The Frankfurter API: Pull ECB Exchange Rates as JSON (No Key, No Rate Limits)
Pull ECB exchange rates as JSON with the Frankfurter API: latest, historical, and full time series. No key, no rate limits. Python examples and the gotchas.
Article archive
More articles
Browse older engineering guides and field notes, page 5.
Continue browsing
Articles
Verifying Webhook Signatures by Hand: HMAC-SHA256 in the Browser with HashForge
A fake webhook can trigger real damage. Here's how HMAC-SHA256 signatures work, why your verification keeps failing, and how to check one by hand in HashForge.
Your Password Generator Is Only as Good as crypto.getRandomValues
How PassForge uses crypto.getRandomValues and entropy math to build passwords that actually resist offline guessing attacks.
The FDIC BankFind API: Pull Any U.S. Bank’s Financials and Failure History as JSON (No Key)
The FDIC BankFind Suite API gives you every insured bank’s call reports, deposits, and failure history as free keyless JSON. Here’s how to query it.
Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite
Most JWT bugs aren't cryptographic — you catch them by reading the token. Here's how I decode JWTs offline to spot alg:none, HS256/RS256 confusion, and leaked PII.
Your Photos Are Broadcasting Your Home Address — Strip EXIF GPS in the Browser
Phone photos carry your exact GPS coordinates inside the file. Here's what's in that EXIF block, which apps leak it, and how to strip it browser-side.