Deep dives into tools,
techniques & the web.
Practical guides covering developer tools, health metrics, SEO, converters and more — written to be actually useful.
✦ AI-powered — understands natural language
Your List Still Has Duplicates After Removing Duplicates
DNS Providers Compared: Cloudflare vs Route 53 vs Google Cloud DNS — and Why It Matters
Registrar DNS is almost always the weakest option — slow global performance, poor TTL flexibility, and limited routing features. Here's how Cloudflare, Route 53, and Google Cloud DNS compare on performance, pricing, and features, and how to move DNS without moving your domain registration.
DNS as a Security Tool and Target: Cache Poisoning, Hijacking, and DNSSEC
DNS cache poisoning, DNS hijacking, and DNS tunneling are real attack vectors. Here's how each works, what DNSSEC does (and doesn't) protect against, how to monitor your own DNS records for unexpected changes, and what domain shadowing is.
Domain Squatting and Typosquatting: How to Detect and Defend Against Brand Impersonation
Typosquatters register domains like examp1e.com and brand-support.com to phish customers and intercept traffic. Here's the patterns attackers use, how to monitor for lookalike registrations using CT logs and DNSTwist, defensive registration strategy, and UDRP dispute resolution.
Localised Placeholder Text for International Design: When Lorem Ipsum Fails for RTL, CJK, and Other Scripts
Lorem ipsum is Latin-script only — using it for Arabic, Hebrew, or CJK designs produces completely misleading mockups. Here's why RTL text direction, CJK character width, German compound words, and bidirectional text each require different placeholder approaches, plus pseudolocalisation for layout testing.
From Caesar Cipher to AES: The History of Why Substitution Ciphers Fail
ROT13 is a specific case of the Caesar cipher, which was broken by frequency analysis described in 800 AD. Here's the history from Caesar to Vigenère to Enigma to AES — and what each cipher's failure revealed about what real security requires.
What Your Ping Number Actually Means — Latency, Jitter, and Packet Loss Explained
50ms latency is fine for browsing but problematic for gaming and VoIP. Here's what ping RTT actually measures, latency thresholds for different applications, why jitter and packet loss often matter more than average latency, and what bufferbloat is.
Reading DMARC XML Reports: What Every Field Means and How to Spot Problems
DMARC aggregate reports are XML files that arrive by email and most people never open. Here's exactly what each field means, the common patterns and what they signal (SPF fail but DMARC pass, alignment failures, unknown IPs), and the tools that make reports readable.
The Complete Email Authentication Audit: How to Check SPF, DKIM, DMARC, PTR, and BIMI
Most organisations have never systematically audited their full email authentication stack. Here's the complete 8-step process: inventorying all sending services, auditing SPF, DKIM, DMARC, PTR, and BIMI, sending a test to verify all pass, and setting up ongoing monitoring.
Email Deliverability Beyond Authentication: Reputation, Engagement, and IP Warming
SPF, DKIM, and DMARC prove you're legitimate — but engagement rates, complaint rates, list hygiene, and domain age determine whether you land in inbox or spam. Here's the deliverability signals major providers actually use, IP warming schedules, and the 2024 Google/Yahoo requirements in practice.
CAN-SPAM vs GDPR vs CASL: Email Marketing Compliance for International Senders
CAN-SPAM, GDPR, and CASL have different models (opt-out vs opt-in) and very different penalties. Here's what each requires, how they differ in a practical comparison matrix, and the compliance approach for organisations sending internationally to all three jurisdictions.
TLS Configuration Beyond Certificates: Versions, Cipher Suites, HSTS, and OCSP Stapling
TLS 1.0 and 1.1 are still enabled on more servers than they should be. Here's TLS version history and current status, what cipher suites determine (including forward secrecy), HSTS preloading requirements, OCSP stapling, and how to use SSL Labs to grade your TLS configuration.
URL Design: Why Your Slug Is a Commitment — and How to Get It Right
A URL published today may need to work in 2034. Here's how Wikipedia, the BBC, and GOV.UK approach URL permanence and readability, the SEO costs of changing slugs, and the slug design principles that produce URLs worth keeping.
