Long-form, example-driven posts on the tools you actually use. Updated regularly.
I've seen my share of security vulnerabilities in web applications, but one that still manages to slip through the cracks is cross-site scripting, or XSS. It happens when an attack
When working with web applications, I often encounter situations where I need to transfer binary data, such as images, over text-based protocols like HTTP. One common approach to s
I still remember the first time I had to implement a password generator for a web application. The requirements were simple: generate a random password of a given length. However,
I've encountered numerous situations where converting Unix timestamps to dates has been a necessity, especially when working with APIs or parsing log files. A Unix timestamp is a w
I've seen my share of XSS vulnerabilities in web applications, often caused by a lack of proper HTML escaping. One particular example that comes to mind is when a developer forgot
As a backend engineer, I've found myself writing the same regex patterns over and over again for tasks like validating email addresses, parsing URLs, and extracting slugs from stri
When working on a recent project, I encountered a situation where our API responses were taking longer than expected to load. After some investigation, I found that the JSON payloa
I've worked on numerous web applications where user input is displayed back to the user, and one of the most critical security considerations is preventing cross-site scripting (XS
I've lost count of how many times I've seen developers manually crafting SQL IN clauses from lists of values. It's a tedious process that's prone to errors, especially when dealing
When working with JSON Web Tokens, or JWTs, I often encounter developers who are unsure about how to properly decode and verify them. A JWT is essentially a compact, URL-safe means
When working with JSON data, I often find myself dealing with large, unreadable blobs of text that are difficult to understand and debug. This is particularly true when trying to i
When working with JSON data, I often find myself dealing with long, unreadable strings that are difficult to parse. For instance, consider a JSON object like {"name":"John","age":3
When working with web applications, I often encounter situations where I need to transmit binary data, such as images, over text-based protocols like HTTP. One common approach to s
When I'm debugging a complex issue, I often find myself dealing with large log files or configuration files with hundreds of lines. One common problem I encounter is trying to make
I've worked on numerous projects that involved querying databases, and one common task that often comes up is using SQL IN clauses to filter data based on a list of values. For ins
I've worked on numerous projects that involve authentication and authorization, and one common theme among them is the use of JSON Web Tokens (JWTs). A JWT is a compact, URL-safe m
When working on a recent project, I encountered a situation where our API responses were taking longer than expected to load. After some investigation, I realized that the size of
When working with JSON data, I often find myself struggling to read and understand the structure of the data due to its compact and nested nature. For instance, when reviewing a pu
I've lost count of how many times I've seen developers manually crafting SQL IN clauses from lists of values. It's a tedious process, prone to errors, and can lead to performance i
When working with databases, I often find myself dealing with SQL IN clauses, where I need to filter data based on a list of values. For instance, I might have a list of user IDs a
When working with JSON data, I often find myself dealing with large, unformatted blobs of text that are difficult to read and understand. This can make it challenging to identify e
When working on a recent project, I encountered an issue where the payload size of our API responses was affecting the overall performance of the application. After digging into th
As a backend engineer, I've found myself writing the same regex patterns over and over again for tasks like validating email addresses, parsing UUIDs, and extracting URLs from text
I've worked on several projects that required users to create passwords, and I've seen firsthand how difficult it can be to generate strong, unique passwords. One particular projec
I've worked on several projects that required users to create accounts, and one common issue that comes up is password generation. Users often struggle to come up with strong, uniq
I've lost count of the number of weekends I've spent wrestling with JSON to CSV conversions. It usually starts with a simple task: take a JSON file from an API and import it into a
I've worked on numerous projects that involved querying databases, and one common task that often comes up is using SQL IN clauses to filter data based on a list of values. For exa
When working with large log files, I often find myself dealing with a massive amount of data that needs to be sifted through to identify issues. One common problem is trying to mak
When working with web applications, I often encounter situations where I need to transmit binary data, such as images, over text-based protocols like HTTP. One common approach to s
When working on a recent project, I encountered a situation where a large JSON payload was being sent over the network, and the team was discussing ways to reduce its size. One of
When working on a project that involves validating user input, I often find myself writing regex patterns to match specific formats such as email addresses, UUIDs, and URLs. While
When working with JSON Web Tokens, or JWTs, I often find myself needing to decode them to understand their contents. A JWT is essentially a string consisting of three parts: a head
When working on a recent project, I encountered a situation where our API responses were taking longer than expected to load. After some investigation, it became clear that the siz
I've lost count of how many times I've seen developers manually crafting SQL IN clauses from lists of values. It's a tedious task that's prone to errors, especially when dealing wi
I've lost count of the number of times I've seen URL encoding issues cause problems in production code. Just the other day, I was debugging an API integration that was failing beca
