Deep dives into tools,
techniques & the web.
Practical guides covering developer tools, health metrics, SEO, converters and more — written to be actually useful.
✦ AI-powered — understands natural language
Why API Key Rotation Is Harder Than It Should Be — Zero-Downtime Rotation, Secure Distribution, and the Permanent Git History Problem
Keyword Density Is Not a Ranking Factor — Here's What Word Frequency Analysis Actually Reveals About Content Quality
Google explicitly doesn't use keyword density as a ranking factor — but word frequency analysis reveals real content quality signals when used correctly. Here's how search evolved from keyword matching to entity-based semantic coverage (Hummingbird, BERT, MUM), why TF-IDF reveals distinctive terms rather than optimal targets, the frequency patterns that indicate thin content vs stuffing, and the comparative gap analysis that's the only useful application of word frequency tools.
Most JWT Libraries Don't Check the Audience Claim — What Gets Verified, What Doesn't, and How to Handle Revocation
JWT libraries automatically verify signatures and exp claims — but most don't check iss (issuer) or aud (audience) by default, which is why a token from service A can be used at service B if they share a signing key. Here's what each registered claim actually enforces, the three revocation approaches (short expiry + refresh tokens, jti blocklist, short expiry without refresh), and why JWT payloads are readable by anyone who holds the token.
Why \n Shows Up Literally in Your JSON Output — Escape Sequences, Encoding Layers, and How to Debug Them
JSON's \n is two characters in the file (backslash + n) that parse to one character (line feed) — and when encoding is applied in the wrong order or twice, you get literal \n in displayed output, double-escaped \\u sequences, or & where & should be. Here's the three encoding layers that commonly stack incorrectly, the specific corruption patterns and their causes, and why \/ appears in some JSON (HTML injection defence in script tags).
Why JSON Parses Differently in JavaScript, Python, and Go — Precision, Duplicates, and Parser Security
JSON's specification deliberately leaves number precision, duplicate key handling, and Unicode surrogate pairs as implementation-defined — which is why identical JSON produces different results in JavaScript (integers lose precision above 2^53), Python (arbitrary precision integers), and Go (float64 by default). Here's the parser differential security attack from duplicate keys, prototype pollution via JSON merge, and why NDJSON enables streaming gigabyte datasets with constant memory.
Why Minimum Credit Card Payments Take 30 Years — DTI Ratio, the Debt Spiral Condition, and Scenario Analysis
The minimum payment on a £5,000 credit card balance at 20% APR takes 28-32 years to repay and costs £7,500-9,000 in interest — more than the original debt. Here's the DTI calculation (with thresholds), the mathematical condition for a debt spiral (monthly interest ≥ monthly payments), how to use a loan planner to diagnose whether you're in slow-motion debt spiral territory, and the order-of-operations for debt vs saving decisions.
Using JSON Diff to Detect API Breaking Changes — Schema Diff, Merge Patch, and Contract Testing
API breaking changes — removing fields, changing types, renaming keys — are detectable by diffing JSON Schema between API versions. Here's schema-level vs instance-level JSON diff, JSON Merge Patch (RFC 7396) as a simpler alternative to JSON Patch for PATCH endpoints, why array diffing requires different algorithms than object diffing, and how contract testing uses JSON diff principles to prevent breaking API deployments in CI/CD.
Decorative Images Need alt="", Not Missing Alt — And Complex Images Need More Than One Line
Decorative images should have alt="" — not a missing alt attribute, which causes screen readers to announce the filename. Complex images (charts, diagrams, infographics) need both a concise alt text identifying the image type and a longer description of the data, via figcaption or aria-describedby. Here's the WCAG test for decorative, the three techniques for complex image descriptions, and why AI-generated alt text needs human review for technical and context-sensitive images.
The Devine Ideal Weight Formula Came From a Drug Dosing Paper — Here's What Actual Health Outcomes Research Shows Instead
The Devine ideal weight formula appeared in a 1974 drug dosing paper — it was never derived from health outcome research. Here's where each major formula came from (insurance actuarial tables, drug pharmacokinetics, military studies), what mortality outcome data actually shows about "healthy" weight (lowest mortality at BMI 22-25 but the curve is flat 20-27), and why the obesity paradox in clinical populations complicates the "lower is healthier" framing.
Hreflang Tags With Underscores Are Silently Ignored — ISO Code Syntax, Bidirectional Links, and Implementation Methods
Hreflang tags with underscores (en_GB instead of en-GB), lowercase region codes (en-gb), or uppercase language codes (EN-GB) are silently ignored by Google with no error message. Here's the ISO 639-1 and ISO 3166-1 case requirements, why self-referential tags and bidirectional return links are both required, the three implementation methods and why mixing them breaks the cluster, and when country-targeting without language differences works.
SMS and TOTP Can Both Be Phished in Real Time — Here's Which MFA Methods Are Actually Phishing-Resistant
SMS OTP and TOTP are both vulnerable to real-time phishing (AiTM attacks relay codes before they expire) — hardware keys and passkeys are phishing-resistant because their response is cryptographically bound to the exact URL. Here's the MFA security spectrum from SMS to passkeys, the MFA fatigue (push bombing) attack that compromised Uber in 2022, why number matching prevents rubber-stamping push notifications, and why security questions aren't a genuine second factor.
Dutch Men Grew 18 cm Taller in 130 Years Without Changing Genes — The Secular Height Trend Explained
Dutch men grew 18 cm taller in 130 years — genetics don't change that fast, so the entire increase came from nutrition and disease improvements. North and South Koreans are genetically identical but differ by ~9 cm in average height from 50 years of divergent nutrition. Here's the secular height trend, why "80% heritable" doesn't mean what people think it means, and why contemporary height differences between populations are mostly environmental history, not genetics.
Why Question-Formatted H2 Headings Win Featured Snippets — And What FAQ Schema's Decline Changes
Paragraph featured snippets are typically pulled from content immediately following a heading that matches the query — the heading provides the question context that the following paragraph answers. Here's how table snippets use headings for context, why FAQ schema's reduced eligibility makes heading-structured Q&A more important, why H2 level is most likely to generate snippets, and what a heading extractor reveals about competitor pages that rank for snippets.
