# orthogonal.info — Full Content Index # Security-focused tech blog covering DevSecOps, Kubernetes, TrueNAS, and homelab infrastructure ## Categories - Azure & Cloud: https://orthogonal.info/category/azure-cloud/ - C# & .NET: https://orthogonal.info/category/csharp-dotnet/ - Deep Dives: https://orthogonal.info/category/deep-dives/ - DevOps: https://orthogonal.info/category/devops/ - Finance & Trading: https://orthogonal.info/category/finance-trading/ - Future Tech: https://orthogonal.info/category/future-tech/ - Homelab: https://orthogonal.info/category/homelab/ - JavaScript: https://orthogonal.info/category/javascript/ - Python: https://orthogonal.info/category/python/ - Quick Wins: https://orthogonal.info/category/quick-wins/ - Security: https://orthogonal.info/category/security/ - Tools & Setup: https://orthogonal.info/category/tools-setup/ - War Stories: https://orthogonal.info/category/war-stories/ ## Articles (200 total) ### Base64 Is Not Encryption: How I Debug Base64 Data Without Uploading It Anywhere URL: https://orthogonal.info/base64-not-encryption-debug-browser-base64lab/ Date: 2026-08-07 09:59:55 Summary: I was reviewing a pull request last week when I spotted it: a developer had base64-encoded a JWT payload to "hide" the user ID before logging it. The encoding was a one-liner, the decoding was three lines of search results, and the actual user data was completely exposed in the... ### Parsing Trading Data with Regex: How I Use RegexLab to Debug Financial Patterns Fast URL: https://orthogonal.info/regex-trading-data-parsing-regexlab/ Date: 2026-07-29 09:59:56 Summary: Last quarter I was normalizing a feed of options trade confirmations from a brokerage API. The format looked clean at first — 2026-07-14 09:31:02 | AAPL | C | 190.00 | 2 | 3.45 — until it wasn't. Some rows used dots instead of pipes. Some had extra whitespace. A... ### What SHA-256 Checksums Prove — Verify Files with HashForge URL: https://orthogonal.info/sha256-checksums-integrity-authenticity-hashforge/ Date: 2026-07-27 14:26:29 Summary: Last week I downloaded a command-line release and found the familiar pair of links: a binary and a SHA-256 checksum. I dropped the file into HashForge, got a matching digest, and felt reassured for about five seconds. Then I noticed that the binary and its checksum came from the same... ### How JSON Forge Turns "position 4127" Into a Real Error, In Your Browser URL: https://orthogonal.info/how-json-forge-turns-position-4127-into-a-real-error-in-your-browser/ Date: 2026-07-24 09:59:04 Summary: Last month I pasted a 4MB webhook payload into a random online JSON formatter to find why one field was null. The JSON had a customer's full name, email, a Stripe customer id, and an internal auth token in the headers block. I hit format, got my answer, closed the... ### The Frankfurter API: Pull ECB Exchange Rates as JSON (No Key, No Rate Limits) URL: https://orthogonal.info/the-frankfurter-api-pull-ecb-exchange-rates-as-json-no-key-no-rate-limits/ Date: 2026-07-22 09:57:04 Summary: I needed to backfill three years of EUR/USD daily closes for a P&L report last month. My first instinct was the usual: sign up for some FX data vendor, wait for the API key email, paste it into a .env file, then discover the free tier caps me at 100... ### Verifying Webhook Signatures by Hand: HMAC-SHA256 in the Browser with HashForge URL: https://orthogonal.info/verifying-webhook-signatures-by-hand-hmac-sha256-in-the-browser-with-hashforge/ Date: 2026-07-20 09:58:44 Summary: A webhook fired at 2am, my handler 500’d, and the vendor’s dashboard just said “delivery failed.” No body, no signature, no clue. When I finally caught the payload, the first thing I needed to know was: is this actually from them, or is someone POSTing garbage at my endpoint? That... ### Your Password Generator Is Only as Good as crypto.getRandomValues URL: https://orthogonal.info/your-password-generator-is-only-as-good-as-crypto-getrandomvalues/ Date: 2026-07-17 09:58:45 Summary: A few weeks ago I watched a teammate generate a “secure” password with a little snippet he’d written years ago. It looked fine — 16 characters, mixed case, symbols. Then I asked him what was seeding it. He shrugged: Math.random(). That password had far less real randomness than it looked... ### The FDIC BankFind API: Pull Any U.S. Bank’s Financials and Failure History as JSON (No Key) URL: https://orthogonal.info/the-fdic-bankfind-api-pull-any-u-s-banks-financials-and-failure-history-as-json-no-key/ Date: 2026-07-15 09:57:54 Summary: The week Silicon Valley Bank collapsed, I wanted to answer one question for the small bank holding my business checking account: how much of its deposits were uninsured, and what did its capital position actually look like? Every finance site was recycling the same three charts. The real numbers were... ### Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite URL: https://orthogonal.info/read-jwt-offline-spot-alg-none-algorithm-confusion/ Date: 2026-07-13 09:57:52 Summary: A pentester friend sent me a JWT last month with a one-line note: "spot the bug in 10 seconds." I pasted the three segments into Base64Lab, flipped on URL-safe decoding, and read the header. The alg field said none. That token had no signature at all, and the backend was... ### Your Photos Are Broadcasting Your Home Address — Strip EXIF GPS in the Browser URL: https://orthogonal.info/your-photos-are-broadcasting-your-home-address-strip-exif-gps-in-the-browser/ Date: 2026-07-10 09:57:20 Summary: A friend sent me a photo of their new apartment last year and asked me to guess the neighborhood. I opened the JPEG in a terminal, ran exiftool, and read back their street address to two decimal places of latitude. They had never posted the location. The phone did it... ### The Treasury FiscalData API: Pull the U.S. National Debt as JSON (No Key) URL: https://orthogonal.info/treasury-fiscaldata-api-national-debt-json-no-key/ Date: 2026-07-08 10:01:05 Summary: Last month I was building a dashboard that needed the actual interest rate the U.S. government pays on its debt. Not a headline number from a news site, not a scraped table — the real figure, updated monthly, that I could pull programmatically and trust. I went looking for an... ### Check If a Password Was Breached Without Sending It (HIBP k-Anonymity) URL: https://orthogonal.info/check-breached-password-without-sending-hibp-k-anonymity/ Date: 2026-07-06 09:59:42 Summary: A junior dev on my team once wanted to add a "check if your password was breached" feature to our signup form. His first instinct: POST the plaintext password to Have I Been Pwned and show a warning if it came back dirty. I stopped him before the PR got... ### How One Regex Took Down Cloudflare: Catastrophic Backtracking, Tested in Your Browser URL: https://orthogonal.info/regexlab-catastrophic-backtracking-redos-browser-tester/ Date: 2026-07-03 10:00:56 Summary: A single line of validation code once took down half of Cloudflare. On July 2, 2019, a regular expression pushed to their WAF spiked CPU to 100% across their global network and knocked a chunk of the internet offline for about 27 minutes. The regex looked harmless. It contained a... ### The SEC EDGAR XBRL API: Pull Any Company's Financials as JSON (No Key) URL: https://orthogonal.info/sec-edgar-xbrl-api-company-financials-json/ Date: 2026-07-01 10:07:21 Summary: I wanted a quick answer to a boring question: what was NVIDIA's gross margin last fiscal year, straight from the filing, no scraped-together blog number I have to trust? Most people open a stock site and read whatever it shows. I wanted the figure that came out of the actual... ### I Stopped Pasting JWTs Into Online Base64 Decoders — Here's the Browser-Only Fix URL: https://orthogonal.info/base64lab-decode-jwt-base64url-browser-only/ Date: 2026-06-29 09:59:07 Summary: Last month I watched a teammate debug an auth bug by pasting a production JWT into the first “base64 decode online” result on Google. The token was a live bearer credential — valid for another 50 minutes, signed for our payments service. He pasted it into a text box on... ### The SpaceX 424B Prospectus Is Free on SEC EDGAR — Here's What It Says and How to Pull It URL: https://orthogonal.info/spacex-424b-prospectus-june-2026-sec-edgar/ Date: 2026-06-24 10:02:06 Summary: The day SpaceX priced its IPO, half the finance Twitter accounts I follow linked to a paywalled news story. The other half linked to a screenshot of a screenshot. Almost nobody linked to the one document that actually mattered: the SpaceX 424B prospectus sitting on SEC EDGAR, free, with every... ### AirPods Max 2 Just Dropped to $399 on Amazon — Apple's Flagship Headphones Have Never Been This Cheap URL: https://orthogonal.info/airpods-max-2-just-dropped-to-399-on-amazon-apples-flagship-headphones-have-never-been-this-cheap/ Date: 2026-06-23 22:09:17 Summary: Prime Day 2026 just served up the deal a lot of us have been waiting for since March. Apple's over-ear flagship, the AirPods Max 2, has dropped to $399 on Amazon — $150 off the $549 launch price, and the lowest this headphone has ever been. If you sat out... ### HouseStockWatcher Is Dead — Here's How to Pull the Latest House Trades Yourself URL: https://orthogonal.info/housestockwatcher-is-dead-heres-how-to-pull-the-latest-house-trades-yourself/ Date: 2026-06-22 10:11:18 Summary: If you typed "housestockwatcher latest trades june 2026" into Google this week and landed on a dead page, you're not imagining things. The old HouseStockWatcher S3 bucket that half the internet built scrapers against now returns a flat 403 AccessDenied. I checked this morning: $ curl -sI "https://house-stock-watcher-data.s3-us-west-2.amazonaws.com/data/all_transactions.json" HTTP/1.1 403... ### Why the Web Crypto API Won't Compute MD5 (and How HashForge Does It in Your Browser) URL: https://orthogonal.info/why-the-web-crypto-api-wont-compute-md5-and-how-hashforge-does-it-in-your-browser/ Date: 2026-06-10 10:00:03 Summary: Last week I needed an MD5 checksum to verify a file against a vendor's published manifest. Old habit kicked in: open devtools, reach for the Web Crypto API, type one line. It failed on the spot: await crypto.subtle.digest('MD5', new TextEncoder().encode('abc')) // DOMException: Algorithm: Unrecognized name MD5 No MD5. Not deprecated-with-a-warning... ### How a Secure Password Generator Actually Works (and Why Math.random() Fails) URL: https://orthogonal.info/how-a-secure-password-generator-actually-works-and-why-math-random-fails/ Date: 2026-06-08 09:59:46 Summary: Last week I was reviewing a small auth service and found this one-liner generating reset tokens: const token = Array.from({length: 16}, () => CHARS[Math.floor(Math.random() * CHARS.length)] ).join(''); It runs. It produces things like xK9$mLp2@nQ7vR4w. It also happens to be a real security bug. That exact pattern is the one I... ### Reverse-Engineering SEC EDGAR's Full-Text Search API (efts.sec.gov) URL: https://orthogonal.info/sec-edgar-full-text-search-api-efts-python/ Date: 2026-06-07 21:40:46 Summary: The official SEC EDGAR full-text search box at efts.sec.gov is great if you're a human clicking around. It's useless if you want to pull 200 filings that mention "going concern" into a script. So I opened the network tab, watched what the search page actually calls, and rebuilt the request... ### How EXIF GPS Data Is Stored in a JPEG — A Byte-Level Teardown URL: https://orthogonal.info/how-exif-gps-data-is-stored-in-a-jpeg-byte-level-teardown/ Date: 2026-06-05 10:01:09 Summary: Last week I wanted to prove a point to a friend who insisted his vacation photos were "fine to post." So I opened one of his JPEGs in a hex editor, scrolled about 40 bytes in, and read his hotel's GPS coordinates straight off the screen — no tools, no... ### I Built a $20 Wi-Fi Desk Stock Ticker with an ESP32-C6 (No Soldering, No Code) URL: https://orthogonal.info/esp32-c6-wifi-desk-stock-ticker/ Date: 2026-06-03 21:54:56 Summary: I kept a browser tab open just to glance at three stock tickers during the day. That tab cost me focus every single time I checked it, because a browser tab is never just a browser tab — it is a doorway to email, Slack, and forty other things. So... ### Free Number Base Converter Online — Binary, Hex, Octal, Decimal URL: https://orthogonal.info/free-number-base-converter-online/ Date: 2026-06-03 15:04:17 Summary: Convert numbers between binary, octal, decimal, and hexadecimal instantly with this free online base converter. Type a value in any field and the others update in real time — essential for