Deep dives into tools,
techniques & the web.
Practical guides covering developer tools, health metrics, SEO, converters and more — written to be actually useful.
✦ AI-powered — understands natural language
The 300-Year Unbreakable Cipher That Got Broken — Vigenère, Enigma, and What Every "Unbreakable" Cipher Has in Common
Why Your 40-Week Due Date Is Actually 38 Weeks of Pregnancy — Ultrasound Dating, Naegele's Rule, and When Induction Is Recommended
A 40-week pregnancy is actually ~38 weeks of fetal development — gestational age is counted from 2 weeks before fertilisation. First-trimester ultrasound (±5 days accuracy) is more accurate than LMP dating for anyone with irregular cycles. Here's why the due date is a median with an asymmetric range, what the ARRIVE trial says about 39-week induction, and why gestational age accuracy matters most in preterm delivery decisions.
Why Legal Deadlines Are Harder to Calculate Than They Appear — Service Dates, Day Counting Rules, and Limitation Periods
Legal deadlines depend on whether "day 0" (the triggering event) is included or excluded from the count, which direction weekend/holiday adjustment goes, and when "service" is deemed to have occurred by method (first-class post adds 2 business days before the clock starts). Here's the CPR and US Federal Rules counting conventions, why posting a response on day 14 can still be late, and how limitation periods interact with the "date of knowledge" extension.
Should You Open a Long or Short RD Right Now? Rate Lock-In, RBI Policy, and the Laddering Strategy
RD interest rates are fixed at opening and don't change with RBI rate moves — which means the tenure decision is really a rate-direction bet. In a rising rate environment, shorter tenures preserve flexibility to re-invest at higher rates; in a falling environment, longer tenures lock in peak rates. Here's how RBI monetary policy transmits to bank deposit rates, the RD laddering strategy for both flexibility and rate optimisation, and premature withdrawal penalty mechanics.
Why Your 10-Year Goal Shouldn't Be in an RD — Matching Savings Goals to the Right Vehicle by Timeline
Savings vehicle selection depends on goal timeline — under 12 months belongs in liquid funds, 1-5 years in RDs and FDs, 5+ years in equity. Here's why the RD's natural home is the medium-term goal range, how to build emergency fund savings with an RD (then transfer maturity to a liquid account), the sinking fund approach for predictable annual expenses, and the multiple simultaneous goal commitment check that reveals when total deposits exceed sustainable surplus.
Why Your 2TB Drive Shows 1.82TB — Binary vs Decimal Units, Database Overhead, and NVMe vs SATA
A 2TB drive shows as 1.82TB in Windows because manufacturers use decimal terabytes (10^12 bytes) while operating systems use binary tebibytes (2^40 bytes) — a 10% gap that isn't hidden storage, just two different unit systems. Here's the IEC binary prefix standard that resolved this in 1998 (but not in practice), how database row overhead and indexes double storage use, file system block waste, and NVMe vs SATA latency numbers.
The Human Brain Is Bad at Compound Interest — Exponential Growth Blindness, Loss Aversion, and the True Cost of Fund Fees
The human brain isn't built for exponential thinking — we expect linear change and consistently underestimate compounding. This explains why Investor A (invests for 10 years then stops) beats Investor B (invests for 30 years starting later), why panic-selling during a 30% decline is more costly than the math suggests, and why the difference between a 0.1% and 1.0% fund fee compounds into nearly double the original investment over 30 years.
Why a US Recipe Fails in the UK — Butter Sticks, Cup Sizes, Tablespoon Volumes, and Egg Standards Compared
Scooping flour vs spooning it into a cup creates a 20-30% weight difference for the same "cup" measurement — and that's before accounting for the fact that US cups (237 mL), UK cups (284 mL old / 250 mL new), and Australian cups (250 mL) are different sizes. Here's the butter stick convention no one outside the US knows, why Australian tablespoons are 33% larger than US ones, and why UK large eggs are closer to US extra-large.
Kubernetes CronJob vs Traditional Cron — ConcurrencyPolicy, TimeZone Support, and Why Serverless Changes Everything
Kubernetes CronJob adds concurrencyPolicy (Forbid/Allow/Replace), startingDeadlineSeconds for missed run recovery, and — since Kubernetes 1.25 — a timeZone field that classic crontab never had. Here's how cloud-native scheduling differs from traditional cron, why serverless functions with 15-minute execution limits need Step Functions for long-running jobs, how Airflow's catchup=True causes burst runs after maintenance windows, and why GitHub Actions cron is always UTC.
Where Your DKIM Private Key Lives and How Attackers Steal It — A Security-First Look at DKIM Key Management
DKIM private keys must be accessible to the mail server at send time — unlike HTTPS where hardware security modules can isolate keys. Here's where DKIM private keys actually live (PEM files, config, secrets managers), the four exposure vectors (version control, backups, server decommission, shared hosting), what an attacker can do with a stolen key (DKIM-signed phishing that passes DMARC), and why Ed25519 is replacing RSA for new DKIM deployments.
Why DMARC Forensic Reports Are Almost Never Deployed — ruf=, Privacy, and the pct= Gradual Rollout Strategy
DMARC forensic reports (ruf=) send full copies of failing messages to a specified inbox — which means receiving copies of phishing emails, confidential business email, and PII. Here's why ruf= is almost never deployed (Google and Microsoft don't send them, privacy obligations, volume), how the pct= percentage tag enables gradual p=reject rollout, and why external third-party DMARC reporting services need DNS verification before they can receive your reports.
DNSSEC Protects Against Cache Poisoning — Not the Attacks That Actually Cause DNS Outages
DNSSEC signs DNS records cryptographically — protecting against cache poisoning (Kaminsky's 2008 attack) but doing nothing about registrar account compromise, BGP hijacking, or misconfigured records. Here's how DNSSEC's chain of trust works (root → TLD → domain), why expired RRSIG signatures cause SERVFAIL for DNSSEC-validating resolvers including Google and Cloudflare, and why only ~3-5% of .com domains have DNSSEC despite most TLDs being signed.
Why HSL's "50% Lightness" Lies — oklch, Perceptual Color Spaces, and Why They Matter for Design Systems
HSL's "50% lightness" produces visually different brightness across hues — yellow at HSL(60,100%,50%) looks far brighter than blue at HSL(240,100%,50%). oklch solves this with perceptual uniformity: equal L values produce equal apparent lightness regardless of hue. Here's how oklch works in CSS (now supported in all modern browsers), why it's the best tool for dark mode palettes, and how wide-gamut P3 colors fit in.
