Blog — page 2
Articles 25–48 of 105.
Web Development4 min readJPEG XL Sits at 15%. AVIF Is at 95%. That Is the Whole Decision
Deployment settles the format argument, not compression. The real support numbers, and the four lines that serve all of them.
The TweakPad Team
AI & Prompt Engineering9 min readHybrid Search: Why Vector Retrieval Alone Keeps Missing Your Documents
Hybrid search fixes what embeddings cannot do: exact IDs, rare terms, negation. How Reciprocal Rank Fusion merges the two ranked lists.
The TweakPad Team
AI & Prompt Engineering9 min readVector Search Is Approximate. Add a Filter and It Gets Worse
Vector search returns approximate neighbours, not nearest ones. Why a WHERE clause quietly drops most of your results, and how to fix it.
The TweakPad Team
- Web Development7 min read
HTML Escaping Is Not XSS Protection. Context Is.
Five entities are enough in an HTML body and useless inside a script tag or an href. What each context actually needs.
The TweakPad Team
- JavaScript6 min read
Math.random Is Predictable. Where That Actually Matters
V8 runs xorshift128+ with 128 bits of state an attacker can recover from a few outputs. When to reach for crypto instead.
The TweakPad Team
- JavaScript6 min read
Why Every Tool Gives You a Different Character Count
One family emoji is 11 units, 7 code points, 1 grapheme and 25 bytes. Which number your limit means decides the bug.
The TweakPad Team
- Web Development4 min read
CSS Style Queries: Reacting to a Custom Property, Not a Size
Style queries let a component react to a custom property set by an ancestor. What ships today, and when to reach for one.
The TweakPad Team
- Web Development5 min read
INP: What the 200ms Threshold Measures and How to Miss It
INP measures the worst interaction on a page, not the average. Why 200ms is the bar, and the three phases that consume it.
The TweakPad Team
- JavaScript4 min read
Microtask vs Macrotask: The Two Queues That Decide JavaScript Order
Why a promise resolves before setTimeout(0), how the microtask queue drains between tasks, and the loop that freezes a page.
The TweakPad Team
- Backend & Databases5 min read
MongoDB Index Types: Which One Your Query Actually Needs
Single field, compound, multikey, text, wildcard, hashed, geospatial and TTL — what each is for, and the limits.
The TweakPad Team
- Web Development4 min read
Measuring Core Web Vitals in the Field with the web-vitals Library
Lighthouse cannot measure INP. How to collect LCP, INP and CLS from real users, and why attribution is what matters.
The TweakPad Team
- AI & Prompt Engineering5 min read
Why LLMs Have Context Windows at All
A context window is not a storage limit. It comes from attention costing quadratic compute and position encodings.
The TweakPad Team
- Backend & Databases9 min read
Why DAX Says Circular Dependency When Nothing Is Circular
CALCULATE inside a calculated column makes it depend on every column in the table. That is why two harmless columns collide.
The TweakPad Team
- Backend & Databases11 min read
Decoding a JWT Is Not Verifying It
A JWT decoder reads the payload without the key, because the payload is only Base64. What proves a token is real, and what does not.
The TweakPad Team
- Web Development11 min read
llms.txt vs robots.txt: Only One of Them Blocks AI Crawlers
llms.txt shows no measurable effect on AI citations, and Content-Signal is ignored by every crawler. Only robots.txt is honoured.
The TweakPad Team
- Web Development6 min read
Does Minifying Still Matter With Brotli? 6% for CSS, 36% for JS
Minifying CSS saves 6% after Brotli. Minifying JS saves 36%. The difference is one step compression cannot do: mangling.
The TweakPad Team
- JavaScript6 min read
encodeURI vs encodeURIComponent: Which One and Why It Matters
encodeURI leaves & and = alone, so it corrupts query values. Which to use per URL part, and why + is not always a space.
The TweakPad Team
- Web Development7 min read
Which Structured Data Still Earns a Rich Result in 2026
Google dropped FAQ rich results in May 2026 and HowTo before it. What is left in the gallery, and what to stop maintaining.
The TweakPad Team
- Backend & Databases4 min read
How to Create an Index in MongoDB (Without Locking Your Collection)
createIndex syntax, unique and partial and TTL options, building on a live replica set, and how to confirm the index is actually being used.
The TweakPad Team
- Data Formats4 min read
What Changed in JSON Schema Draft 2020-12 (And What Silently Breaks)
items became prefixItems, $ref stopped replacing siblings, and unevaluatedProperties arrived. What silently changed.
The TweakPad Team
- Backend & Databases4 min read
The ESR Rule: Getting Compound Index Field Order Right in MongoDB
Equality, Sort, Range — why index field order decides whether MongoDB sorts in memory, and how to prove it with explain.
The TweakPad Team
- Developer Tools4 min read
The Cron Bug That Runs Your Job Far More Often Than You Meant
Set both day-of-month and day-of-week and cron ORs them, not ANDs. Why "first Monday" schedules misfire, and the fix.
The TweakPad Team
- Backend & Databases5 min read
UUIDv4 vs UUIDv7 as a Primary Key: What Actually Changes
Random UUID keys fragment your index. UUIDv7 fixes the ordering and keeps client-side generation. When the switch is worth making.
The TweakPad Team
- Backend & Databases5 min read
Why SHA-256 Is the Wrong Way to Hash a Password
SHA-256 is fast, and speed is the attacker advantage. What to use instead, the OWASP parameters, and the bcrypt limit that truncates.
The TweakPad Team