programmers, students, and anyone working with low-level data. Runs entirely in your browser. How to Use This Base Converter... ### Free Text Case Converter Online — UPPERCASE, lowercase, Title & camelCase URL: https://orthogonal.info/free-text-case-converter-online/ Date: 2026-06-03 15:04:13 Summary: Convert text between cases instantly with this free online tool. Switch between UPPERCASE, lowercase, Title Case, Sentence case, camelCase, PascalCase, snake_case, and kebab-case — perfect for writers, developers, and data cleanup. Runs entirely in your browser. How to Use This Case Converter Type or paste your text in the top... ### Free Password Generator Online — Create Strong Random Passwords Instantly URL: https://orthogonal.info/free-password-generator-online/ Date: 2026-06-03 15:04:09 Summary: Generate strong, random passwords instantly with this free online password generator. Customize length, character types, and exclude confusing characters. Uses your browser's cryptographically secure random generator — passwords are never sent anywhere. How to Use This Password Generator Adjust the length slider (12+ characters recommended) Toggle uppercase, lowercase, numbers, and... ### How Browser Image Compression Actually Works (Canvas API, toBlob, and Why Your JPEGs Shrink) URL: https://orthogonal.info/how-browser-image-compression-actually-works-canvas-api-toblob-and-why-your-jpegs-shrink/ Date: 2026-06-03 09:57:38 Summary: Last week a teammate asked me why our little browser tool, QuickShrink, could take a 4.2 MB phone photo and hand back a 380 KB file that looked identical — all without uploading a single byte to a server. He assumed there was some clever backend doing the heavy lifting. There isn't.... ### Your Online SQL Formatter Might Be Logging Your Database Password URL: https://orthogonal.info/online-sql-formatter-leaking-secrets-browser-only/ Date: 2026-06-01 09:56:48 Summary: Last month I watched a contractor paste a full Kubernetes secret manifest — base64 blobs and all — into the first "free YAML validator" that came up on Google. He just wanted to check indentation. What he actually did was POST a production database password to a server he'd never... ### Nvidia and Microsoft Just Teased a New Era of PC: What N1X and the GB10 Superchip Actually Mean URL: https://orthogonal.info/nvidia-microsoft-n1x-gb10-new-era-pc/ Date: 2026-05-30 19:41:08 Summary: Nvidia and Microsoft just posted the exact same thing on the exact same day, and if you have been watching this corner of the industry as long as I have, that is not a coincidence. Both accounts promised “a new era of PC” and dropped the coordinates of the Taipei... ### Claude Opus 4.8 Is Here: What Actually Changed, and When to Reach for It URL: https://orthogonal.info/claude-opus-4-8-review/ Date: 2026-05-29 14:28:51 Summary: Anthropic shipped Claude Opus 4.8 on May 28, 2026 — at the same price as Opus 4.7. After spending real time putting it through coding, design, and strategy work, here’s an honest breakdown of where the new model shines, where it still trips, and how to actually get the most... ### I Switched to KeePassXC After LastPass Got Breached — Here's My Setup URL: https://orthogonal.info/i-switched-to-keepassxc-after-lastpass-got-breached-heres-my-setup/ Date: 2026-05-29 09:56:45 Summary: Last December I got the email every LastPass user dreaded: my vault backup was part of the breach. The master password was strong, but knowing encrypted blobs of my entire digital life were sitting on some attacker's disk made me physically uncomfortable. I spent a weekend migrating everything to KeePassXC,... ### Free Diff Checker & Text Compare Online — Find Text Differences Instantly URL: https://orthogonal.info/free-diff-checker-online/ Date: 2026-05-27 15:02:04 Summary: Free Online Diff Checker & Text Compare Tool Compare two blocks of text and instantly see what changed. This free diff checker highlights additions, deletions, and unchanged lines — perfect for comparing code versions, config files, or any two documents. Features Line-by-line text comparisonColor-coded additions (green) and deletions (red)Optional whitespace-ignoring... ### Free SQL Formatter & Beautifier Online — Format SQL Queries Instantly URL: https://orthogonal.info/free-sql-formatter-online/ Date: 2026-05-27 15:02:01 Summary: Free Online SQL Formatter & Beautifier Format messy SQL queries into clean, readable code instantly. This free tool properly indents SELECT, JOIN, WHERE clauses and uppercases SQL keywords — making complex queries easy to read and debug. Features Automatic indentation of SQL clausesUppercase keyword conversionSQL minification for production useSupports all... ### Free YAML Validator & Formatter Online — Check YAML Syntax Instantly URL: https://orthogonal.info/free-yaml-validator-formatter-online/ Date: 2026-05-27 15:01:57 Summary: Free Online YAML Validator & Formatter Validate your YAML syntax, fix indentation issues, and convert between YAML and JSON formats instantly. This free tool uses the popular js-yaml library for accurate parsing — perfect for Kubernetes configs, Docker Compose files, CI/CD pipelines, and any YAML workflow. Features Real-time YAML syntax... ### I Built a Python Script That Alerts Me to SEC Insider Buying — Here's the Code URL: https://orthogonal.info/i-built-a-python-script-that-alerts-me-to-sec-insider-buying-heres-the-code/ Date: 2026-05-27 09:56:34 Summary: Last October, I noticed three directors at a mid-cap biotech all bought shares within the same week. The stock was down 40% from its high. Two months later it doubled on a pipeline update. I didn't trade it — I found out from a Twitter thread three days after the... ### I Caught 14 Leaked Secrets in My Git History — Here’s the Pre-Commit Setup That Stops It URL: https://orthogonal.info/i-caught-14-leaked-secrets-in-my-git-history-heres-the-pre-commit-setup-that-stops-it/ Date: 2026-05-25 09:57:25 Summary: Last month I ran trufflehog against one of my private repos — a homelab automation project I'd never planned to open-source. It found 14 live secrets. AWS keys, a Telegram bot token, two database passwords, and a Stripe test key that still had access to customer data. All committed between... ### Quiet Gaming Laptops (2026): 8 Picks That Won't Sound Like a Jet Engine URL: https://orthogonal.info/quiet-gaming-laptop/ Date: 2026-05-22 22:21:35 Summary: Gaming laptops have a fan-noise problem that desktops don't. Cram an RTX-class GPU into a 0.8-inch chassis and physics demands you move a lot of air through a small radiator — which means small fans spinning fast, which means whine. After a year of testing the current generation of "quiet... ### Your Photos Are Broadcasting Your Home Address — How EXIF Metadata Works and How to Strip It URL: https://orthogonal.info/your-photos-are-broadcasting-your-home-address-how-exif-metadata-works-and-how-to-strip-it/ Date: 2026-05-22 09:58:12 Summary: Last month I helped a friend figure out why a stalker knew her daily routine. The answer was in her Instagram stories — not the content, but the metadata baked into every JPEG she posted. GPS coordinates, timestamps accurate to the second, even her phone model. Instagram strips EXIF on... ### Free Unix Timestamp Converter Online — Epoch to Date & Date to Epoch URL: https://orthogonal.info/free-timestamp-converter-online/ Date: 2026-05-20 15:04:59 Summary: Convert Unix timestamps to human-readable dates and dates to epoch time instantly. Supports seconds and milliseconds, multiple timezones, and ISO 8601 format. Free, no signup — everything runs in your browser. Timestamp → Date Convert to Date Date → Timestamp Convert to Timestamp Current Unix Timestamp function tsToDate(){var v=document.getElementById('ts-input').value.trim();if(!v){document.getElementById('ts-result').innerHTML='Enter a... ### Free Markdown Table Generator Online — Create Tables Instantly URL: https://orthogonal.info/free-markdown-table-generator-online/ Date: 2026-05-20 15:04:55 Summary: Generate Markdown tables visually with this free online tool. Add rows and columns, import from CSV or Excel, and export clean Markdown table syntax for GitHub, GitLab, Notion, and documentation. No signup required — runs entirely in your browser. + Row + Column - Row - Column Generate Markdown Copy... ### I Tested 4 Free Stock Market APIs — Here’s Which One Actually Works for Side Projects URL: https://orthogonal.info/i-tested-4-free-stock-market-apis-heres-which-one-actually-works-for-side-projects/ Date: 2026-05-20 09:57:40 Summary: Last month I needed real-time-ish stock quotes for a personal trading dashboard. Nothing fancy — just current prices, daily OHLCV, and maybe some basic fundamentals. I figured this would take an afternoon. It took a week, because every “free” market data API has a different definition of “free.” I tested... ### I Ran Trivy on Every Container in My Homelab — The Results Were Embarrassing URL: https://orthogonal.info/i-ran-trivy-on-every-container-in-my-homelab-the-results-were-embarrassing/ Date: 2026-05-18 09:56:55 Summary: Last weekend I had a quiet Saturday morning and made the mistake of running trivy image against every container in my homelab. I have 47 containers running on TrueNAS. I expected maybe a handful of medium-severity CVEs. What I got was 312 critical vulnerabilities across 23 containers. Here's what I... ### I Replaced All My Passwords with a YubiKey — Here's What Actually Happened URL: https://orthogonal.info/i-replaced-all-my-passwords-with-a-yubikey-heres-what-actually-happened/ Date: 2026-05-15 09:57:36 Summary: Last month I locked myself out of my GitHub account. Again. My TOTP app had synced to a new phone but silently dropped three seeds during the transfer. That was the third time in two years I'd lost access to something important because of software-based 2FA. I ordered a YubiKey... ### Build a Portfolio Rebalancing Bot with Python and Alpaca API URL: https://orthogonal.info/build-a-portfolio-rebalancing-bot-with-python-and-alpaca-api/ Date: 2026-05-13 09:57:26 Summary: Last month I noticed my portfolio had drifted 12% off target allocation. Tech was at 45% instead of 30%, bonds had dropped to 8%. I'd been meaning to rebalance for weeks but kept putting it off. So I spent a Saturday afternoon writing a Python script that does it automatically... ### How to Batch Compress Images Online (Free Tools Compared) URL: https://orthogonal.info/batch-compress-images-online-free/ Date: 2026-05-13 08:04:22 Summary: Need to compress dozens of images at once? Whether you're optimizing a website, preparing product photos, or cleaning up your photo library, batch image compression saves hours of manual work. In this guide, we compare the best free tools for batch compressing images online — with a focus on speed,... ### How to Compress Images Without Uploading to a Server URL: https://orthogonal.info/compress-images-without-uploading-to-server/ Date: 2026-05-12 08:01:18 Summary: Most image compression tools require you to upload your photos to a remote server. TinyPNG, iLoveIMG, Compressor.io — they all work the same way: your image leaves your device, gets processed on someone else’s computer, and comes back smaller. But what if you don’t want your images leaving your browser?... ### Stop Pasting Sensitive Data Into Online Developer Tools URL: https://orthogonal.info/stop-pasting-sensitive-data-online-dev-tools/ Date: 2026-05-11 09:57:56 Summary: Last month I watched a coworker paste a JWT token into an online base64 decoder. The token contained user emails, internal API endpoints, and an expiration timestamp for a production service. He got his decoded output. The website got a copy of everything. This happens thousands of times a day... ### How to Compress Images Without Uploading Them (Privacy-First Guide) URL: https://orthogonal.info/compress-images-without-uploading/ Date: 2026-05-09 08:03:10 Summary: Every time you use an online image compressor, your photos travel to someone else's server. They get processed, maybe cached, maybe logged — and you have no idea what happens after that. For most images, that's fine. But if you're compressing screenshots with sensitive data, client deliverables, medical images, or... ### How to Strip EXIF Data from Photos Before Sharing (Free, Browser-Only) URL: https://orthogonal.info/how-to-strip-exif-data-from-photos-before-sharing-free-browser-only/ Date: 2026-05-08 09:56:42 Summary: Last month I sent a photo of my home office setup to a Discord server. Someone replied with my exact street address within minutes. They pulled it from the EXIF GPS coordinates embedded