The CVSS score was never meant to be your patch queue
Patch everything above 9.0 is the most common vulnerability rule there is, and FIRST — who publish CVSS — write that bas...
Guides & How-tos · Worked examples · Real numbers
Do it right, with real numbers
Step-by-step how-tos, head-to-head comparisons and honest roundups — every guide worked through with current figures, then backed by a RECATOOLS calculator or AI-directory entry so you can act on it.
510 guides published
17 topic areas
Latest guide Oct 2026
Statistics
35
Health & Wellness
33
Cybersecurity
30
Business
19
Privacy & Data
17
Consumer Tech
14
ASEAN Tech
13
Personality
9
Cloud & Infra
8
Cyber Threat Intel
7
Sustainability
5
Advertisement
Nobody has required a seven-pass disk wipe since 2006
Disk utilities still offer a seven-pass erase labelled "DoD 5220.22-M". The Department of Defense removed overwriting sp...
NIST forbids the password rules most companies still enforce
Character-mix requirements and ninety-day expiry are not NIST recommendations that have gone out of fashion. The current...
Advertisement
Sixteen different base64 strings decode to the same byte
Base64 leaves four bits free when it encodes a single byte, and RFC 4648 binds encoders with MUST while granting decoder...
WebAuthn tells your server to ignore the bit that proves two factors
One flag distinguishes a passkey login that used only the device from one that also took a PIN or fingerprint. The spec...
The DMARC tag that meant 10% of the time now means all the time
RFC 9989 removed the pct tag in May 2026, and the same document says receivers must ignore tags that are not registered....
The lookalike domain that is blocked on .com and shown on .ru
The famous all-Cyrillic apple.com impersonation was patched in 2017 and the matter filed as closed. Both major browsers...
How to Self-Host Gitea or Forgejo with Docker
The environment variable that closes public registration was renamed, so copying an older tutorial leaves your git host...
What an ID number's check digit actually proves
The last character of most identity numbers is computed from the ones before it, using a published formula anyone can ap...
How to Set Up Caddy as a Reverse Proxy with Docker
Caddy gets certificates without being asked, which is why it is the right first reverse proxy. The confusion starts with...
How to Self-Host Vaultwarden with Docker
The compose file is trivial. The admin token is not: it wants an Argon2 hash rather than a password, and the hash then b...
How to Stop ChatGPT, Claude, Gemini and Grok Training on Your Chats (2026)
Four switches with almost the same name, doing four different things. Three are on by default. One also sets your retent...
Advertisement