Your photos leak GPS coordinates, camera model, and timestamps. Here's how to strip EXIF metadata entirely in your browser — no uploads, no installs.
Category: Deep Dives
Deep Dives is the long-form technical analysis category on orthogonal.info, where complex topics get the thorough treatment they deserve. Unlike quick-start tutorials or surface-level overviews, every article in this category commits to explaining the why behind the how — comparing architectures, benchmarking alternatives, and documenting the decision-making process that experienced engineers actually use. If you want depth over breadth, this is where you start.
With 15 carefully researched posts, Deep Dives represents the most intensive content on the site — articles that often take weeks to research and write, because getting the details right matters.
Key Topics Covered
Architecture comparisons — Side-by-side evaluations of competing technologies (e.g., container runtimes, databases, message brokers) with benchmarks, trade-off analysis, and real-world selection criteria.
Technology evaluations — Thorough assessments of tools and platforms like Kubernetes distributions, observability stacks, CI/CD platforms, and storage engines, going beyond marketing claims to test actual behavior.
Hands-on tutorials with context — Step-by-step guides that first explain the problem domain, then walk through the implementation, and finally discuss limitations, alternatives, and production considerations.
Protocol and specification deep dives — Detailed explorations of protocols like OAuth 2.0/OIDC, mTLS, gRPC, and WebSocket, including packet-level analysis and implementation nuances that documentation glosses over.
Performance analysis and benchmarking — Methodology-driven performance testing with reproducible setups, statistical rigor, and honest reporting of results — including when the “winner” depends on your workload.
System design case studies — End-to-end walkthroughs of system design decisions for real projects, covering data flow, failure modes, scaling considerations, and the reasoning behind each architectural choice.
Who This Content Is For
Deep Dives is written for senior engineers, technical leads, architects, and curious developers who are not satisfied with “just use X” recommendations. If you are evaluating technology for a production system, preparing for a system design discussion, or simply want to understand how things work at a deeper level, this category provides the analysis you need. Readers should be comfortable with at least one programming language and have some experience with distributed systems concepts.
What You Will Learn
By reading the Deep Dives articles, you will develop the ability to evaluate technology choices with engineering rigor rather than relying on hype or popularity. You will learn structured approaches to comparing tools, understand the hidden trade-offs that only surface in production, and build mental models for complex systems. Each article provides enough context for you to form your own opinions, not just adopt the author’s conclusions. Expect detailed diagrams, reproducible benchmarks, and references to primary sources.
Explore the posts below for analysis that goes beyond the surface.
-
Dangerzone: Open-Source Document Sanitization That Actually Works
Dangerzone sanitizes documents through disposable containers, eliminating malware and metadata. How I use it daily and why it beats alternatives.
-

I Built a Base64 Tool That Fixes Frustrating Alternatives
Debugging a Base64-encoded error message buried inside a JSON response shouldn’t require pasting sensitive production data into a random website. Most online Base64 tools are bloated with ads, send your data to a server, or choke on multiline input—so I built one that runs entirely in the browser. TL;DR: Base64Lab is a free, privacy-first Base64…
-

Master Docker Container Security: Best Practices for 2026
Your staging environment is a dream. Every container spins up flawlessly, logs are clean, and your app hums along like a well-oiled machine. Then comes production. Suddenly, your containers are spewing errors faster than you can say “debug,” secrets are leaking like a sieve, and you’re frantically Googling “Docker security best practices” while your team…
-

Pre-IPO API: SEC Filings, SPACs & Lockup Data
I built the Pre-IPO Intelligence API because I needed this data for my own trading systems and couldn’t find it in one place. If you’re building fintech applications, trading bots, or investment research tools, you know the pain: pre-IPO data is fragmented across dozens of SEC filing pages, paywalled databases, and stale spreadsheets. The Pre-IPO…
-

CVE-2025-53521: F5 BIG-IP APM RCE — CISA Deadline 3/30
CVE-2025-53521 was reclassified from DoS to RCE with active exploitation confirmed. F5 BIG-IP APM vulnerability added to CISA KEV with March 30 deadline. Detection commands, IOC checks, and mitigation steps for your BIG-IP fleet.
-

CVE-2026-3055: Citrix NetScaler Token Theft — Patch Now
CVE-2026-3055 is a CVSS 9.3 memory overread in Citrix NetScaler ADC and Gateway. Attackers are already using it to steal admin session tokens via crafted SAML requests. CISA deadline is today. Here is what to check and how to fix it.
-

Claude Code Leak: npm Security, TypeScript, AI Architecture
When source maps for a major AI coding tool leaked via an npm package, I spent a week analyzing what was exposed and how it happened. The leak revealed internal architecture, agent orchestration patterns, and TypeScript code that was never meant to be public. This isn’t theoretical — it’s a case study in what happens…
-

Terraform Security: Encryption, IAM & Drift Detection
What happens when your Terraform state file ends up in the wrong hands? Spoiler: it’s not pretty, and your cloud environment might as well send out party invitations to every hacker on the internet. Keeping your Terraform setup secure can feel like trying to lock the front door while someone’s already sneaking in through the…