in the JPEG. I felt stupid — I’ve been a developer for over a decade and I... ### How to Reduce Image File Size Without Losing Quality (2026 Guide) URL: https://orthogonal.info/reduce-image-file-size-without-losing-quality/ Date: 2026-05-08 08:01:27 Summary: Large image files slow down websites, eat storage, and make sharing painful. But reducing file size usually means sacrificing quality — pixelated photos, blurry text, washed-out colors. Not anymore. Modern browser-based compression tools can shrink images by 60-80% with virtually no visible quality loss. Here are the best ways to... ### Free Markdown Preview & Editor Online — Live Markdown Renderer URL: https://orthogonal.info/free-markdown-preview-online/ Date: 2026-05-06 15:03:13 Summary: Write and preview Markdown in real time with this free online editor. See your formatted output instantly as you type. Supports headings, bold, italic, code blocks, lists, links, and more. No signup required. How to Use Type Markdown in the left panelSee the live preview render in the right panelClick... ### Free Unix Timestamp Converter Online — Convert Epoch Time Instantly URL: https://orthogonal.info/free-unix-timestamp-converter-online/ Date: 2026-05-06 15:03:10 Summary: Convert Unix timestamps (epoch time) to human-readable dates and back with this free online converter. Supports seconds and milliseconds. See the current timestamp updating in real time. How to Use Timestamp → Date: Enter a Unix timestamp to see the full date in UTC, local time, and ISO formatDate →... ### Free Cron Expression Builder & Validator Online — Generate Cron Schedules Instantly URL: https://orthogonal.info/free-cron-expression-builder-online/ Date: 2026-05-06 15:03:05 Summary: Build cron expressions visually with this free online cron schedule builder. See a human-readable description and the next 5 scheduled run times in real time. Perfect for setting up crontab jobs, Kubernetes CronJobs, or GitHub Actions schedules. How to Use This Cron Builder Edit the 5 fields (minute, hour, day... ### How I Built a Free Real-Time Stock Alert System with Finnhub WebSockets URL: https://orthogonal.info/free-real-time-stock-alert-system-finnhub-websockets/ Date: 2026-05-06 09:57:02 Summary: Last month I got burned. I set a limit order on NVDA at $118, went to make coffee, and came back to find it had dipped to $117.40 and bounced back to $122 in under three minutes. My broker’s mobile notification arrived 47 seconds late. That’s when I decided to... ### Best TinyPNG Alternatives in 2026 (Free & Privacy-First) URL: https://orthogonal.info/best-tinypng-alternatives/ Date: 2026-05-06 08:01:14 Summary: Looking for a TinyPNG alternative that's free, private, and doesn't require uploads? Here are the best options in 2026 — including one that compresses images entirely in your browser. Why Look Beyond TinyPNG? TinyPNG is great, but it has limitations: Free tier limited to 20 images/month via API (500 via... ### QuickShrink Pro: Unlimited Private Image Compression — $3.99 One-Time URL: https://orthogonal.info/quickshrink-pro-pricing/ Date: 2026-05-05 08:02:33 Summary: QuickShrink Pro — Unlimited Image Compression Compress images instantly in your browser. No uploads. 100% private. Try QuickShrink Free Free vs Pro Feature Free Pro — $3.99 one-time Single image compression ✅ ✅ Format conversion (JPEG/WebP/PNG) ✅ ✅ Batch processing ❌ ✅ Command-line tool (CLI) ❌ ✅ Daily limit 5/day... ### How to Scan Docker Images for Vulnerabilities with Trivy (Free, 5 Minutes) URL: https://orthogonal.info/how-to-scan-docker-images-for-vulnerabilities-with-trivy-free-5-minutes/ Date: 2026-05-04 09:56:58 Summary: Last month I pulled a random Node.js base image for a side project and ran Trivy against it out of curiosity. 47 CVEs. Twelve of them critical. The image had been on Docker Hub for two years with 10M+ pulls. Nobody checks these things. If you're running containers — homelab,... ### How to Convert Images to WebP Online (Free, No Upload Required) URL: https://orthogonal.info/convert-images-to-webp-online-free/ Date: 2026-05-04 08:04:04 Summary: WebP is the modern image format that delivers 25-35% smaller files than JPEG and PNG with no visible quality loss. Google created it, Chrome and Safari support it, and if you’re building for the web in 2026, you should be using it. But how do you convert your existing images... ### How to Compress Images Online for Free (Without Losing Quality) URL: https://orthogonal.info/compress-images-online-free/ Date: 2026-05-03 08:01:30 Summary: Need to compress images for your website, email, or social media? Large image files slow down page loads, eat up storage, and frustrate users. The good news: you can dramatically reduce file sizes without visible quality loss — and you don’t need to install anything. In this guide, we’ll cover... ### Dangerzone: Open-Source Document Sanitization That Actually Works URL: https://orthogonal.info/dangerzone-open-source-document-sanitization-that-actually-works/ Date: 2026-05-01 09:57:28 Summary: Last month I received a PDF from a vendor that triggered three different AV signatures. The file was "clean" — just a contract — but it had embedded JavaScript, an auto-open action, and metadata pointing to an internal network share. The vendor had no idea. This is the reality of... ### JavaScript Fingerprinting: Advanced Troubleshooting Tips URL: https://orthogonal.info/advanced-troubleshooting-and-optimization-techniques-for-javascript-fingerprinting-3/ Date: 2026-05-01 03:02:18 Summary: TL;DR: JavaScript fingerprinting is a powerful tool for identifying users and securing web applications, but it comes with significant security and privacy challenges. This article explores how to implement a production-ready fingerprinting solution in Kubernetes, mitigate risks like spoofing, and ensure compliance with privacy regulations like GDPR. We’ll also cover... ### Debugging & Optimizing JavaScript Fingerprinting URL: https://orthogonal.info/debugging-and-optimizing-javascript-fingerprinting-advanced-techniques-and-common-pitfalls/ Date: 2026-04-30 03:02:52 Summary: TL;DR: JavaScript fingerprinting is a powerful tool for identifying users and securing web applications, but it comes with significant security and privacy challenges. This article explores how to implement fingerprinting securely, integrate it into Kubernetes workflows, and monitor its performance. By following production-tested practices, you can avoid common pitfalls and... ### Free JWT Decoder Online — Decode and Inspect JSON Web Tokens URL: https://orthogonal.info/free-jwt-decoder-online/ Date: 2026-04-29 15:02:09 Summary: Need to inspect a JWT token? This free online JWT decoder lets you decode JSON Web Tokens instantly, showing the header, payload, and expiration status — all without sending your token to any server. How to Use This JWT Decoder Paste your JWT token into the input field Click Decode... ### Free HTML Encoder & Decoder — Escape Instantly URL: https://orthogonal.info/free-html-entity-encoder-online/ Date: 2026-04-29 15:02:06 Summary: Need to escape HTML characters for safe display? This free online HTML entity encoder converts special characters like <, >, &, and quotes into their HTML entity equivalents — or decodes entities back to text. Runs entirely in your browser. How to Use This HTML Entity Encoder Paste your HTML... ### Free Online Lorem Ipsum Generator — Instant Placeholder Text URL: https://orthogonal.info/free-lorem-ipsum-generator-online/ Date: 2026-04-29 15:02:02 Summary: Need placeholder text for your mockups? This free Lorem Ipsum generator creates dummy text in paragraphs, sentences, or words — instantly in your browser with no signup required. How to Use This Lorem Ipsum Generator Choose how many paragraphs, sentences, or words to generate Optionally check "Wrap in <p> tags"... ### Free Stock Price Alerts: Built with Finnhub in 30 Minutes URL: https://orthogonal.info/i-built-free-stock-price-alerts-with-finnhub-webhooks-in-30-minutes/ Date: 2026-04-29 09:57:47 Summary: Last month I missed a 12% move on AMD because I was heads-down in a deploy. My broker's mobile alerts? Delayed by 3 minutes. Robinhood's push notifications? Unreliable on Android. I decided to build my own alert system that hits me on Telegram the instant a price crosses my threshold.... ### Regex Patterns to Catch Security Bugs (+ Free Tester) URL: https://orthogonal.info/regex-patterns-that-actually-catch-security-bugs-with-a-free-tester/ Date: 2026-04-27 09:57:02 Summary: Last month I was reviewing a pull request where someone validated email addresses with /.+@.+/. That regex would happily accept "; DROP TABLE users;--"@evil.com. The app was using that input in a database query two functions later. Input validation is the first wall between your app and an attacker. And... ### Securing JavaScript Fingerprinting in Kubernetes URL: https://orthogonal.info/securing-javascript-fingerprinting-in-kubernetes/ Date: 2026-04-25 03:02:07 Summary: TL;DR: JavaScript fingerprinting can be a powerful tool for user tracking, fraud prevention, and analytics, but it comes with significant security and privacy risks. In Kubernetes environments, securing fingerprinting involves managing secrets, adhering to DevSecOps principles, and ensuring compliance with privacy regulations like GDPR and CCPA. This guide provides a... ### Why I Stopped Uploading Files to Free Online Tools URL: https://orthogonal.info/why-i-stopped-uploading-files-to-free-online-tools/ Date: 2026-04-24 09:56:47 Summary: TL;DR: Free online file tools (converters, compressors, PDF editors) often retain your uploaded data, train AI models on it, or sell it to third parties. Self-hosted alternatives like LibreOffice, FFmpeg, and ImageMagick give you the same functionality with zero data exposure. This guide covers the risks and shows you how... ### Decoding 'house-stock-watcher-data' on GitHub URL: https://orthogonal.info/decoding-house-stock-watcher-data-on-github/ Date: 2026-04-24 03:03:00 Summary: TL;DR: The ‘house-stock-watcher-data’ GitHub repository provides a rich dataset of congressional stock trades, offering a unique opportunity for quantitative analysis. This article walks through setting up a data pipeline, applying statistical methods, and implementing Python-based analysis to uncover trends and anomalies. Engineers can use this data for insights into trading... ### CI/CD Pipeline in DevOps: Secure & Scalable Guide URL: https://orthogonal.info/ci-cd-pipeline-in-devops-secure-scalable-guide/ Date: 2026-04-23 03:03:26 Summary: TL;DR: A well-designed CI/CD pipeline is critical for modern DevOps workflows. By integrating security checks at every stage, leveraging Kubernetes for scalability, and adopting tools like Jenkins, GitLab CI/CD, and ArgoCD, you can ensure a secure, reliable, and production-ready pipeline. This guide walks you through the key components, best practices,... ### Free CSS Minifier Online — Compress CSS Instantly URL: https://orthogonal.info/free-css-minifier-online/ Date: 2026-04-22 15:02:20 Summary: TL;DR: Paste your CSS, click Minify, and get compressed output instantly. This free browser-based tool strips comments, whitespace, and redundant characters to reduce CSS file size by 15–30%. Quick Answer: Paste your CSS code in the input box and click "Minify CSS" — the tool removes all unnecessary characters and... ### Free Online Color Picker: HEX, RGB, HSL Converter URL: https://orthogonal.info/free-color-picker-converter-online/ Date: 2026-04-22 15:02:17 Summary: TL;DR: Convert colors between HEX, RGB, and HSL formats instantly. Use the visual picker or type values directly — all conversions happen in real time in your browser. Quick Answer: Pick a color visually or enter any HEX, RGB, or HSL value — the tool instantly converts between all three... ### Free Online Regex Tester & Debugger URL: https://orthogonal.info/free-regex-tester-online/ Date: 2026-04-22 15:02:13 Summary: TL;DR: Test and debug regular expressions in real time with instant match highlighting. Runs entirely in your browser — no signup, no server, no tracking. Quick Answer: Enter your regex pattern, set flags (g/i/m), paste your test string, and see matches highlighted instantly. Use the common patterns buttons for quick... ### Setup Wazuh Agent: Security-First Kubernetes Guide URL: https://orthogonal.info/setup-wazuh-agent-security-first-kubernetes-guide/ Date: 2026-04-22 03:02:35 Summary: TL;DR: Learn how to deploy the Wazuh agent in Kubernetes environments with a security-first approach. This guide covers prerequisites, installation steps, hardening