developers do(but honestly devs are much more rarely do these mistakes)
non-devs have no idea about security at all, except that they need login page lol
HN user
developers do(but honestly devs are much more rarely do these mistakes)
non-devs have no idea about security at all, except that they need login page lol
I've been fixing Ai slop code for last 6 months and here's my observations(yeah I saw that thread where folks charge $10k to fix/refactor code by reducing its size and I think its wrong approach, but this inspired me to write this post)
Few words about me so I could gain more trust before you read all text below: I'm softtare engineer, 17 years in industry, worked with pretty much any technology and language, including embedded development(had a project related to bmw kafas system) and had positions at few relatively big enterprise corpos
The first customers - I found few folks on reddit complaining about their project code quality and suggested to fix them for some fixed price. I charged $500 per project(they all were pretty small).
Alot of projects suffer from one issue - no data scoping, you could request somebody's data by just passing different id in url - be it order id, profile id, etc. Somehow all those projects were built in same manner/way. This still an issue even on modern LLMs in cases when original author isnt a technical.
Another issue was(much rarer now) - exposed private keys directly on frontend.
One more thing - a lot of apps suffer from absence of backend and passing all requests to database directly from frontend, basically opening database to everyone(you could see creds in frontend js bundle)
The most dangerous one I saw - billing related, when on error the app would swallow the error in try-catch block and basically even failed payments were treated as succesful, so one of customers(yeah it was LLM wrapper) lost some good money on failed payments by granting subscription to those folks. In fact, billing-related issues are taking a big part of fixes and refactors. For these things I usually add extensive test coverage with proper VCR cassettes, so that tests are run against real requests/responses and having VCRs I can actually have response with needed data(failure, etc)
Recently I hired a guy to help me with this work, so if you want someone to help with your app, I'm happy to assist.
Sorry for all typos, no AI used to create this text, all manually typed and edited(im not native speaker)
Any chance to compile it for macOS ARM?
Good idea. Any plans to extend to whole Europe?
Thanks for sharing!
Hey guys, it's been a while since I posted last time. Over past few months I did a lot of updates and changes.
Jellyfin is a selfhosted media library.
I also used this source, great doc!
I saw many folks miss this part but it's important when post links to your web apps on social networks. So wrote article to explain what it is and how to use it
Yeah as folks said below - Rails provides data to alpine, and alpine manages state based on initial value. But you can do regular XHR requests from alpine too, since it has regular functions which you can call
Just a blog post explaining ViewComponents in Ruby on Rails apps
I've been self hosting for a while, managed to fill full 24U rack with various hardware. This hobby not just helped me to make life easier(well sometimes it needs some maintenance), but also helped in software engineer career. So wanted to share my thoughts about it
Hey folks, some time ago I shared JellyBox player. I didn't open sources back them since I wanted to cleanup code etc. Now it's done, so welcome to check it out!
It will be, eventually. Not ready to share it yet
I just did tests and my app uses x/2 memory from official jellyfin desktop client
I'm working on this in my spare time, and making up readme file is the last thing on my list. If you're willing to help with readme I can surely provide you all needed information, screenshots and anything else you'd need
Not yet, since its early stages. I want to make it stable and then put open source
Yeah, just music
Hey, thanks for your feedback. As its early beta, you might(and will) experience issues. * HTTP/HTTPS - good point, I'll see if I can drop it off completely * Icon - yeah, known shit, will replace in next build * It must be some error related to parsing server responses(like field was missing when I expected it to be present), so I will check what's wrong and fix it next build
There is actually, but its built using react + electron.js and has same issues as web and mobile(same code base)
Hey everyone, I’ve been working on OpenAI powered support chat for a couple of my projects, but when I showed it to some of my friends, they wanted it as well, so now it is a standalone project. I wanted to get your thoughts about it as well.
As a result, we have an AI support chat aimed at small to medium sized businesses. I tried to make it as simple as possible to set up: 1. Tell the chat as much info as you can including most common support cases. 2. Test it out. 3. Embed as a chat on a page or as a popup script.
The idea is to reduce contact form submissions and get most common issues resolved without customer support.
Please let me know what you think.
Hey, thanks for sharing. Mind to provide details like what browser/platform do you use?
Thanks. I like your ideas, especially SSO, that's definitely could be one more selling point for big clients
These are valid points, thanks for sharing. Will think how can I improve it
Working on it!
Thanks bud, appreciate your comment!
Thanks for support, reading this I understand I didn't waste over a year of my life working on this.
It depends on usage. If you use it once - then there's a free plan for that. But if tool helps you to generate income and makes if faster/easier - I think its fair to ask 8 bucks
1. Templates - that's in work already 2. No. Unfortunately I didn't not aim for any project management features. However for each card you can put a list of TODOs and sort of check status. But I'll think if I could add something like that
It seems it was the easiest.
Thanks bud. If you get any feedbacks - let me know. Looking for all types of feedbacks