Base64 Is Not Encryption: How I Debug Base64 Data Without Uploading It Anywhere
I was reviewing a pull request last week when I spotted it: a developer had base64-encoded a JWT payload to "hide" the user ID before logging it. The…
Article archive
More articles
Browse older engineering guides and field notes, page 3.
Continue browsing
Articles
Parsing Trading Data with Regex: How I Use RegexLab to Debug Financial Patterns Fast
Last quarter I was normalizing a feed of options trade confirmations from a brokerage API. The format looked clean at first — 2026-07-14 09:31:02 | AAPL | C…
What SHA-256 Checksums Prove — Verify Files with HashForge
Use HashForge to verify downloads locally, then learn why checksums prove integrity—not authenticity—and when signatures are required.
How JSON Forge Turns “position 4127” Into a Real Error, In Your Browser
How a browser-only JSON formatter gives exact error line/column, handles 10MB files, and computes JSONPath on click — with the actual code, and why it never uploads your…
The Frankfurter API: Pull ECB Exchange Rates as JSON (No Key, No Rate Limits)
Pull ECB exchange rates as JSON with the Frankfurter API: latest, historical, and full time series. No key, no rate limits. Python examples and the gotchas.
Verifying Webhook Signatures by Hand: HMAC-SHA256 in the Browser with HashForge
A fake webhook can trigger real damage. Here's how HMAC-SHA256 signatures work, why your verification keeps failing, and how to check one by hand in HashForge.