I Stopped Pasting JWTs Into Online Base64 Decoders — Here’s the Browser-Only Fix
Online base64 decoders run server-side, so pasting a live JWT leaks the token. Base64Lab decodes JWTs and files in your browser. Here's how it works.
Article archive
More articles
Browse older engineering guides and field notes, page 6.
Continue browsing
Articles
The SpaceX 424B Prospectus Is Free on SEC EDGAR — Here’s What It Says and How to Pull It
SpaceX's 424B4 final prospectus (filed June 12, 2026) priced the IPO at $135/share. The real terms off the cover page, plus Python to pull it from SEC EDGAR.
HouseStockWatcher Is Dead — Here’s How to Pull the Latest House Trades Yourself
The old HouseStockWatcher S3 bucket now 403s. Here's how to pull the latest US House stock trades from the Clerk's office in ~40 lines of Python.
Why the Web Crypto API Won’t Compute MD5 (and How HashForge Does It in Your Browser)
Why the Web Crypto API refuses MD5 and how HashForge generates MD5, SHA-256 and more in-browser without uploading a single byte.
How a Secure Password Generator Actually Works (and Why Math.random() Fails)
Why Math.random() passwords are crackable, how crypto.getRandomValues fixes it, and the modulo-bias and 64KB gotchas that bite DIY fixes.
Reverse-Engineering SEC EDGAR’s Full-Text Search API (efts.sec.gov)
The SEC EDGAR full-text search runs on an undocumented efts.sec.gov JSON endpoint with no API key. Here is how to query it from Python, paginate results, and avoid…