating anything that arrived over the network as untrusted until proven otherwise.

Outside work I read security write-ups and protocol specifications, and I am starting to put some of that on the blog.

Currently

  • Building Shatters, a self-hosted encrypted messaging project, as a way to learn cryptography by implementing it.
  • Working through application security material: authentication flows, common web vulnerabilities, and how to test for them.
  • Writing up what I learn on the blog.
See projectsContact

Toolbox