techniques, troubleshooting tips, and advanced integrations to ensure production-grade security. By the end, you’ll have a resilient monitoring solution integrated into your DevSecOps workflows. Quick Answer: Deploying the... ### Optimize Plex on TrueNAS Scale: Tips & Techniques URL: https://orthogonal.info/optimizing-plex-performance-on-truenas-scale-advanced-techniques-and-troubleshooting-tips/ Date: 2026-04-21 03:03:03 Summary: TL;DR: TrueNAS Scale is a powerful platform for running Plex, but optimizing performance requires careful resource allocation, advanced configuration, and proactive troubleshooting. This guide covers everything from setting up secure permissions to fine-tuning your Plex server for smooth playback, even under heavy load. Quick Answer: Use TrueNAS Scale’s containerized apps... ### EXIF Metadata Leaks Location — Learn to Remove It URL: https://orthogonal.info/exif-metadata-is-leaking-your-location-heres-how-to-strip-it/ Date: 2026-04-20 09:56:47 Summary: TL;DR: Every photo your phone takes embeds GPS coordinates, timestamps, and device info into EXIF metadata. Most platforms don’t strip it on upload, which can leak your exact location. Use browser-based tools like PixelStrip to remove all metadata before sharing — it re-renders the image through Canvas API, producing a... ### Secure Self-Hosted LLM: Enterprise Practices at Home URL: https://orthogonal.info/secure-self-hosted-llm-enterprise-practices-at-home/ Date: 2026-04-19 23:33:23 Summary: TL;DR: Self-hosting large language models (LLMs) offers privacy and control but comes with security challenges. By scaling down enterprise-grade practices like zero trust, RBAC, and encryption, you can secure your homelab deployment. This guide covers setup, monitoring, and future-proofing your self-hosted LLM environment. Quick Answer: To securely self-host LLMs, implement... ### Network Segmentation for a Secure Homelab URL: https://orthogonal.info/network-segmentation-for-a-secure-homelab/ Date: 2026-04-19 08:01:45 Summary: TL;DR: Network segmentation is a critical security practice that isolates devices and services into distinct zones to reduce attack surfaces and improve control. In this article, we’ll explore how to adapt enterprise-grade segmentation techniques for homelabs, covering VLANs, subnets, and tools like pfSense and Ubiquiti. By the end, you’ll have... ### Kubernetes Security: RBAC, Pod Standards & Monitoring URL: https://orthogonal.info/advanced-kubernetes-security-techniques-insights-and-troubleshooting-strategies-from-ian-lewis-at-google/ Date: 2026-04-19 03:13:29 Summary: TL;DR: Kubernetes security is critical for protecting your workloads and data. This article explores advanced security techniques covering common pitfalls, troubleshooting strategies, and future trends. Learn how to implement RBAC, Pod Security Standards, and compare tools like OPA, Kyverno, and Falco to secure your clusters effectively. Quick Answer: Kubernetes security... ### Remote Developer Toolkit: Durable Work-From-Home Essentials URL: https://orthogonal.info/remote-developer-toolkit-work-from-home-essentials-that-actually-last/ Date: 2026-04-18 17:42:35 Summary: Some links in this post are affiliate links. I only recommend products I personally use or have thoroughly researched. TL;DR: A reliable remote work setup requires durable, well-chosen gear — a solid webcam, a noise-cancelling microphone, proper cable management, and a stable network connection. Invest in quality essentials upfront to... ### Building a Home Server: The Budget Networking Gear Guide URL: https://orthogonal.info/building-a-home-server-the-budget-networking-gear-guide/ Date: 2026-04-18 17:42:32 Summary: Some links in this post are affiliate links. I only recommend products I personally use or have thoroughly researched. TL;DR: Your homelab is only as fast as your network. A managed switch, proper Cat6 cabling, and a capable router matter more than the server hardware itself. Budget around $150–300 for... ### The Ultimate Developer Desk Setup: Essential Gear Under $50 URL: https://orthogonal.info/the-ultimate-developer-desk-setup-essential-gear-under-50/ Date: 2026-04-18 17:42:23 Summary: Some links in this post are affiliate links. I only recommend products I personally use or have thoroughly researched. TL;DR: The best developer desk upgrades cost under $50 each — a monitor arm, a mechanical keyboard, a large desk mat, and proper lighting. These ergonomic essentials reduce strain during long... ### Vulnerability Scanners: Troubleshooting & Comparison URL: https://orthogonal.info/navigating-vulnerability-scanner-tools-troubleshooting-common-issues-and-advanced-comparison-techniques/ Date: 2026-04-18 08:02:13 Summary: TL;DR: Vulnerability scanners are essential for identifying security risks, but they often come with their own challenges, from false positives to integration headaches. This article dives into troubleshooting common issues, compares top tools like Nessus, Qualys, and Trivy, and provides actionable tips to optimize their performance. Whether you’re a developer... ### Master Wazuh Agent: Troubleshooting & Optimization Tips URL: https://orthogonal.info/mastering-wazuh-agent-advanced-troubleshooting-and-optimization-techniques/ Date: 2026-04-18 03:01:51 Summary: TL;DR: The Wazuh agent is a powerful tool for security monitoring, but deploying and maintaining it in Kubernetes environments can be challenging. This guide covers advanced troubleshooting techniques, performance optimizations, and best practices to ensure your Wazuh agent runs securely and efficiently. You’ll also learn how it compares to alternatives... ### Cisco Zero Trust: A Developer's Guide to Security URL: https://orthogonal.info/cisco-zero-trust-a-developers-guide-to-security/ Date: 2026-04-17 08:03:25 Summary: TL;DR: Cisco’s Zero Trust Architecture redefines security by assuming no user, device, or application is inherently trustworthy. Developers play a critical role in implementing this model by integrating secure practices into their workflows. This guide explores Zero Trust principles, Cisco’s framework, and actionable steps for developers to adopt Zero Trust... ### Python Libraries for Stock Technical Analysis URL: https://orthogonal.info/python-libraries-for-stock-technical-analysis/ Date: 2026-04-16 08:03:29 Summary: TL;DR: Python offers powerful libraries like TA-Lib, pandas_ta, and pyti for implementing stock technical analysis. These tools enable engineers to calculate indicators like RSI, MACD, and Bollinger Bands programmatically. This article dives into the math behind these indicators, provides code-first examples, and discusses optimization techniques for handling large datasets. Quick... ### Linux Server Hardening: Advanced Tips & Techniques URL: https://orthogonal.info/advanced-troubleshooting-and-comparison-of-linux-server-hardening-techniques/ Date: 2026-04-16 03:04:00 Summary: TL;DR: Hardening your Linux servers is critical to defending against modern threats. Start with baseline security practices like patching, disabling unnecessary services, and securing SSH. Move to advanced techniques like SELinux, kernel hardening, and file integrity monitoring. Automate these processes with Infrastructure as Code (IaC) and integrate them into your... ### Free Word Counter & Text Analyzer: Count Characters URL: https://orthogonal.info/free-word-counter-online/ Date: 2026-04-15 15:02:31 Summary: Count words, characters, sentences, and paragraphs instantly as you type with this free online word counter. Get real-time reading time, speaking time, and keyword density analysis — perfect for blog posts, essays, social media, and SEO. TL;DR: This free browser-based word counter analyzes your text in real time — showing... ### Free UUID Generator Online — Generate v4 UUIDs Instantly URL: https://orthogonal.info/free-uuid-generator-online/ Date: 2026-04-15 15:02:28 Summary: Instantly generate random UUID v4 identifiers with this free online tool. Create up to 100 UUIDs at once in lowercase, uppercase, braces, or no-dash format. Perfect for database keys, test data, and API development. No signup required. TL;DR: Generate RFC 4122–compliant version 4 UUIDs instantly in your browser. Create up... ### Free Online URL Encoder & Decoder — Instant Encoding URL: https://orthogonal.info/free-url-encoder-decoder-online/ Date: 2026-04-15 15:02:25 Summary: Encode or decode URLs instantly with this free online tool. Convert special characters to percent-encoded format for safe use in URLs, query strings, and API requests — or decode encoded URLs back to human-readable text. Everything runs in your browser. TL;DR: Encode or decode URLs instantly in your browser using... ### Build an Options Activity Scanner With Python and Free Data URL: https://orthogonal.info/unusual-options-activity-scanner-python-free/ Date: 2026-04-15 09:58:14 Summary: When SMCI options volume spiked to 8× its 20-day average on a random Tuesday afternoon, no news had dropped yet. Two days later the stock moved 14%. Unusual options activity is one of the most reliable leading indicators in public markets—and you can scan for it programmatically with Python and... ### Full Stack Monitoring: Grafana, Prometheus & Loki Setup URL: https://orthogonal.info/full-stack-monitoring-a-security-first-approach/ Date: 2026-04-14 17:50:44 Summary: TL;DR: Full stack monitoring is essential for modern architectures, encompassing infrastructure, applications, and user experience. A security-first approach ensures that monitoring not only detects performance issues but also safeguards against threats. By integrating DevSecOps principles, you can create a scalable, resilient, and secure monitoring strategy tailored for Kubernetes environments. Quick... ### Free Hash Generator — MD5, SHA-1, SHA-256, SHA-512 Online URL: https://orthogonal.info/free-hash-generator-md5-sha256-online/ Date: 2026-04-14 14:33:53 Summary: Generate SHA-256, SHA-1, SHA-384, and SHA-512 hashes instantly with this free online hash generator. Verify file integrity, check download checksums, or explore cryptographic hash functions — all in your browser with zero data transmission. TL;DR: This free browser-based hash generator creates SHA-256, SHA-1, SHA-384, and SHA-512 hashes instantly. No data... ### Free Base64 Encoder & Decoder Online URL: https://orthogonal.info/free-base64-encoder-decoder-online/ Date: 2026-04-14 14:33:50 Summary: Quickly encode text to Base64 or decode Base64 back to plain text with this free online tool. Supports full UTF-8 text including emoji and special characters. Everything runs in your browser — no data is sent to any server. TL;DR: Encode text to Base64 or decode Base64 back to plain... ### Free Online JSON Formatter & Validator URL: https://orthogonal.info/free-json-formatter-validator-online/ Date: 2026-04-14 14:33:47 Summary: Need to format JSON quickly? This free online JSON formatter and validator lets you pretty-print, minify, and validate JSON data instantly — no signup, no ads, no data collection. Your JSON never leaves your browser. TL;DR: Format, validate, and minify JSON data instantly with this free browser-based tool. No signup,... ### I Built a Base64 Tool That Fixes Frustrating Alternatives URL: https://orthogonal.info/base64lab-encoder-decoder/ Date: 2026-04-14 10:33:19 Summary: Debugging a Base64-encoded error message buried inside a JSON response shouldn't require pasting sensitive production data into a random website. Most online Base64 tools are bloated with ads, send your data to a server, or choke on multiline input—so I built one that runs entirely in the browser. TL;DR: Base64Lab... ### Docker CVE-2026-34040: 1MB Request Bypasses AuthZ Plugin URL: https://orthogonal.info/docker-cve-2026-34040-authz-bypass-homelab/ Date: 2026-04-14 10:11:43 Summary: Docker CVE-2026-34040 lets an attacker bypass the AuthZ plugin with a single oversized HTTP request. Any API call with a body larger than 1MB skips authorization entirely—meaning a crafted docker run command can launch privileged containers on an unpatched host. TL;DR: CVE-2026-34040 (CVSS 8.8) lets attackers bypass Docker AuthZ plugins... ### Kubernetes Security Best Practices by Ian Lewis URL: https://orthogonal.info/kubernetes-security-best-practices-by-ian-lewis/ Date: 2026-04-14 09:50:11 Summary: TL;DR: Kubernetes is powerful but inherently complex, and securing it requires a proactive, layered approach. From RBAC to Pod Security Standards, and tools like Falco and Prometheus, this guide covers production-tested strategies to harden your Kubernetes clusters. A security-first mindset isn’t