Blog
Engineering
The Architecture of Time-Based One-Time Passwords: Inside RFC 6238 and HMAC Generation
A comprehensive mathematical and protocol analysis of RFC 6238 Time-Based One-Time Passwords (TOTP), exploring dynamic truncation, HMAC-SHA1 step counters, clock drift mitigation, and secure in-browser execution.
Anatomy of a QR Code: Reed-Solomon Error Correction and Matrix Encoding
A deep mathematical exploration of ISO/IEC 18004 QR codes, detailing Galois Field GF(2^8) arithmetic, generator polynomials, Reed-Solomon error correction, and in-browser matrix rendering.
Cryptographic Randomness in the Browser: Math.random vs crypto.getRandomValues
A deep architectural investigation into pseudo-random number generators (PRNG) versus cryptographically secure PRNGs (CSPRNG) in browser runtimes, detailing xorshift128+, state reconstruction attacks, and the Web Cryptography API.
Base32 vs Base64: Structural Differences, Padding Rules, and Cryptographic Usage
A deep technical specification of RFC 4648 binary-to-text encodings, contrasting Base32 and Base64 bitwise packing mechanics, padding matrices, alphabet ergonomics, and in-browser execution.
Passkeys vs TOTP: The Cryptographic Shift from Shared Secrets to Public Key Signatures
An architectural and security analysis comparing RFC 6238 Time-Based One-Time Passwords with FIDO2/WebAuthn Passkeys, exploring Adversary-in-the-Middle phishing resistance and origin binding.
Compiling TeX Engines to WebAssembly: Executing LaTeX in Modern Web Browsers
An architectural exploration of cross-compiling Knuth's monolithic TeX typesetting engine to WebAssembly, virtualizing POSIX file systems in-memory, and achieving client-side document compilation.
Demystifying the Jupyter Notebook Format: JSON Schema and Cell Output Parsing
A rigorous deep dive into the nbformat JSON schema, polymorphic cell architectures, MIME bundle hierarchies, XSS sanitization vectors, and client-side conversion pipelines.
In-Browser PDF Generation: Canvas Rendering, Vector Graphics, and WASM Compilers
An architectural analysis of generating Portable Document Format files in web runtimes: comparing DOM rasterization against vector-native operators, TrueType font subsetting, and WebAssembly engines.
Optical Character Recognition in Modern Browsers: WebAssembly Layout Analysis and Character ASTs
A deep technical investigation into in-browser computer vision: image binarization math, WebAssembly neural inference, physical layout segmentation, and hierarchical document AST reconstruction.
The Math Behind Floating-Point Inaccuracies: IEEE 754 Binary Arithmetic in Web Engines
A deep mathematical dissection of IEEE 754 double-precision floating-point arithmetic in JavaScript: binary conversions, subnormals, rounding modes, and arbitrary-precision rational engines.
Local-First Web Architecture: Designing High-Utility Applications Without Server Dependencies
Architectural strategy guide on building resilient, privacy-preserving web utilities that operate autonomously on user hardware, exploring reactive synchronization, offline capabilities, and zero-server attack surfaces.
The Hidden Security Risks of Remote File Converters: What Happens to Uploaded Data?
Investigative technical risk analysis uncovering data retention practices, multi-tenant container leaks, and compliance violations inherent in third-party cloud file conversion services.
Web Worker Thread Isolation: Sandboxing Memory and Preventing Main-Thread Freezes
Advanced architectural guide explaining how dedicated Web Workers isolate compute-heavy operations, manage memory boundaries, and utilize zero-copy data transfer mechanisms.
Secure Browser Storage: Comparing LocalStorage, SessionStorage, and Encrypted IndexedDB
Technical security evaluation of browser storage mechanisms, detailing XSS exposure vulnerabilities, origin boundaries, cryptographic shredding, and ephemeral session hygiene.
Browser Clipboard Security: Preventing Snooping, Injection, and Memory Scraping
Practical and architectural guide on the security boundaries of the Async Clipboard API, investigating clipboard hijacking attacks, permission models, and methods for safeguarding sensitive copied data.
Mouse Polling Rates and Sensor Jitter: The Physics of High-Performance Pointer Diagnostics
An architectural guide exploring USB HID report protocols, optical sensor flow mechanics, microsecond browser event dispatch, and empirical jitter calculation.
Audio Latency in Modern Web Browsers: Measuring Round-Trip Delay with Web Audio API
A deep technical analysis of browser audio latency, examining hardware audio pipelines, AudioWorklet deterministic processing, and cross-correlation impulse response measurement.
Color Contrast Science: WCAG 2.1 Contrast Ratios vs APCA Perceptual Algorithms
A deep mathematical comparison of WCAG 2.1 relative luminance and the Advanced Perceptual Contrast Algorithm (APCA), analyzing human visual perception and dark mode contrast.
The Science of Typing Ergonomics: How WPM, Burst Velocity, and Error Cascades Interact
A comprehensive analysis of keystroke mechanics, exploring gross versus net WPM calculations, neuromuscular motor chunking, behavioral biometrics, and input latency.
Palette Extraction Mathematics: Median Cut vs Octree vs K-Means Color Quantization
A rigorous mathematical comparison of color quantization techniques, examining 3D RGB color cubes, Median Cut spatial bounding, Octree reduction, and K-Means clustering.