The Blog
Securing MCP Servers: A Checklist
Tool poisoning, prompt injection, excessive permissions — the real security risks of Model Context Protocol and how to audit them.
Read articleMore articles
Your EXIF Metadata Is Leaking Your Location
Every photo you take embeds GPS coordinates, camera model, and timestamps. Strip EXIF before sharing.
How LLM Tokenizers Actually Work
BPE, o200k_base, cl100k_base — what actually happens when text becomes tokens, and why 1 token is not 1 word.
Base64: Encode Anything, Decode Everything
What Base64 actually does, the URL-safe variant, data URIs for images, and decoding JWTs — all client-side.
Decoding JWTs Safely in the Browser
Why client-side JWT inspection never leaks secrets, and how to read claims without a network round-trip.
UUID v4 vs v7: When to Upgrade
UUID v7 brings time-ordering, database-friendly indexing, and privacy. Here is when to switch from v4.
Cron Expressions, Demystified
A field-by-field breakdown of cron syntax with the edge cases that bite people in production.
SSH Key Types Compared: RSA vs Ed25519 vs ECDSA
Which SSH key algorithm should you generate in 2026? Performance, security, and compatibility compared.
HTTP Security Headers Explained
HSTS, CSP, X-Frame-Options, Referrer-Policy — what each header does, how to set it, and the grade it earns you.
YAML vs JSON: When to Use Each
Both serialize data as key-value pairs, but they serve different purposes. A practical comparison with gotchas.