Skip to content
Orthogonal Thinking
Home
Start Here
Security
DevOps
Homelab
Trading
Tools
All Articles
About
Store
Search
vibe-coding-security
Written by
Max L
in
←
vibe-coding-security
More posts
Verifying Webhook Signatures by Hand: HMAC-SHA256 in the Browser with HashForge
July 20, 2026
Your Password Generator Is Only as Good as crypto.getRandomValues
July 17, 2026
The FDIC BankFind API: Pull Any U.S. Bank’s Financials and Failure History as JSON (No Key)
July 15, 2026
Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite
July 13, 2026
Also by us:
StartCaaS
— AI Company OS ·
Hype2You
— AI Tech Trends
Explore Topics
Tools & Setup (59)
Security (38)
Uncategorized (33)
Finance & Trading (29)
Homelab (22)
DevOps (22)
Deep Dives (18)
C# & .NET (6)
JavaScript (5)
Quick Wins (5)
Latest Articles
Verifying Webhook Signatures by Hand: HMAC-SHA256 in the Browser with HashForge
Your Password Generator Is Only as Good as crypto.getRandomValues
The FDIC BankFind API: Pull Any U.S. Bank’s Financials and Failure History as JSON (No Key)
Reading a JWT Offline: How to Spot alg:none and Algorithm Confusion Before They Bite
Your Photos Are Broadcasting Your Home Address — Strip EXIF GPS in the Browser
The Treasury FiscalData API: Pull the U.S. National Debt as JSON (No Key)
Check If a Password Was Breached Without Sending It (HIBP k-Anonymity)
How One Regex Took Down Cloudflare: Catastrophic Backtracking, Tested in Your Browser
The SEC EDGAR XBRL API: Pull Any Company's Financials as JSON (No Key)
I Stopped Pasting JWTs Into Online Base64 Decoders — Here's the Browser-Only Fix
