Blog — page 2
Articles 25–48 of 104.
AI & Prompt Engineering9 min readVector Search Is Approximate. Add a Filter and It Gets Worse
Vector search returns approximate neighbours, not nearest ones. Why a WHERE clause quietly drops most of your results, and how to fix it.
The TweakPad Team
Web Development4 min readView Transitions Went Cross-Browser. Here Is What That Costs You
Firefox 144 completed the set at 90% support. How the snapshot model works, why one CSS rule animates a whole page, and the traps.
The TweakPad Team
AI & Prompt Engineering4 min readEvery WebMCP Tutorial Shows the Wrong Object. The Spec Says document
WebMCP lets a page expose tools to browser agents. It is a Draft Community Group Report, not a standard, and the API already moved.
The TweakPad Team
- Web Development7 min read
HTML Escaping Is Not XSS Protection. Context Is.
Five entities are enough in an HTML body and useless inside a script tag or an href. What each context actually needs.
The TweakPad Team
- JavaScript6 min read
Math.random Is Predictable. Where That Actually Matters
V8 runs xorshift128+ with 128 bits of state an attacker can recover from a few outputs. When to reach for crypto instead.
The TweakPad Team
- JavaScript6 min read
Why Every Tool Gives You a Different Character Count
One family emoji is 11 units, 7 code points, 1 grapheme and 25 bytes. Which number your limit means decides the bug.
The TweakPad Team
- Web Development4 min read
CSS Style Queries: Reacting to a Custom Property, Not a Size
Style queries let a component react to a custom property set by an ancestor. What ships today, and when to reach for one.
The TweakPad Team
- Backend & Databases9 min read
Why DAX Says Circular Dependency When Nothing Is Circular
CALCULATE inside a calculated column makes it depend on every column in the table. That is why two harmless columns collide.
The TweakPad Team
- Backend & Databases11 min read
Decoding a JWT Is Not Verifying It
A JWT decoder reads the payload without the key, because the payload is only Base64. What proves a token is real, and what does not.
The TweakPad Team
- Web Development6 min read
Does Minifying Still Matter With Brotli? 6% for CSS, 36% for JS
Minifying CSS saves 6% after Brotli. Minifying JS saves 36%. The difference is one step compression cannot do: mangling.
The TweakPad Team
- JavaScript6 min read
encodeURI vs encodeURIComponent: Which One and Why It Matters
encodeURI leaves & and = alone, so it corrupts query values. Which to use per URL part, and why + is not always a space.
The TweakPad Team
- Web Development5 min read
INP: What the 200ms Threshold Measures and How to Miss It
INP measures the worst interaction on a page, not the average. Why 200ms is the bar, and the three phases that consume it.
The TweakPad Team
- Web Development11 min read
llms.txt vs robots.txt: Only One of Them Blocks AI Crawlers
llms.txt shows no measurable effect on AI citations, and Content-Signal is ignored by every crawler. Only robots.txt is honoured.
The TweakPad Team
- JavaScript4 min read
Microtask vs Macrotask: The Two Queues That Decide JavaScript Order
Why a promise resolves before setTimeout(0), how the microtask queue drains between tasks, and the loop that freezes a page.
The TweakPad Team
- Backend & Databases5 min read
MongoDB Index Types: Which One Your Query Actually Needs
Single field, compound, multikey, text, wildcard, hashed, geospatial and TTL — what each is for, and the limits.
The TweakPad Team
- Web Development7 min read
Which Structured Data Still Earns a Rich Result in 2026
Google dropped FAQ rich results in May 2026 and HowTo before it. What is left in the gallery, and what to stop maintaining.
The TweakPad Team
- Web Development4 min read
Measuring Core Web Vitals in the Field with the web-vitals Library
Lighthouse cannot measure INP. How to collect LCP, INP and CLS from real users, and why attribution is what matters.
The TweakPad Team
- AI & Prompt Engineering5 min read
Why LLMs Have Context Windows at All
A context window is not a storage limit. It comes from attention costing quadratic compute and position encodings.
The TweakPad Team
- Data Formats4 min read
Base64 Is Not Encryption, and Three Other Things It Is Not
What Base64 actually does, why it makes files bigger, why btoa breaks on emoji, and when base64url is the one you need instead.
The TweakPad Team
- Developer Tools4 min read
The Cron Bug That Runs Your Job Far More Often Than You Meant
Set both day-of-month and day-of-week and cron ORs them, not ANDs. Why "first Monday" schedules misfire, and the fix.
The TweakPad Team
- Backend & Databases4 min read
How to Create an Index in MongoDB (Without Locking Your Collection)
createIndex syntax, unique and partial and TTL options, building on a live replica set, and how to confirm the index is actually being used.
The TweakPad Team
- Data Formats4 min read
What Changed in JSON Schema Draft 2020-12 (And What Silently Breaks)
items became prefixItems, $ref stopped replacing siblings, and unevaluatedProperties arrived. What silently changed.
The TweakPad Team
- Backend & Databases4 min read
The ESR Rule: Getting Compound Index Field Order Right in MongoDB
Equality, Sort, Range — why index field order decides whether MongoDB sorts in memory, and how to prove it with explain.
The TweakPad Team
- Backend & Databases5 min read
The Regex That Works Fine Until One Input Hangs Your Server
Catastrophic backtracking turns a working pattern into a CPU bomb. Why nested quantifiers explode, and how to spot and rewrite them.
The TweakPad Team