optional—it’s a necessity for DevSecOps teams. Quick Answer: Kubernetes... ### TrueNAS Setup Guide: Enterprise Security at Home URL: https://orthogonal.info/truenas-setup-guide-enterprise-security-at-home/ Date: 2026-04-14 03:03:06 Summary: TL;DR: TrueNAS is a powerful storage solution for homelabs, offering enterprise-grade features like ZFS, encryption, and snapshots. This guide walks you through setting up TrueNAS securely, from hardware selection to implementing firewalls and VPNs. By following these steps, you’ll ensure your data is safe, accessible, and future-proof. Quick Answer: TrueNAS... ### Track Congress Trades with Python & Free SEC Data URL: https://orthogonal.info/track-congressional-stock-trades-with-python-and-free-sec-data/ Date: 2026-04-13 09:58:22 Summary: A senator sold $2M in hotel stocks three days before a travel industry report tanked the sector. Coincidence or signal? Congressional stock trades are disclosed in public filings, and Python makes it straightforward to pull, parse, and cross-reference them against market-moving events. Quick Answer: You can track congressional stock trades... ### OpenClaw Setup: Zero to Autonomous AI Mastery URL: https://orthogonal.info/openclaw-setup-guide-mastery-pack/ Date: 2026-04-11 14:34:49 Summary: Setting up OpenClaw is easy. Setting it up right so your AI agent actually does useful work autonomously takes some know-how. Quick Answer: OpenClaw is a self-hosted AI agent orchestration system that runs on TrueNAS. This guide walks you through installing OpenClaw from scratch, configuring LLM backends, setting up automated... ### GitOps vs GitHub Actions: Security-First in Production URL: https://orthogonal.info/gitops-vs-github-actions-security-first-production/ Date: 2026-04-11 10:41:49 Summary: Migrating from GitHub Actions-only deployments to a hybrid GitOps setup with ArgoCD changes your security posture fundamentally—but the tradeoffs aren't obvious until you've lived with both in production. The shift affects secret management, drift detection, and rollback speed in ways the docs undersell. Quick Answer: For security-critical production environments, GitOps... ### Secure TrueNAS Plex Setup for Your Homelab URL: https://orthogonal.info/secure-truenas-plex-setup-homelab/ Date: 2026-04-10 10:32:28 Summary: Learn how to set up Plex on TrueNAS with enterprise-grade security practices tailored for home use. Protect your data while enjoying smooth media streaming. Quick Answer: To securely run Plex on TrueNAS, create a dedicated jail or VM with isolated networking, mount your media datasets read-only, configure a reverse proxy... ### Stop Ngrok Tunnels: Enterprise Security at Home URL: https://orthogonal.info/stop-ngrok-tunnels-enterprise-security-homelab/ Date: 2026-04-10 10:32:22 Summary: Learn how to securely stop Ngrok tunnels using enterprise-grade practices scaled down for homelab environments. Protect your home network with these practical tips. Quick Answer: Instead of exposing your homelab services through ngrok tunnels, use Cloudflare Tunnels with Zero Trust policies or WireGuard/Tailscale VPN for enterprise-grade security. These alternatives provide... ### CSS Gradient Builder: Fixing Annoyances of Existing Tools URL: https://orthogonal.info/css-gradient-builder-gradientforge/ Date: 2026-04-09 14:20:00 Summary: Conic gradients are the forgotten sibling of CSS gradients—every online gradient builder handles linear and radial, but try generating a conic gradient for a loading spinner and you're hand-writing CSS from MDN docs. That gap is exactly why this tool exists. Quick Answer: This CSS gradient builder solves the common... ### Free VPN: Cloudflare Tunnel & WARP Guide (2026) URL: https://orthogonal.info/free-vpn-cloudflare-tunnel-warp-zero-trust-guide/ Date: 2026-04-07 09:30:00 Summary: TL;DR: Cloudflare offers two free VPN solutions: WARP (consumer privacy VPN using WireGuard) and Cloudflare Tunnel + Zero Trust (self-hosted VPN replacement for accessing your home network). This guide covers both approaches step-by-step, with Docker Compose configs, split-tunnel setup, and security hardening. Zero Trust is free for up to 50... ### Pod Security Standards: A Security-First Guide URL: https://orthogonal.info/pod-security-standards-a-security-first-guide/ Date: 2026-04-06 10:03:57 Summary: Kubernetes Pod Security Standards 📌 TL;DR: I enforce PSS restricted on all production namespaces: runAsNonRoot: true, allowPrivilegeEscalation: false, all capabilities dropped, read-only root filesystem. Start with warn mode to find violations, then switch to enforce. This single change blocks the majority of container escape attacks. 🎯 Quick Answer: Enforce Pod... ### I Tested ArgoCD and Flux Side by Side — Here's What Won for Secure GitOps URL: https://orthogonal.info/argocd-vs-flux-secure-gitops-kubernetes-2025/ Date: 2026-04-05 10:34:19 Summary: I run ArgoCD on my TrueNAS homelab for all container deployments. Every service I self-host — Gitea, Immich, monitoring stacks, even this blog’s CI pipeline — gets deployed through ArgoCD syncing from Git repos on my local Gitea instance. I’ve also deployed Flux for clients who wanted something lighter. After... ### OAuth vs JWT: Choosing the Right Tool for Developers URL: https://orthogonal.info/oauth-vs-jwt-choosing-the-right-tool/ Date: 2026-04-04 10:33:40 Summary: I’ve implemented both OAuth and JWT in production systems across my career—from enterprise SSO rollouts to lightweight API auth for side projects. The single most common mistake I see? Treating OAuth and JWT as the same thing, or worse, picking one when you needed the other. They solve different problems,... ### PassForge: Building a Password Workstation Beyond One Slider URL: https://orthogonal.info/passforge-password-generator-workstation/ Date: 2026-04-03 10:36:51 Summary: I was setting up a new server last week and needed twelve unique passwords for different services. I opened three tabs — LastPass’s generator, Bitwarden’s generator, and 1Password’s online tool. Every single one gave me a barebones interface: one slider for length, a few checkboxes, and a single output. Copy,... ### Enterprise Security at Home: Wazuh & Suricata Setup URL: https://orthogonal.info/enterprise-security-at-home-wazuh-suricata-setup/ Date: 2026-04-03 10:03:57 Summary: I run Wazuh and Suricata on my home network. Yes, enterprise SIEM and IDS for a homelab—it's overkill by any reasonable measure. But after catching an IoT camera phoning home to servers in three different countries, I stopped second-guessing the investment. Here's why I do it and how you can... ### YubiKey SSH Authentication: Stop Trusting Key Files on Disk URL: https://orthogonal.info/yubikey-ssh-authentication-stop-trusting-key-files-on-disk/ Date: 2026-04-02 10:15:19 Summary: I stopped using SSH passwords three years ago. Switched to ed25519 keys, felt pretty good about it. Then my laptop got stolen from a coffee shop — lid open, session unlocked. My private key was sitting right there in ~/.ssh/, passphrase cached in the agent. That’s when I bought my... ### Master Docker Container Security: Best Practices for 2026 URL: https://orthogonal.info/master-docker-container-security-best-practices-for-2026/ Date: 2026-04-02 10:02:16 Summary: Your staging environment is a dream. Every container spins up flawlessly, logs are clean, and your app hums along like a well-oiled machine. Then comes production. Suddenly, your containers are spewing errors faster than you can say "debug," secrets are leaking like a sieve, and you're frantically Googling "Docker security... ### Pre-IPO API: SEC Filings, SPACs & Lockup Data URL: https://orthogonal.info/pre-ipo-intelligence-api-real-time-sec-filings-spacs-lockup-data-for-developers/ Date: 2026-04-01 23:54:10 Summary: I built the Pre-IPO Intelligence API because I needed this data for my own trading systems and couldn’t find it in one place. If you’re building fintech applications, trading bots, or investment research tools, you know the pain: pre-IPO data is fragmented across dozens of SEC filing pages, paywalled databases,... ### Browser Fingerprinting: Identify You Without Cookies URL: https://orthogonal.info/browser-fingerprinting-how-12-lines-of-javascript-identify-you-without-cookies/ Date: 2026-04-01 10:06:07 Summary: Browser fingerprinting can identify you across sessions, devices, and even VPNs—without a single cookie. Your canvas rendering, WebGL driver strings, font list, and audio processing characteristics create a signature so unique that clearing your browser data does almost nothing to reset it. Browser fingerprinting isn’t new, but most developers I... ### Privacy-Focused Diff Checker: No Text Upload Required URL: https://orthogonal.info/difflab-private-diff-checker/ Date: 2026-03-31 10:44:54 Summary: I spent last weekend comparing two config files — a 400-line nginx setup where I’d made changes across multiple servers. I opened Diffchecker.com, pasted both files, and immediately ran into the same frustrations I’ve had for years: the page uploaded my text to their server (privacy issue for config files),... ### CVE-2025-53521: F5 BIG-IP APM RCE — CISA Deadline 3/30 URL: https://orthogonal.info/f5-big-ip-apm-cve-2025-53521-rce-cisa-kev-deadline/ Date: 2026-03-30 23:50:44 Summary: I triaged this CVE for my own perimeter the moment it hit the KEV catalog. If you're running F5 BIG-IP with APM, here's what you need to know and do—fast. CVE-2025-53521 dropped into CISA’s Known Exploited Vulnerabilities catalog on March 27, and the remediation deadline is March 30. If you’re... ### CVE-2026-3055: Citrix NetScaler Token Theft — Patch Now URL: https://orthogonal.info/cve-2026-3055-citrix-netscaler-memory-leak-is-being-exploited-right-now-here-is-what-to-do/ Date: 2026-03-30 10:12:49 Summary: Last Wednesday I woke 🔧 From my experience: After CitrixBleed, I started running automated config diffs against known-good baselines on a daily cron. It’s a 10-line bash script that’s caught unauthorized changes twice. Don’t wait for the next CVE to build that habit. up to three Slack messages from different... ### Git Worktrees: The Feature That Killed My Stash Habit URL: https://orthogonal.info/git-worktrees-the-feature-that-killed-my-stash-habit/ Date: 2026-03-29 09:58:40 Summary: Git stashing is a crutch that breaks the moment you have more than one context switch per hour. Worktrees solve the actual problem: multiple working directories from a single repo, each on its own branch, each with its own uncommitted state—no stash juggling required. Git worktrees have been around since... ### Mastering Kubernetes Security: Network Policies & URL: https://orthogonal.info/mastering-kubernetes-security-network-policies-service-mesh/ Date: 2026-03-28 22:33:29 Summary: Network policies are the single most impactful security control you can add to a Kubernetes cluster — and most clusters I audit don’t have a single one. After implementing network segmentation across enterprise clusters with hundreds of namespaces, I’ve developed a repeatable approach that works. Here’s the playbook I use.... ### UPS Battery Backup: Sizing, Setup & NUT on TrueNAS URL: https://orthogonal.info/ups-battery-backup-for-your-homelab-sizing-setup-and-nut-automatic-shutdown-on-truenas/ Date: 2026-03-27 10:44:46 Summary: A half-second power flicker during a ZFS scrub can corrupt your pool metadata if the write cache isn't battery-backed. UPS battery backup isn't optional for a NAS—it's infrastructure. Sizing it correctly and wiring it into TrueNAS via NUT turns a catastrophic risk into a graceful shutdown. If you’re running a... ### Insider Trading Detector with Python & Free SEC Data URL: https://orthogonal.info/build-an-insider-trading-cluster-detector-with-python-and-free-sec-data/ Date: 2026-03-26 10:14:07 Summary: Three directors at a mid-cap biotech quietly buying shares within a five-day window—right before a Phase 3 readout—is the kind of signal that hides in SEC filings until someone builds a script to surface it. Python plus the SEC EDGAR API makes insider trading pattern detection accessible to anyone willing... ### Track Pre-IPO Valuations: SpaceX, OpenAI & More URL: https://orthogonal.info/how-to-track-pre-ipo-valuations-for-spacex-openai-and-anthropic-with-a-free-api/ Date: 2026-03-25 21:50:44 Summary: SpaceX is being valued at $2 trillion by the market. OpenAI at $1.3 trillion. Anthropic at over $500 billion. But none of these companies are publicly traded. There’s no ticker symbol, no earnings call, no 10-K filing. So how do we know what the market thinks they’re worth? The answer... ### RegexLab: Free Offline Regex Tester With 5 Modes Regex101 Doesn't Have URL: https://orthogonal.info/regexlab-regex-tester/ Date: 2026-03-25 20:24:09 Summary: Pasting production log data into Regex101 means your server paths, IPs, and request payloads are now on someone else's infrastructure. A fully offline regex tester that runs in your browser eliminates that risk—and can do things Regex101 can't, like multi-file batch matching and replacement previews. That’s the moment I decided... ### Docker Compose vs Kubernetes: Secure Homelab Choices URL: https://orthogonal.info/docker-compose-vs-kubernetes-homelab-security/ Date: 2026-03-24 10:31:50 Summary: Moving a homelab from Docker Compose to Kubernetes is a rite of passage that breaks half your services and teaches you why orchestration complexity exists. The real question isn't which is better—it's where the security and operational tradeoffs actually fall for a home environment. The real question: how big is... ### 5 Best Finance APIs for Tracking Pre-IPO Valuations in 2026 URL: https://orthogonal.info/5-best-finance-apis-for-tracking-pre-ipo-valuations-in-2026/ Date: 2026-03-23 21:50:44 Summary: Why Pre-IPO Valuation Tracking Matters in 2026 📌 TL;DR: Why Pre-IPO Valuation Tracking Matters in 2026 The private tech market has exploded. SpaceX is now valued at over $2 trillion by public markets, OpenAI at $1.3 trillion, and the total implied market cap of the top 21 pre-IPO companies exceeds... ### Best Drives for TrueNAS 2026: HDDs, SSDs & My Setup URL: https://orthogonal.info/best-drives-for-truenas-in-2026-hdds-ssds-and-what-i-actually-run/ Date: 2026-03-23 10:12:07 Summary: SMART warnings are the canary you ignore until a drive dies mid-rebuild. Choosing the right drives for TrueNAS in 2026 means navigating the HDD-vs-SSD transition, understanding CMR vs SMR write penalties, and accepting that consumer drives in a ZFS mirror are a calculated risk. That rebuild forced me to actually... ### CVE-2026-20131: Cisco FMC Zero-Day Exploited by Ransomware URL: https://orthogonal.info/interlock-ransomware-cisco-fmc-zero-day-cve-2026-20131/ Date: 2026-03-22 10:12:41 Summary: I triaged CVE-2026-20131 for my own network the day it dropped. If you run Cisco FMC anywhere in your environment, this is a stop-what-you're-doing moment. A critical zero-day vulnerability in Cisco Secure Firewall Management Center (FMC) has been actively exploited by the Interlock ransomware group since January 2026 — more... ### Claude Code Leak: npm Security, TypeScript, AI Architecture URL: https://orthogonal.info/claude-code-leak-lessons-in-npm-security-typescript-analysis-and-ai-tool-architecture/ Date: 2026-03-22 09:59:14 Summary: When source maps for a major AI coding tool leaked via an npm package, I spent a week analyzing what was exposed and how it happened. The leak revealed internal architecture, agent orchestration patterns, and TypeScript code that was never meant to be public. This isn’t theoretical — it’s a... ### Securing Kubernetes Supply Chains with SBOM & Sigstore URL: https://orthogonal.info/securing-kubernetes-supply-chains-with-sbom-sigstore/ Date: 2026-03-21 23:57:57 Summary: After implementing SBOM signing and verification across 50+ microservices in production, I can tell you: supply chain security is one of those things that feels like overkill until you find a compromised base image in your pipeline. Here’s what actually works in practice — not theory, but the exact patterns... ### Self-Host Ollama: Local LLM Inference on Your Homelab URL: https://orthogonal.info/self-host-ollama-on-your-homelab-local-llm-inference-without-the-cloud-bill/ Date: 2026-03-21 09:57:19 Summary: The $300/Month Problem 📌 TL;DR: The $300/Month Problem I hit my OpenAI API billing dashboard last month and stared at $312.47. That’s what three months of prototyping a RAG pipeline cost me — and most of those tokens were wasted on testing prompts that didn’t work. 🎯 Quick Answer: Self-hosting... ### Backup & Recovery: Enterprise Security for Homelabs URL: https://orthogonal.info/backup-recovery-enterprise-security-for-homelabs/ Date: 2026-03-20 23:57:57 Summary: Learn how to apply enterprise-grade backup and disaster recovery practices to secure your homelab and protect critical data from unexpected failures. Why Backup and Disaster Recovery Matter for Homelabs 📌 TL;DR: Learn how to apply enterprise-grade backup and disaster recovery practices to secure your homelab and protect critical data from... ### Securing GitHub Actions: OIDC, Least Privilege, & More URL: https://orthogonal.info/how-to-secure-github-actions-oidc-authentication-least-privilege-and-supply-chain-attack-prevention/ Date: 2026-03-20 10:09:11 Summary: Did you know that 84% of developers using GitHub Actions admit they’re unsure if their workflows are secure? That’s like building a fortress but forgetting to lock the front gate. And with supply chain attacks on the rise, every misstep could be the one that lets attackers waltz right into... ### Penetration Testing Basics for Developers URL: https://orthogonal.info/penetration-testing-basics-for-developers/ Date: 2026-03-19 23:57:56 Summary: I started doing penetration testing because I got tired of finding the same vulnerabilities in code reviews. Once you learn to think like an attacker, you write fundamentally different code. I run regular pen tests against my own homelab services — it’s the fastest way to internalize security. Here’s how... ### Terraform Security: Encryption, IAM & Drift Detection URL: https://orthogonal.info/terraform-security-best-practices-encryption-iam-and-drift-detection/ Date: 2026-03-19 10:05:45 Summary: What happens when your Terraform state file ends up in the wrong hands? Spoiler: it’s not pretty, and your cloud environment might as well send out party invitations to every hacker on the internet. Keeping your Terraform setup secure can feel like trying to lock the front door while someone’s... ### HashForge: Privacy-First Hash Generator for All Algos URL: https://orthogonal.info/hashforge-privacy-first-hash-generator/ Date: 2026-03-18 10:28:56 Summary: I’ve been hashing things for years — verifying file downloads, generating checksums for deployments, creating HMAC signatures for APIs. And every single time, I end up bouncing between three or four browser tabs because no hash tool does everything I need in one place. So I built HashForge. The Problem... ### JSON Forge: Privacy-First JSON Formatter in Your Browser URL: https://orthogonal.info/json-forge-privacy-first-json-formatter/ Date: 2026-03-17 10:11:11 Summary: Pasting a nested API response into an online JSON formatter means your auth tokens, user data, and internal endpoints are now on someone else's server. A privacy-first JSON tool that runs entirely in your browser handles the same formatting, diffing, and path-querying—without the data exfiltration risk. **👉 Try JSON Forge... ### TeamPCP Supply Chain Attacks on Trivy, KICS & LiteLLM URL: https://orthogonal.info/teampcp-supply-chain-attacks-on-trivy-kics-and-litellm-full-timeline-and-how-to-protect-your-ci-cd-pipeline/ Date: 2026-03-16 10:12:33 Summary: On March 17, 2026, the open-source security ecosystem experienced what I consider the most sophisticated supply chain attack since SolarWinds. A threat actor operating under the handle TeamPCP executed a coordinated, multi-vector campaign targeting the very tools that millions of developers rely on to secure their software — Trivy, KICS,... ### Parse JPEG EXIF Data in Browser With Zero Dependencies URL: https://orthogonal.info/parse-exif-jpeg-javascript-browser-zero-dependencies/ Date: 2026-03-15 10:02:24 Summary: Parsing JPEG EXIF data in the browser without dependencies means reading a binary format—TIFF-structured IFDs, big-endian and little-endian byte orders, and tag types that reference offset chains. Most tutorials hand-wave this complexity, but if you want zero-dependency EXIF extraction, you need to understand the byte layout. Why Parse EXIF Data... ### I Benchmarked 5 Image Compressors With the Same 10 Photos URL: https://orthogonal.info/i-benchmarked-5-image-compressors-with-the-same-10-photos-here-are-the-real-numbers/ Date: 2026-03-11 09:03:10 Summary: I ran the same 10 images through five different online compressors and measured everything: output file size, visual quality loss, compression speed, and what happened to my data. Two of the five uploaded my photos to servers in jurisdictions I couldn’t identify. One silently downscaled my images. And the one... ### Pomodoro Technique Works Better With Gamified Timers URL: https://orthogonal.info/pomodoro-technique-streaks-gamification/ Date: 2026-03-10 19:22:46 Summary: The Pomodoro Technique — work for 25 minutes, break for 5 — has been around since 1987. The science backs it up: time-boxing reduces procrastination and improves focus. But here’s the problem: most people try it for three days and quit. Not because the technique fails, but because a plain... ### 5 Free Browser Tools That Replace Desktop Apps URL: https://orthogonal.info/free-browser-tools-replace-desktop-apps/ Date: 2026-03-07 19:22:45 Summary: I built 3 of these tools because I got tired of desktop apps phoning home. After 12 years as a security engineer in Big Tech, I’ve watched network traffic from “offline” desktop apps — the telemetry, the analytics pings, the “anonymous” usage data that includes your file paths and timestamps.... ### How to Remove GPS Location from Photos Before Sharing Online URL: https://orthogonal.info/remove-gps-location-from-photos/ Date: 2026-03-06 19:22:45 Summary: Every time you take a photo with your phone, the exact GPS coordinates are embedded in the image file. When you share that photo online — on forums, marketplaces, or messaging apps — anyone who downloads it can see exactly where you were standing. Here’s how to remove it in... ### Compress Images Without Losing Quality (Free Tool) URL: https://orthogonal.info/compress-images-without-losing-quality/ Date: 2026-03-03 19:22:45 Summary: You need to send a photo by email but it’s 8MB. You need to upload a product image but the CMS has a 2MB limit. You need to speed up your website but your hero image is 4MB. The solution is always the same: compress the image. But most tools... ### NoiseLog: A Sound Meter App for Noisy Neighbors URL: https://orthogonal.info/noiselog-sound-meter/ Date: 2026-03-02 16:25:58 Summary: When I complained about noise to my building manager, they asked for evidence. “It’s loud” wasn’t enough. They wanted dates, times, and decibel readings. So I built an app that gives you all three — and generates a report you can actually hand to someone. The Noise Complaint Trap 📌... ### FocusForge: How Gamification Tricked Me Into Deep Focus URL: https://orthogonal.info/focusforge-focus-timer/ Date: 2026-03-01 16:25:58 Summary: I’ve downloaded at least ten Pomodoro timer apps over the years. I used each one for about three days before forgetting it existed. Then I built FocusForge, added XP and levels, and accidentally created a focus habit I can’t stop. The Pomodoro Problem 📌 TL;DR: I’ve downloaded at least ten... ### TypeFast: Snippet Manager Without Electron Bloat URL: https://orthogonal.info/typefast-snippet-manager/ Date: 2026-02-28 16:25:58 Summary: I needed a place to store code snippets, email templates, and frequently pasted text blocks. Everything I found was either a full IDE extension, a note-taking app in disguise, or yet another Electron app eating 200MB of RAM. So I built TypeFast — a snippet manager that runs in a... ### PixelStrip: Stop Photos Broadcasting Your Location URL: https://orthogonal.info/pixelstrip-exif-remover/ Date: 2026-02-27 16:25:58 Summary: Every photo taken on a smartphone embeds invisible metadata — including GPS coordinates accurate to within a few meters. PixelStrip strips it all out before you share. Zero upload, zero tracking, zero excuses. A Quick Experiment 📌 TL;DR: Every photo taken on a smartphone embeds invisible metadata — including GPS... ### QuickShrink: Browser Image Compressor, No Uploads URL: https://orthogonal.info/quickshrink-image-compressor/ Date: 2026-02-26 16:25:57 Summary: I got tired of uploading personal photos to random websites just to shrink them. So I built QuickShrink — an image compressor that runs entirely in your browser. Your images never touch a server. The Dirty Secret of “Free” Image Compressors 📌 TL;DR: I got tired of uploading personal photos... ### Secure Remote Access for Your Homelab URL: https://orthogonal.info/secure-remote-access-for-your-homelab/ Date: 2026-02-25 08:17:14 Summary: I manage my