Tutorials, tips, and insights for modern developers
A practical guide to URL encoding for working developers — what it is, when you need it, the encoding gotchas that cause real bugs, and a worked example....
A practical guide to bcrypt password hashing — why you use it, how the cost factor works, the gotchas that bite people, and a short worked example....
URL encoding trips up developers constantly — from broken query params to double-encoded nightmares. Here's what percent-encoding really does, when to use it, and the gotchas that cause real bugs....
Bcrypt has been the sensible default for password hashing for years. Here's what it does, when to use it, the gotchas that bite people, and a short worked example....
MD5 is fast, everywhere, and completely broken for anything security-related. Here's a working developer's guide to when it still earns its keep and the mistakes that get people in trouble....
URL encoding looks trivial until a plus sign silently becomes a space or an ampersand splits your query string in half. Here's what percent-encoding really does and how to avoid the classic mistakes....
Base64 isn't encryption, isn't compression, and won't shrink your payloads. Here's what it actually does, when to reach for it, and the gotchas that trip people up in real code....
Thirteen months of real usage data from our own database: which tools developers actually reach for, how the categories compare, where the traffic really comes from, and how the five newest tools are doing....
A practical guide to hashing passwords with bcrypt — how it works, the cost factor, common mistakes, and a worked example you can drop into your next project....
MD5 still shows up everywhere in real codebases. Here's a practical look at what MD5 actually does, when it's fine to use, the security traps to avoid, and a quick worked example....
Bcrypt has been the sensible default for password storage for two decades. Here's what it actually does, when to use it, the gotchas that bite people, and a short worked example....
bcrypt has been the sensible default for password hashing for two decades. Here's how it works, when to use it, and the gotchas that trip people up....
