Blog
Practical writing about the formats developers wrestle with daily, from the people building the tools. No newsletter gate, no signup.
The developer error reference
156 real parser and validation errors, each with the exact fix. Compiled from every tool on the site.
Base64 is not encryption: what it actually does
Base64 is an encoding, not a cipher. What it's for, why it makes data 33% bigger, when to use it, and what to use instead when you actually need secrecy.
How we built a 100% client-side JSON formatter
Why Code Beautifier never uploads your JSON, how the browser-only architecture works, and what it costs to build a formatter this way.
Common JSON syntax errors and how to fix them
Trailing commas, single quotes, unescaped characters, BOMs, and NaN. The JSON parse errors developers actually hit, what causes them, and the exact fix for each.
JWT security mistakes that show up in every pentest
The alg:none bypass, HS256/RS256 confusion, unverified signatures, secrets in payloads, and missing expiry checks. What actually goes wrong with JWTs and how to avoid it.
Subscribe via RSS.