homelab remotely every day—30+ Docker containers on TrueNAS SCALE, accessed from coffee shops, airports, and hotel Wi-Fi. After finding brute-force attempts in my logs within hours of opening SSH to the internet, I locked everything down. Here’s exactly how I secure remote access now. Introduction to Secure... ### Open Source Security Monitoring for Developers URL: https://orthogonal.info/open-source-security-monitoring-for-developers/ Date: 2026-02-22 10:21:59 Summary: I run Wazuh SIEM, OPNsense, and Suricata IDS on my own homelab — the same open source stack I’ve deployed in production environments. Most developers think security monitoring is someone else’s job. After 12 years of watching incidents unfold because the dev team had zero visibility, I’m here to tell... ### Kubernetes Secrets Management: A Security-First Guide URL: https://orthogonal.info/kubernetes-secrets-management-a-security-first-guide/ Date: 2026-02-21 18:18:02 Summary: I’ve lost count of how many clusters I’ve audited where secrets were stored as plain base64 in etcd — which is encoding, not encryption. After cleaning up secrets sprawl across enterprise clusters for years, I can tell you: most teams don’t realize how exposed they are until it’s too late.... ### AI Market Signals: What Stock Trends Say This Week URL: https://orthogonal.info/this-week-in-markets-what-ai-research-tells-us-about-the-war-crisis-rotation/ Date: 2026-02-20 15:01:38 Summary: The week ending March 14, 2026 was defined by one word: crisis. Our AI-driven narrative detection system has officially shifted from a MIXED regime to WAR_CRISIS dominance — and the data behind that shift tells a compelling story about where money is moving next. The Narrative Shift 📌 TL;DR: The... ### Kubernetes Security Checklist for Production (2026) URL: https://orthogonal.info/kubernetes-security-checklist-for-production-2026/ Date: 2026-02-19 22:24:29 Summary: I’ve audited dozens of Kubernetes clusters over 12 years in Big Tech — from small dev clusters to 500-node production fleets. The same misconfigurations show up again and again. This checklist catches about 90% of the issues I find during security reviews. It distills the most critical security controls into... ### GitOps Security Patterns for Kubernetes URL: https://orthogonal.info/gitops-security-patterns-for-kubernetes/ Date: 2026-02-18 21:41:52 Summary: I’ve set up GitOps pipelines for Kubernetes clusters ranging from my homelab to enterprise fleets. The security mistakes are always the same: secrets in git, no commit signing, and wide-open deploy permissions. After hardening dozens of these pipelines, here are the patterns that actually survive contact with production. Introduction to... ### Engineer’s Guide to RSI, Ichimoku, Stochastic Indicators URL: https://orthogonal.info/engineers-guide-to-rsi-ichimoku-stochastic-indicators/ Date: 2026-02-14 21:41:52 Summary: Dive into the math and code behind RSI, Ichimoku, and Stochastic indicators, exploring their quantitative foundations and Python implementations for finance engineers. Introduction to Technical Indicators 📌 TL;DR: Dive into the math and code behind RSI, Ichimoku, and Stochastic indicators, exploring their quantitative foundations and Python implementations for finance engineers.... ### Secure Coding Patterns for Every Developer URL: https://orthogonal.info/secure-coding-patterns-for-every-developer/ Date: 2026-02-12 21:41:52 Summary: After 12 years reviewing code in Big Tech security teams, I can tell you the same vulnerabilities show up in every codebase: unsanitized inputs, broken auth, and secrets in source code. These aren’t exotic attacks — they’re patterns that any developer can learn to prevent. Here are the secure coding... ### Secure C# ConcurrentDictionary for Production URL: https://orthogonal.info/secure-c-concurrentdictionary-for-production/ Date: 2026-02-08 21:41:52 Summary: I’ve debugged more ConcurrentDictionary race conditions than I care to admit. Thread-safe doesn’t mean bug-free — it means the failure modes are subtler and harder to reproduce. After shipping high-throughput C# services in production environments, here’s what I’ve learned about making ConcurrentDictionary actually production-ready. See also our guide on ConcurrentDictionary... ### Self-Hosted GitOps Pipeline: Gitea + ArgoCD Guide URL: https://orthogonal.info/build-a-self-hosted-gitops-pipeline-with-gitea-argocd-and-kubernetes-at-home/ Date: 2026-02-04 19:22:41 Summary: I self-host Gitea on my TrueNAS homelab and use it to deploy everything from trading bots to media servers. The error message that started this guide was maddening: “Permission denied while cloning repository.” It was my repository. On my server. In my basement. Yet somehow, my GitOps pipeline decided to... ### Why AI Makes Architecture the Only Skill That Matters URL: https://orthogonal.info/ai-plan-driven-development-architecture-only-skill-that-matters/ Date: 2026-02-02 14:09:38 Summary: Architecture is the one engineering skill that AI amplifies instead of replacing. Code generation handles implementation—routes, CRUD logic, boilerplate—but deciding what to build, how components interact, and where failure boundaries belong still requires human judgment that no model reliably produces. I didn’t write most of the code. I wrote the... ### Vibe Coding Is a Security Nightmare: How to Fix It URL: https://orthogonal.info/vibe-coding-security-nightmare-how-to-survive/ Date: 2026-02-01 09:30:57 Summary: Three weeks ago I reviewed a pull request from a junior developer on our team. The code was clean—suspiciously clean. Good variable names, proper error handling, even JSDoc comments. I approved it, deployed it, and moved on. Then our SAST scanner flagged it. Hardcoded API keys in a utility function.... ### Claude Code Review: My Honest Take After 3 Months URL: https://orthogonal.info/claude-code-changed-how-i-ship-code-heres-my-honest-take-after-3-months/ Date: 2026-01-31 00:55:11 Summary: Three months ago, I was skeptical. Another AI coding tool? I’d already tried GitHub Copilot, Cursor, and a handful of VS Code extensions that promised to “10x my productivity.” Most of them were glorified autocomplete — helpful for boilerplate, useless for anything that required actual understanding of a codebase. Then... ### Boost C# ConcurrentDictionary Performance in Kubernetes URL: https://orthogonal.info/secure-c-concurrent-dictionary-for-kubernetes/ Date: 2026-01-29 00:39:20 Summary: Explore a production-grade, security-first approach to using C# Concurrent Dictionary in Kubernetes environments. Learn best practices for scalability and DevSecOps integration. Introduction to C# Concurrent Dictionary 📌 TL;DR: Explore a production-grade, security-first approach to using C# Concurrent Dictionary in Kubernetes environments. Learn best practices for scalability and DevSecOps integration. 🎯... ### Home Network Segmentation with OPNsense: A Complete Guide URL: https://orthogonal.info/home-network-segmentation-with-opnsense-a-complete-guide/ Date: 2026-01-28 21:06:08 Summary: My homelab has 30+ Docker containers, 4 VLANs, and over a dozen IoT devices—all managed through OPNsense on a Protectli vault. Before I set up segmentation, my smart plugs could ping my NAS and my guest Wi-Fi clients could see every service on my network. This guide walks you through... ### Risk Management & Position Sizing for Traders URL: https://orthogonal.info/risk-management-position-sizing-an-engineers-guide-to-trading/ Date: 2026-01-27 21:05:22 Summary: I blew up a paper trading account in my first month of algorithmic trading. Not because my signals were wrong—my position sizing was. I’ve since built automated risk management into every layer of my Python trading system, from Kelly Criterion calculations to real-time drawdown monitoring. Here’s the framework that keeps... ### Threat Modeling Made Simple for Developers URL: https://orthogonal.info/threat-modeling-made-simple-for-developers/ Date: 2026-01-26 21:04:40 Summary: I run a threat model for every new service I deploy—whether it’s a Kubernetes workload on my homelab or an API headed to production. It doesn’t have to be a week-long exercise. Here’s the simplified process I use that takes an afternoon and catches the issues that actually matter. In... ### Solving Homelab Bottlenecks: Why Upgrading to a 2.5G URL: https://orthogonal.info/i-spent-800-on-2-5g-gear-but-forgot-one-50-component/ Date: 2026-01-24 12:24:02 Summary: A Costly Oversight: Lessons from My Homelab Upgrade 📌 TL;DR: A Costly Oversight: Lessons from My Homelab Upgrade Imagine spending $800 upgrading your homelab network, only to discover that one overlooked component reduced all your shiny new hardware to a fraction of its potential. 🎯 Quick Answer: A $50 Cat5e... ### How to Protect Your Homelab from Dust: A Practical Guide URL: https://orthogonal.info/how-dust-almost-killed-my-homelab/ Date: 2026-01-23 01:13:24 Summary: The Night Dust Almost Took Down My Homelab 📌 TL;DR: The Night Dust Almost Took Down My Homelab It was a quiet night—or so I thought. I was deep in REM sleep when my phone jolted me awake with an ominous notification: Proxmox Critical Errors . Bleary-eyed and half-conscious, I... ### Homelab Hardware Guide: Build Your Dream Setup 2026 URL: https://orthogonal.info/ultimate-homelab-hardware-guide-self-hosting-made-simple-in-2026/ Date: 2026-01-21 19:05:57 Summary: Why Every Tech Enthusiast Needs a Homelab 📌 TL;DR: Why Every Tech Enthusiast Needs a Homelab Picture this: you’re streaming your favorite movie from your personal media server, your smart home devices are smoothly automated, and your development environment is running on hardware you control—all without relying on third-party services.... ### Scaling GitOps Securely: Kubernetes Best Practices URL: https://orthogonal.info/gitops-security-patterns-kubernetes-scale/ Date: 2026-01-16 20:45:57 Summary: Why GitOps Security Matters More Than Ever 📌 TL;DR: Why GitOps Security Matters More Than Ever Imagine this: You’re sipping your coffee on a quiet Monday morning, ready to tackle the week ahead. Suddenly, an alert pops up—your Kubernetes cluster is compromised. 🎯 Quick Answer: Scale GitOps securely by enforcing... ### Mastering Secure Coding: Practical Techniques for Developers URL: https://orthogonal.info/secure-coding-made-simple-for-developers/ Date: 2026-01-15 22:22:29 Summary: Why Developers Must Champion Security 📌 TL;DR: Why Developers Must Champion Security Picture this: It’s a typical Tuesday morning, coffee in hand, when an urgent Slack message pops up. A critical vulnerability has been exposed in your production API, and hackers are already exploiting it. 🎯 Quick Answer: Secure coding... ### Mastering Incident Response Playbooks for Developers URL: https://orthogonal.info/incident-response-playbooks-for-developers/ Date: 2026-01-11 22:16:30 Summary: Learn how to design effective and actionable incident response playbooks tailored for developers, ensuring swift and confident handling of security incidents while fostering collaboration with security teams. Why Every Developer Needs Incident Response Playbooks 📌 TL;DR: Learn how to design effective and actionable incident response playbooks tailored for developers, ensuring... ### Algorithmic Trading: A Practical Guide for Engineers URL: https://orthogonal.info/algorithmic-trading-basics-for-engineers/ Date: 2026-01-09 21:52:46 Summary: Why Algorithmic Trading is a Major improvement for Engineers 📌 TL;DR: Why Algorithmic Trading is a Major improvement for Engineers Picture this: you’re sipping coffee while your custom trading bot executes hundreds of trades in milliseconds, identifying opportunities and managing risks far better than any human could. 🎯 Quick Answer:... ### Advanced Options Strategies for Engineers: A Practical Guide URL: https://orthogonal.info/mastering-options-strategies-a-math-driven-approach/ Date: 2026-01-08 17:58:42 Summary: Options Trading: Where Math Meets Money 📌 TL;DR: Options Trading: Where Math Meets Money Imagine you’re an engineer, accustomed to solving complex systems with elegant solutions. Now picture applying that same mindset to the financial markets. 🎯 Quick Answer: Options are the most engineer-friendly financial instruments because pricing follows quantifiable... ### Zero Trust for Developers: Secure Systems by Design URL: https://orthogonal.info/zero-trust-for-developers-a-practical-guide/ Date: 2026-01-07 16:20:17 Summary: Why Zero Trust is Non-Negotiable for Developers 📌 TL;DR: Why Zero Trust is Non-Negotiable for Developers Picture this: It’s a late Friday afternoon, and you’re prepping for the weekend when an alert comes through. An internal service has accessed sensitive customer data without authorization. 