I've spent countless weekends debugging issues that arose from converting JSON to CSV. One particular incident that comes to mind is when I was working on a project that involved p
When working with web applications, I often encounter situations where I need to transmit binary data over a medium that only supports text, such as in email attachments or when st
When working with large logs or configuration files, I often find myself dealing with a common problem: a jumbled mess of lines that need to be sorted and deduplicated. This can be
When working with APIs, I've encountered my fair share of issues related to URL encoding. One particular problem that comes to mind is when a URL parameter contains special charact
When working with web applications, I often come across scenarios where I need to encode binary data, such as images, into a text format that can be easily transmitted over the web
I've lost count of the number of times I've seen URL encoding issues cause problems in APIs. A recent example that comes to mind is when a colleague was trying to send a GET reques
I've spent many a weekend debugging issues that arose from converting JSON to CSV. One particular case that comes to mind is when I was working on a project that involved importing
I've worked on numerous projects where dates and timestamps were crucial, and one common issue that arises is converting Unix timestamps to human-readable dates. Recently, I encoun
I've seen many projects where password generation was an afterthought, only to become a major security issue later on. A recent example that comes to mind is a web application that
When working with low-level system programming or embedded systems, I often encounter hexadecimal dumps of memory or binary data. For instance, while debugging a network protocol i
When working with JSON data, I often find myself dealing with large, unreadable blobs of text that make it difficult to understand the structure and content of the data. For instan
When working with authentication systems, I often encounter JSON Web Tokens (JWTs) that need to be decoded and verified. A JWT is a compact, URL-safe means of representing claims t
I've seen many cases where a simple API request fails due to incorrect URL encoding. For instance, when sending a GET request with a query parameter that contains special character
When working on a project, I often find myself needing to validate user input, such as email addresses or phone numbers. One way to do this is by using regex patterns. For example,
When working with web applications, I often encounter situations where I need to transfer binary data, such as images, over a text-based protocol like HTTP. One common approach to
When working on a project that involves validating user input, I often find myself writing regex patterns to match specific formats such as email addresses, UUIDs, and URLs. For in
When working with low-level system programming or embedded systems, I often encounter hexadecimal dumps of memory or binary data. For instance, while debugging a network protocol i
I've worked on numerous web applications, and one common issue that I've encountered is the risk of cross-site scripting (XSS) attacks. XSS occurs when an attacker injects maliciou
When working with large log files or configuration files, I often find myself dealing with a mess of unsorted and duplicate lines. This can make it difficult to triage issues or un
When working with low-level system programming or embedded systems, I often encounter hexadecimal dumps that need to be deciphered. A common task is to convert these hex strings in
When working on a recent project, I encountered a situation where I had to transmit a large amount of JSON data over the network. The payload size was significant, and I was concer
I've seen my share of API integration issues, but one that still manages to trip up many developers is URL encoding. It's a subtle problem that can cause a lot of headaches, especi
When working on a recent project, I encountered a bug that took hours to track down, all because of a mismatch in naming conventions. The API I was using expected parameters in sna
When working with JSON Web Tokens, or JWTs, I often find myself needing to decode them to understand their contents. A JWT is essentially a compact, URL-safe means of representing
I've encountered numerous instances where a poorly designed password generator has led to security breaches. A recent example that comes to mind is a web application that used a si
I recently worked on a project where we were receiving Unix timestamps from an API and needed to convert them to a human-readable format. The problem was that the timestamps were i
I've lost count of how many times I've written a regex pattern to validate an email address. It's one of those tasks that seems simple at first, but can quickly become complex. For
When working on a web application, I often need to transfer binary data, such as images, over text-based protocols like HTTP. One common approach to achieve this is by using a Base
When working with unique identifiers in applications, developers often reach for UUIDs. I've encountered situations where the choice between UUID v4 and UUID v7 was not clear-cut.
I've lost count of how many times I've seen developers manually construct SQL IN clauses from lists of values. It's a common task, but doing it by hand is error-prone and can lead
I've lost count of the number of weekends I've spent wrestling with JSON to CSV conversions. It usually starts with a simple task, like extracting data from a JSON file for analysi
When working with JSON data, I often find myself dealing with large, unformatted blobs of text that are difficult to read and understand. This can make it hard to identify errors,
Base64 is everywhere — data URIs, JWTs, email attachments, API signatures — but half the bugs around it come from people treating it like encryption. Here's the real picture.
A working developer's guide to formatting JSON — when to indent with 2 or 4 spaces, when to minify, how to validate as you format, and the gotchas that break diffs and APIs.
A JWT looks random, but anyone can decode it. A practical breakdown of what JWTs protect, what they don't, and the mistakes that lead to breaches.
Seconds vs. milliseconds, UTC vs. local, leap seconds, the 2038 problem — a practical field guide for developers who deal with timestamps every day.