Why "Random" Is Almost Never Random — and What a Fairness Test Cannot See
We fed the same rejection-sampling helper a cryptographic source and a 1960s textbook generator, 600,000 draws each. The...
Guides & How-tos · Worked examples · Real numbers
Do it right, with real numbers
Step-by-step how-tos, head-to-head comparisons and honest roundups — every guide worked through with current figures, then backed by a RECATOOLS calculator or AI-directory entry so you can act on it.
510 guides published
17 topic areas
Latest guide Oct 2026
Statistics
35
Health & Wellness
33
Cybersecurity
30
Business
19
Privacy & Data
17
Consumer Tech
14
ASEAN Tech
13
Personality
9
Cloud & Infra
8
Cyber Threat Intel
7
Sustainability
5
Advertisement
Account Security You Can Finish in an Afternoon
Four jobs, ordered by how much loss each one prevents, with the arguments settled by the standard rather than by folklor...
Where Does My Data Actually Go?
"Do you use my data?" is two questions wearing one coat. Training asks whether your text enters a future model and is us...
Cybersecurity for a Small ASEAN Business
Until this week our own password checker rated Summer2026 as Fair. It is not fair — it is one of the first few hundred g...
Decoding a JWT Is Not Verifying It
A decoder shows you the claims; it does not tell you whether to believe them. RFC 7519 §7.2 lists ten validation steps a...
Encoding Is Not Encryption: Base64, Percent-Encoding and the Confusion That Leaks Data
The RFC that defines Base64 says in its own Security Considerations that base encoding "visually hides" a password but "...
Which Hash for What: MD5, SHA-256, and the Password Mistake
"MD5 is broken, so hash your passwords with SHA-256 instead" gets both halves wrong, in opposite directions. What broke...
Who Sees Your DNS? DoH, DoT and What Encrypted DNS Actually Hides (2026)
DoT, DoH and DoQ encrypt your DNS queries, but destination IPs, the TLS SNI and your resolver still see plenty. What the...
That 30-Second Code: How Authenticator Apps Actually Work (2026)
The six digits in your authenticator app come from two short public standards. We walk the algorithm step by step and un...
Passkeys Explained: What Actually Replaces Your Passwords (2026)
What a passkey is per the WebAuthn spec, NIST's synced vs device-bound line, recovery on Apple, Google and Windows, and...
How to Build a Password System That Actually Holds (2026)
NIST's 2025 rewrite raised the password floor to 15 characters and killed forced rotation. Rebuild your logins with a pa...
How to Check if an AI Tool Is Safe for Company Data (2026)
Consumer AI tiers train on your data; business tiers don't. A 10-minute vetting workflow for SMEs, with ASEAN PDPA ancho...
Advertisement