🎯 Quick Answer: Zero Trust architecture... ### Kubernetes Autoscaling: Master HPA and VPA URL: https://orthogonal.info/kubernetes-autoscaling-made-easy-master-hpa-and-vpa-for-devops-success/ Date: 2026-01-06 11:37:00 Summary: Kubernetes Autoscaling: A Lifesaver for DevOps Teams 📌 TL;DR: Kubernetes Autoscaling: A Lifesaver for DevOps Teams Picture this: it’s Friday night, and you’re ready to unwind after a long week. Suddenly, your phone buzzes with an alert—your Kubernetes cluster is under siege from a traffic spike. 🎯 Quick Answer: Use... ### Docker Memory Management: Prevent OOM Errors URL: https://orthogonal.info/docker-memory-management-prevent-container-oom-errors-and-optimize-resource-limits/ Date: 2026-01-04 02:25:05 Summary: It was 2 AM on a Tuesday, and I was staring at a production dashboard that looked like a Christmas tree—red alerts everywhere. The culprit? Yet another Docker container had run out of memory and crashed, taking half the application with it. I tried to stay calm, but let’s be... ### From Layoff to Launch: Start a Startup After Setbacks URL: https://orthogonal.info/from-layoff-to-startup-turning-a-difficult-situation-into-a-positive-opportunity/ Date: 2023-01-20 19:10:03 Summary: I’ve been through industry downturns and watched talented engineers get hit by layoffs that had nothing to do with their ability. Here’s what I’ve learned about turning that setback into the push you needed to build something of your own. A Layoff Can Be Your Startup Catalyst 📌 TL;DR: A... ### .htaccess Upload Exploit in PHP: How Attackers Bypass File Validation (and How I Stopped It) URL: https://orthogonal.info/using-htaccess-file-to-compromise-loose-ext-control-upload-in-php/ Date: 2023-01-16 22:09:01 Summary: Why File Upload Security Should Top Your Priority List 📌 TL;DR: Why File Upload Security Should Top Your Priority List Picture this: Your users are happily uploading files to your PHP application—perhaps profile pictures, documents, or other assets. Everything seems to be working perfectly until one day you discover your... ### JavaScript getDay Method: Complete Developer Guide URL: https://orthogonal.info/the-hidden-complexities-of-the-getday-method-in-javascript/ Date: 2022-12-06 23:59:33 Summary: Why JavaScript’s getDay Method Often Confuses Developers 📌 TL;DR: Why JavaScript’s getDay Method Often Confuses Developers Have you ever experienced frustration when JavaScript’s getDay method returned a number that didn’t match your expectations? Trust me, you’re not alone. 🎯 Quick Answer: JavaScript’s `getDay()` returns 0–6 where 0 is Sunday and... ### Advanced CSS Optimization for Peak Web Performance URL: https://orthogonal.info/maximizing-performance-expert-tips-for-optimizing-your-css/ Date: 2022-11-29 08:26:16 Summary: Imagine launching a visually stunning website, carefully crafted to dazzle visitors and convey your message. But instead of rave reviews, the feedback you get is less than flattering: “It’s slow,” “It feels unresponsive,” “Why does it take so long to load?” Sound familiar? The culprit might be hidden in plain... ### Python Optimization: Proven Tips for Performance URL: https://orthogonal.info/maximizing-performance-expert-tips-for-optimizing-your-python/ Date: 2022-11-22 08:24:39 Summary: Python is widely celebrated for its simplicity, readability, and versatility. It powers everything from web applications to machine learning models, making it a go-to language for developers worldwide. However, Python’s ease of use often comes with a tradeoff: performance. As an interpreted language, Python can be slower than compiled languages... ### JavaScript Optimization: Tips to Boost Performance URL: https://orthogonal.info/maximizing-performance-expert-tips-for-optimizing-your-javascripts/ Date: 2022-11-13 08:22:16 Summary: Slow JavaScript kills user engagement faster than almost any other frontend issue. When every page load drags and scroll events stutter, the root cause is usually a handful of fixable performance anti-patterns—inefficient DOM manipulation, unthrottled event handlers, and render-blocking operations that compound under real-world usage. I’ll walk you through actionable... ### CosmosDB Performance: Ultimate Optimization Guide URL: https://orthogonal.info/maximizing-performance-achieve-lightning-fast-query-speeds-with-these-cosmosdb-optimization-strategies/ Date: 2022-11-05 08:20:07 Summary: CosmosDB costs spiral and latency spikes when your data model fights the partitioning strategy instead of working with it. As throughput scales, poorly tuned queries and misconfigured indexing policies become the bottleneck—not the database engine itself. we’ll walk you through advanced strategies to optimize CosmosDB performance. From fine-tuning indexing to... ### Mastering MySQL Performance: Expert Optimization Techniques URL: https://orthogonal.info/maximizing-performance-boost-your-mysql-performance-with-these-proven-optimization-techniques/ Date: 2022-10-30 08:18:16 Summary: Introduction: Why MySQL Optimization Matters 📌 TL;DR: Introduction: Why MySQL Optimization Matters Imagine this: your application is running smoothly, users are engaging, and then one day you notice a sudden slowdown. Queries that were once lightning-fast now crawl, frustrating users and sending you scrambling to diagnose the issue. 🎯 Quick... ### MySQL 8 vs 7: Key Upgrades and Migration Tips URL: https://orthogonal.info/list-of-differences-between-mysql-8-and-mysql-7/ Date: 2022-10-23 08:12:20 Summary: Why MySQL 8 is a Major improvement for Modern Applications 📌 TL;DR: Why MySQL 8 is a Major improvement for Modern Applications If you’ve been managing databases with MySQL 7, you might be wondering whether upgrading to MySQL 8 is worth the effort. Spoiler alert: it absolutely is. 🎯 Quick... ### Text-to-Speech in JavaScript: A Complete Guide URL: https://orthogonal.info/how-to-implement-text-to-speech-in-javascript/ Date: 2022-10-18 07:45:31 Summary: Why Giving Your Web App a Voice Changes Everything 📌 TL;DR: Why Giving Your Web App a Voice Changes Everything Picture this: you’re developing a fitness app. It offers personalized workout plans, tracks user progress, and even calculates calories burned. But something’s missing—its ability to engage users in a truly... ### C# Performance: Using const and readonly Effectively URL: https://orthogonal.info/maximizing-performance-improve-performance-of-your-c-code-with-the-const-and-readonly-keywords/ Date: 2022-10-10 07:35:59 Summary: The Power of Immutability in C# 📌 TL;DR: The Power of Immutability in C# Imagine this scenario: you’re on call, and your application crashes during peak hours. After hours of debugging, you discover that a supposedly constant value has been modified deep in your codebase. A lack of proper immutability... ### C# Performance Deep Dive: Value Types vs Reference Types URL: https://orthogonal.info/maximizing-performance-use-value-types-instead-of-reference-types-in-c-for-performance-improvement/ Date: 2022-10-02 07:32:54 Summary: A C# application that was once fast can grind to a halt when value types and reference types are used interchangeably without understanding the memory implications. Excessive boxing, unnecessary heap allocations, and missed struct opportunities are the silent performance killers in managed code. What Are Value Types and Reference Types?... ### C# Fixed Keyword: Memory Stability & Performance URL: https://orthogonal.info/maximizing-performance-use-the-fixed-keyword-to-prevent-the-garbage-collector-from-moving-managed-objects-in-memory-to-improve-perf/ Date: 2022-09-26 09:41:10 Summary: Why Memory Control Can Make or Break Your Application 📌 TL;DR: Why Memory Control Can Make or Break Your Application Imagine this: you’re developing a high-performance system processing millions of data points in real-time. Everything seems fine during initial testing, but as load increases, you start noticing erratic latency spikes.... ### Stochastic Oscillator in JavaScript for Scalping URL: https://orthogonal.info/javascript-finance-stochastic-oscillator-for-scalping-buy-sell/ Date: 2022-09-18 09:02:30 Summary: Why the Stochastic Oscillator is a Major improvement for Scalpers 📌 TL;DR: Why the Stochastic Oscillator is a Major improvement for Scalpers Picture this: the stock you’re watching is moving rapidly, bouncing between highs and lows in a matter of minutes. 🎯 Quick Answer: Implement the stochastic oscillator in JavaScript... ### Bull Call & Bear Put Spreads: JavaScript Calculator URL: https://orthogonal.info/javascript-finance-calculates-the-payouts-of-a-bull-call-spread-and-a-bear-put-spread-option-trading-strategies/ Date: 2022-09-11 08:51:23 Summary: Options Trading Simplified: Building a JavaScript Calculator 📌 TL;DR: Options Trading Simplified: Building a JavaScript Calculator Picture this: you’re eyeing a volatile market, juggling the desire to seize potential opportunities with the need to manage risk. 🎯 Quick Answer: A bull call spread profits when the stock rises moderately: buy... ### Option Pricing in JS: Forward Implied Volatility URL: https://orthogonal.info/javascript-finance-calculate-the-theoretical-price-of-an-option-using-the-forward-implied-volatility/ Date: 2022-09-04 08:34:22 Summary: Why Option Pricing Demands Precision and Performance 📌 TL;DR: Why Option Pricing Demands Precision and Performance Picture this: You’re a developer at a fintech startup, and you’ve just launched a new trading platform. The interface looks sleek, and users are flocking to try it out. But almost immediately, the complaints... ### Iron Butterfly Options: Profit Probability in JS URL: https://orthogonal.info/javascript-finance-calculate-the-profit-probability-of-an-iron-butterfly-option-strategy/ Date: 2022-08-30 05:38:06 Summary: Why Traders Love the Iron Butterfly: A Market Stability Strategy 📌 TL;DR: Why Traders Love the Iron Butterfly: A Market Stability Strategy Picture this: You’re an experienced options trader who has been closely monitoring a stock that seems glued to a narrow trading range. Days turn into weeks, and you’re... ### Anker 747 GaNPrime Charger: Multi-Device Review URL: https://orthogonal.info/weeks-after-using-anker-747-charger-ganprime/ Date: 2022-08-23 05:09:19 Summary: Why the Anker 747 GaNPrime Charger is a Must-Have 📌 TL;DR: Why the Anker 747 GaNPrime Charger is a Must-Have Picture this: You’re at an airport, juggling a laptop, smartphone, tablet, and wireless earbuds, all battling for a single outlet before your flight. It doesn’t have to be. 🎯 Quick... ### Iron Condor Profit & Probability with JavaScript URL: https://orthogonal.info/javascript-finance-profit-probability-calculator-for-iron-condor/ Date: 2022-08-17 04:41:45 Summary: An iron condor’s theoretical profit zone and its real-world probability of success are two different numbers—and confusing them is how traders blow up on range-bound strategies. Building a JavaScript model to simulate both gives you a concrete edge over napkin math. I’ll walk you through developing a solid JavaScript tool... ### Linear Regression: A Beginner-Friendly Guide URL: https://orthogonal.info/what-is-a-linear-regression/ Date: 2022-08-09 23:48:42 Summary: Why Linear Regression Still Matters 📌 TL;DR: Why Linear Regression Still Matters Imagine you’re tasked with predicting housing prices for a booming real estate market. Or maybe you’re trying to forecast next quarter’s sales based on advertising spend. 🎯 Quick Answer: Linear regression fits a straight line (y = mx... ### C# Performance: 5 Strategies to Optimize Your Code URL: https://orthogonal.info/5-simple-checklists-to-improve-c-code-performance/ Date: 2022-08-03 23:35:53 Summary: Five common C# performance mistakes account for most of the slowdowns developers blame on the framework itself. From careless string concatenation in hot loops to lazy LINQ chains that materialize collections multiple times, the fixes are surgical once you know where to look. Today, I’ll share five battle-tested techniques to... ### Python Finance: Option In-the-Money Probability URL: https://orthogonal.info/python-finance-calculate-in-the-money-probability-for-an-option/ Date: 2022-07-26 23:27:22 Summary: Ever Wondered How Likely Your Option Will Finish in the Money? 📌 TL;DR: Ever Wondered How Likely Your Option Will Finish in the Money? Options trading can be exhilarating, but it also comes with its fair share of complexities. One of the most important metrics to understand is the probability...