Deep dives into tools,
techniques & the web.
Practical guides covering developer tools, health metrics, SEO, converters and more — written to be actually useful.
✦ AI-powered — understands natural language
The 300-Year Unbreakable Cipher That Got Broken — Vigenère, Enigma, and What Every "Unbreakable" Cipher Has in Common
How Character Frequency Reveals Who Wrote a Text — Stylometry, Forensic Linguistics, and What It Detects in AI Writing
Stylometry identifies authorship from writing statistics — function words (the, in, upon, of) are largely unconscious style choices that persist across topics, making them better authorship signals than content words. Here's the Federalist Papers attribution case, character n-grams for below-word-level fingerprinting, what character frequency reveals about AI-generated text (more even vocabulary distribution, different punctuation patterns), and how byte frequency identifies text encoding.
camelCase vs snake_case Isn't a Style Choice in APIs — It's a Contract, and Changing It Breaks Your Consumers
camelCase in JSON APIs is a contract, not a preference — switching to snake_case between API versions is a breaking change even if field semantics are identical. Here's how case style encodes mutability (SCREAMING_SNAKE_CASE signals constant), why kebab-case is limited to CSS/HTML/URLs (the hyphen is a subtraction operator in real languages), and the one-boundary transformation pattern that keeps database snake_case, API camelCase, and frontend TypeScript aligned without chaos.
Canonical Tags at Architectural Scale — Faceted Navigation, hreflang Conflicts, and When Cross-Domain Canonicals Fail
Google treats canonical tags as hints it can override — and architectural scenarios (faceted navigation, multilingual hreflang, syndicated content) require system-level canonical strategy rather than page-by-page decisions. Here's the parameter classification framework for e-commerce facets, why hreflang URLs must always point to canonical versions, when cross-domain canonicals fail against higher-authority syndicators, and why soft 404s break canonical consolidation.
Why Your Exercise Calorie Estimates Are Systematically Too High — NEAT Compensation, Dose-Response, and the Muscle Mass Advantage
Adding up exercise calorie estimates to calculate weekly expenditure overstates the benefit by 30-50% — because NEAT drops on exercise days, appetite partially compensates, and training efficiency improves. Here's the dose-response relationship between volume and actual burn, why MET values have a ±20-30% accuracy ceiling, the long-term resting metabolism boost from added muscle (13-22 kcal/kg/day), and why fasted exercise doesn't reliably burn more fat over 24 hours.
Why 100 Calories of Protein Doesn't Equal 100 Calories of Carbs — The Thermic Effect of Food and What It Means for Your Calorie Target
Protein burns 20-30% of its own calories just in digestion — eat 100 calories of protein and you net roughly 70-80 calories. Fat burns only 0-3%. This "thermic effect of food" means macronutrient composition changes your effective calorie intake even if the label says the same total. Here's the full TEF breakdown, why it matters for calorie targets, and how high-protein diets exploit it.
Argon2id Won the Password Hashing Competition — Here's Why Memory-Hardness Matters and When to Migrate From bcrypt
Argon2id won the Password Hashing Competition and is now OWASP's recommended algorithm — but its three variants (Argon2i, Argon2d, Argon2id) have different security properties, and Argon2d is specifically not suitable for password hashing despite being in the family. Here's memory-hardness and why it defeats GPU parallelism, the correct Argon2id parameters (19 MB memory, 2 iterations), when to migrate from bcrypt, and the pepper pattern for additional server-side secret protection.
Brown Fat Was "Only in Babies" Until 2009 — The Thermogenesis Biology That Changes How We Understand BMR
Brown adipose tissue was thought to exist only in infants until 2009, when PET/CT scans revealed metabolically active brown fat in adults — concentrated around the neck and collarbones, inversely correlated with BMI. Here's the white vs brown vs beige fat distinction (storage vs heat generation vs metabolic plasticity), how cold activates UCP1 thermogenesis adding 100-300 kcal/day, and why thyroid hormone is the primary BMR regulator that calculators completely ignore.
JWT Uses Base64url but Basic Auth Uses Standard Base64 — Why the Encoding Choice Matters in Security Contexts
JWTs use Base64url (not standard Base64) because they appear in URLs and HTTP headers where + and / would break things. HTTP Basic Auth uses standard Base64 (not Base64url) because it's an opaque header value. Here's the three security contexts for Base64 encoding (JWT, Basic Auth, CSP nonces/hashes), why JWT payloads are encoded not encrypted (anyone with the token can read the claims), and how to detect standard Base64 vs Base64url from the encoded string.
Metabolic Syndrome Predicts Heart Disease Better Than BMI — Here's What the Five Criteria Are and Why They Matter More
Metabolic syndrome — any three of five criteria (waist circumference, triglycerides, HDL, blood pressure, fasting glucose) — predicts cardiovascular disease better than BMI alone, and "TOFI" individuals (normal BMI, high visceral fat) are misclassified as healthy by BMI. Here's the complete metabolic syndrome criteria, A Body Shape Index (ABSI) as the next-generation abdominal obesity measure, the obesity paradox in clinical populations, and why WHtR is emerging as the recommended companion to BMI.
Why "Drink to Thirst" Fails at Altitude — and the Specific Contexts Where You Need More Water Than General Guidance Suggests
Altitude dehydration is real because respiratory rate increases and inspired air is drier — but thirst doesn't compensate fully, making trekkers a specific population where "drink to thirst" systematically underestimates needs. Here's the quantified altitude respiratory water loss (up to 1,200 mL/day at high altitude), the fever rule of thumb (each 1°C above normal adds ~20-25% water loss), why coffee's diuretic effect is smaller than its fluid content, and the specific kidney stone prevention fluid target (2.5 litres urine output daily).
Why Major Organizations Accidentally Let Their Domains Expire — and the Monitoring That Prevents It
Domain expiry is predictable months in advance — yet Microsoft Hotmail UK, Foursquare, and dozens of others have accidentally let critical domains expire. Here's the four root causes of accidental expiry (expired payment method, abandoned monitoring email, administrative responsibility gap, forgotten legacy domain), the redemption timeline that provides recovery opportunity, and why renewal notifications should never go to the email domain that's expiring.
AI-Generated Content Has a Whitespace Fingerprint — Why Normalisation Matters Before Publishing or Processing
AI-generated content carries whitespace patterns — double-line-spacing from training data, inconsistent bullet markers, occasional zero-width Unicode characters — that cause rendering issues when pasted into CMSs. Here's how to normalise whitespace before LLM input (reducing tokens and improving output), why whitespace sensitivity in text diff changes what differences are shown, and the specific Word document whitespace artifacts (non-breaking hyphens, soft hyphens, figure spaces) that appear on export.
