How PassForge uses crypto.getRandomValues and entropy math to build passwords that actually resist offline guessing attacks. Read article
Category: Tools & Setup
Tools & Setup is where orthogonal.info curates practical, battle-tested guides on developer productivity tools, CLI utilities, self-hosted software, and environment configuration. Whether you are bootstrapping a new development machine, evaluating self-hosted alternatives to SaaS products, or fine-tuning your terminal workflow, this category delivers step-by-step walkthroughs grounded in real-world experience. Every article is written with one goal: help you build a faster, more reliable, and more enjoyable development environment.
With over 25 in-depth posts and growing, Tools & Setup is one of the most active categories on the site — reflecting just how much time engineers spend (and save) by getting their tooling right from day one.
Key Topics Covered
Command-line productivity — Shell customization (Zsh, Fish, Starship), terminal multiplexers (tmux, Zellij), and CLI utilities like ripgrep, fd, fzf, and bat that supercharge daily workflows.
Self-hosted alternatives — Deploying and configuring tools like Gitea, Nextcloud, Vaultwarden, and Uptime Kuma so you own your data without sacrificing usability.
IDE and editor setup — Configuration guides for VS Code, Neovim, and JetBrains IDEs, including extension recommendations, keybindings, and remote development workflows.
Development environment automation — Using Ansible, Homebrew, Nix, dotfiles repositories, and container-based dev environments (Dev Containers, Devbox) to make setups reproducible.
Git workflows and tooling — Advanced Git techniques, hooks, aliases, and GUI clients that streamline version control for solo developers and teams alike.
API testing and debugging — Hands-on guides for curl, HTTPie, Postman, and browser DevTools to debug REST and GraphQL APIs efficiently.
Package and runtime management — Managing multiple language runtimes with asdf, mise, nvm, and pyenv, plus dependency management best practices.
Who This Content Is For
This category is designed for software engineers, DevOps practitioners, system administrators, and hobbyist developers who want to work smarter, not harder. Whether you are a junior developer setting up your first Linux workstation or a senior engineer optimizing a multi-machine workflow, you will find actionable advice that respects your time. The guides assume basic command-line comfort but explain advanced concepts clearly.
What You Will Learn
By exploring the articles in Tools & Setup, you will learn how to automate repetitive environment tasks so a fresh machine is productive in minutes, not days. You will discover modern CLI replacements for legacy Unix tools, understand how to evaluate self-hosted software against its SaaS equivalent, and gain confidence configuring complex development stacks. Each guide includes copy-paste commands, configuration snippets, and links to upstream documentation so you can adapt the advice to your own infrastructure.
Start browsing below to find your next productivity upgrade.
-
Your Photos Are Broadcasting Your Home Address — Strip EXIF GPS in the Browser
Phone photos carry your exact GPS coordinates inside the file. Here's what's in that EXIF block, which apps leak it, and how to strip it browser-side. Read article
-
The Treasury FiscalData API: Pull the U.S. National Debt as JSON (No Key)
The U.S. Treasury FiscalData API serves the national debt, interest rates, and FX rates as clean JSON — no API key. How to use it, with tested Python. Read article
-
Check If a Password Was Breached Without Sending It (HIBP k-Anonymity)
How Have I Been Pwned's k-anonymity range API lets you check a password against 900M+ breaches without ever sending it. Real code, real numbers, and the padding trick most people miss. Read article
-
How One Regex Took Down Cloudflare: Catastrophic Backtracking, Tested in Your Browser
A 30-char string can hang a simple regex for 13 seconds. How ReDoS works, why it took down Cloudflare, and how to catch it in RegexLab. Read article
-
I Stopped Pasting JWTs Into Online Base64 Decoders — Here’s the Browser-Only Fix
Online base64 decoders run server-side, so pasting a live JWT leaks the token. Base64Lab decodes JWTs and files in your browser. Here's how it works. Read article
-
The SpaceX 424B Prospectus Is Free on SEC EDGAR — Here’s What It Says and How to Pull It
SpaceX's 424B4 final prospectus (filed June 12, 2026) priced the IPO at $135/share. The real terms off the cover page, plus Python to pull it from SEC EDGAR. Read article
-
Why the Web Crypto API Won’t Compute MD5 (and How HashForge Does It in Your Browser)
Why the Web Crypto API refuses MD5 and how HashForge generates MD5, SHA-256 and more in-browser without uploading a single byte. Read article
-
How a Secure Password Generator Actually Works (and Why Math.random() Fails)
Why Math.random() passwords are crackable, how crypto.getRandomValues fixes it, and the modulo-bias and 64KB gotchas that bite DIY fixes. Read article
-
How EXIF GPS Data Is Stored in a JPEG — A Byte-Level Teardown
How a JPEG hides your GPS coordinates, decoded byte by byte, plus a 40-line browser parser and the cleanest way to strip EXIF without recompressing. Read article