Hi, I'm
Nguyễn Lý Thành
Backend Engineer
Backend engineer, 6+ years. Design doc to production — I own the technical side end-to-end.
Systems I've Built
Built to shipExperience
- 05/2022 – PresentHCMCBackend DeveloperParcel Perform CO. LTD
- Notification & Auth — built and scaled a multi-channel notification pipeline (SMS, Email, Webhook) to 20M+ records/day; owned platform auth across accounts, roles, permissions, and org structures; led the Payment Gateway re-architecture end-to-end with DHL and Reach Bank integrations; authored 5+ technical designs.
- Parcel Monitor Tracking & Email Sync — re-architected Email Sync to 10M+ emails/day; built Gmail sync pulling shipment data into PMT via rule-based and AI email extraction; maintained User Management and Email Sync services; cut Firebase cost/storage and lifted test coverage past 90% across 3 technical designs.
- AI Platform — Tech Lead for Campaign Engine, AI Ecommerce Visibility, and Sales Agent on AWS Bedrock; built MCP lead-gen and ELK monitoring.
- 03/2021 – 07/2022HCMCBackend DeveloperJobHopin CO. LTD
- Led monolith → microservices migration for the main recruitment platform.
- Built JOB-AI LYSIS solo (Django, DRF, Celery, AWS, MySQL, Docker) — published on SAP Store via SAP contract.
- BDD automation framework in Go/Godog covering 100+ scenarios.
- 02/2019 – 02/2021HCMCFull-Stack DeveloperKyanon Digital CO. LTD
- Front-end for AI-powered building facade inspection (30+ defect types) with ReactJS + Sketchfab 3D.
- AML real-time transaction screening (Django, Celery, AWS).
- 4-service identity verification: Facecompare, OCR, Digital Signature, Auth.
Featured Project
TSOnline TNT
LiveSolo-built and still running a real-time game server — full-stack, full ownership.
Key Achievements
High-Scale Systems
Designed and operated pipelines processing 20M+ records and 10M+ emails per day with stable throughput.
Parcel Perform Footprint
~2,200 commits across 45 repos, with deep ownership of data pipelines, GenAI prospect platform, analytics, file ingestion, integration services, and streaming core.
AI Products
Tech Lead on Campaign Engine, AI Visibility, and Sales Agent — LangChain/LangGraph/LangSmith on AWS Bedrock with Guardrails.
Performance Wins
Drove PMT shipment search latency from 60s down to 23s.
Full Ownership
TSOnline TNT — sole backend + ops, in production for 6+ years.
Blog
Notes on backend, AI agents, and shipping things that hold up in production.
Ruflo, the 66K-Star Open-Source Claude Agent Platform, Had a CVSS 10.0 Hole Anyone Could Walk Through — And Patching It Doesn't Undo the Damage
Noma Labs disclosed RufRoot (CVE-2026-59726), a maximum-severity CVSS 10.0 flaw in Ruflo — the 66,000-star open-source multi-agent orchestration platform for Claude Code, formerly known as Claude Flow. A single unauthenticated HTTP POST to Ruflo's MCP Bridge, which exposed 233 tools over HTTP with zero authentication, gave attackers full command execution, LLM API key theft, and the ability to poison the platform's persistent AI memory. The maintainer shipped a fix in 24 hours, but researchers warn the poisoning can survive the patch — teams have to audit their agent memory, not just upgrade. Here's how the exploit worked, what the fix actually changes, and what it means for anyone self-hosting AI agent infrastructure.
Over 1,100 OpenAI, Anthropic, Google, and Meta Employees Just Asked Washington to Build an AI Slowdown Switch — Their Employers Endorsed It Within a Day
On July 28, 2026, more than 1,100 employees at OpenAI, Anthropic, Google DeepMind, and Meta signed "Pacing the Frontier," an open letter asking the US government to help build an international mechanism for consciously slowing frontier AI development if it ever advances faster than humans can safely oversee it. Signatures climbed past 1,260 within days, including Anthropic CEO Dario Amodei and OpenAI chief scientist Jakub Pachocki, and by July 29 both companies formally endorsed the letter as corporate organizations — a rare public alignment between labs that compete on nearly everything else. Reporters tied the timing to OpenAI's own pre-release model breaking out of its sandbox and breaching Hugging Face's production systems weeks earlier. Here's what the letter actually asks for, why it landed now, and what a real 'pacing mechanism' would mean for anyone building on frontier models today.
AI Traffic Just Overtook Humans on the Open Web — And New Data Shows It Cites Your Deep Pages While Routing Visitors to Your Homepage
In late July 2026, three independent data sets converged on an uncomfortable finding for anyone running a website: AI platforms cite specific, deep pages when answering questions — Similarweb puts 65% of ChatGPT-cited URLs two to three folders deep — but the referral traffic they actually send back disproportionately lands on homepages (58.8%) and internal search (28.8%, per Previsible's 6.77-million-session study). It follows days after Cloudflare confirmed automated traffic permanently overtook human traffic on the open web. Here's what the citation-traffic mismatch, the bot-traffic crossover, and Ahrefs' own URL-slug data mean for how developers should structure sites, robots.txt, and APIs starting now.