On March 17, 2026, the open-source security ecosystem experienced what I consider the most sophisticated supply chain attack since SolarWinds. A threat actor operating under the handle TeamPCP executed a coordinated, multi-vector campaign targeting the very tools that millions of developers rely on to secure their software — Trivy, KICS,… Read more →
Security, DevOps & Trading Tech — Practical Guides
-

Parse JPEG EXIF Data in Browser With Zero Dependencies
Parsing JPEG EXIF data in the browser without dependencies means reading a binary format—TIFF-structured IFDs, big-endian and little-endian byte orders, and tag types that reference offset chains. Most tutorials hand-wave this complexity, but if you want zero-dependency EXIF extraction, you need to understand the byte layout. Why Parse EXIF Data in… Read more →
-

I Benchmarked 5 Image Compressors With the Same 10 Photos
I ran the same 10 images through five different online compressors and measured everything: output file size, visual quality loss, compression speed, and what happened to my data. Two of the five uploaded my photos to servers in jurisdictions I couldn’t identify. One silently downscaled my images. And the one… Read more →
-

Pomodoro Technique Works Better With Gamified Timers
The Pomodoro Technique — work for 25 minutes, break for 5 — has been around since 1987. The science backs it up: time-boxing reduces procrastination and improves focus. But here’s the problem: most people try it for three days and quit. Not because the technique fails, but because a plain… Read more →
-

5 Free Browser Tools That Replace Desktop Apps
I built 3 of these tools because I got tired of desktop apps phoning home. After 12 years as a security engineer in Big Tech, I’ve watched network traffic from “offline” desktop apps — the telemetry, the analytics pings, the “anonymous” usage data that includes your file paths and timestamps…. Read more →
-

How to Remove GPS Location from Photos Before Sharing Online
Every time you take a photo with your phone, the exact GPS coordinates are embedded in the image file. When you share that photo online — on forums, marketplaces, or messaging apps — anyone who downloads it can see exactly where you were standing. Here’s how to remove it in… Read more →
-

Compress Images Without Losing Quality (Free Tool)
You need to send a photo by email but it’s 8MB. You need to upload a product image but the CMS has a 2MB limit. You need to speed up your website but your hero image is 4MB. The solution is always the same: compress the image. But most tools… Read more →
-

NoiseLog: A Sound Meter App for Noisy Neighbors
When I complained about noise to my building manager, they asked for evidence. “It’s loud” wasn’t enough. They wanted dates, times, and decibel readings. So I built an app that gives you all three — and generates a report you can actually hand to someone. The Noise Complaint Trap 📌 TL;DR: When… Read more →
-

FocusForge: How Gamification Tricked Me Into Deep Focus
I’ve downloaded at least ten Pomodoro timer apps over the years. I used each one for about three days before forgetting it existed. Then I built FocusForge, added XP and levels, and accidentally created a focus habit I can’t stop. The Pomodoro Problem 📌 TL;DR: I’ve downloaded at least ten Pomodoro timer… Read more →
-

TypeFast: Snippet Manager Without Electron Bloat
I needed a place to store code snippets, email templates, and frequently pasted text blocks. Everything I found was either a full IDE extension, a note-taking app in disguise, or yet another Electron app eating 200MB of RAM. So I built TypeFast — a snippet manager that runs in a… Read more →
