标签：#dev

Em 2023, eu arrumei as malas e saí de Recife, minha terra natal, para morar no interior do Mato Grosso. O motivo? Cursar Ciência da Computação. Eu sabia que enfrentaria um choque cultural, o calor do Centro-Oeste e a saudade de casa. O que eu não imaginei é que o maior desafio seria a sensação constante de que eu era uma fraude no meio da minha própria sala de aula. Se você estuda ou trabalha com tecnologia, provavelmente já passou por isso. Você senta na primeira semana de aula e parece que metade da turma já programa desde os 12 anos, fala termos técnicos que parecem outra língua e discute sobre ferramentas que você nem sabia que existiam. Hoje, na reta final da graduação, focando meus estudos em Back-end e Dados, quebrando a cabeça com Go, Python e SQL, eu olho para trás e vejo o quanto essa cobrança silenciosa quase me paralisou. Se você está sentindo que entrou no curso errado ou que todo mundo corre a 100 km/h enquanto você ainda está engatinhando, pega um café e vem ler este papo reto sobre como lidar com a tal da Síndrome do Impostor. O "efeito vitrine" e a falsa ilusão de que somos os únicos perdidos Na faculdade de TI, a comparação é quase inevitável. A gente abre o LinkedIn e vê o colega conseguindo estágio internacional; abre o GitHub e vê códigos impecáveis; na sala de aula, sempre tem quem responda às perguntas do professor antes mesmo dele terminar de falar. O erro está em achar que o ritmo do outro deve ditar o seu. Na Computação, as pessoas vêm de bagagens completamente diferentes. Quem já sabia programar antes da faculdade pode ter facilidade em Lógica de Programação, mas talvez sofra tanto quanto você quando chegar a hora de aprender Álgebra Linear ou Teoria da Computação. Sentir-se perdida não significa incompetência; significa apenas que você está no processo de aprender algo complexo. E adivinha? Todo mundo ali está tentando descobrir como as coisas funcionam, mesmo quem finge que sabe tudo. O que me ajudou a virar a chave Eu não acordei um dia

Privacy-First Personal Finance for iOS Your finances. On your phone. Nowhere else. A privacy-first personal finance app that connects your banks, brokerage, and investment accounts into one unified dashboard — entirely on-device, no backend, no account required, no subscription. View on GitHub At a Glance 🏦 Multi-source 🔒 100% On-device 📊 Full picture Banks, Revolut, Trading 212 and more No server. No account. Your data stays in your Keychain. Net worth, spending, investments — all in one place Screenshots Log Insights Budget Transaction Entry Settings About Escudo Built out of two frustrations: every decent finance app costs a monthly subscription, and none of them support Trading 212. Escudo connects your banks, brokerage, and investment accounts and gives you a single view of your net worth, spending, and investments — without your data ever leaving your phone. Key Features Net worth dashboard — aggregated balance across all accounts and investment portfolio P&L Unified transaction log — every account in one feed, auto-categorised Spending insights — breakdown by category and trends over time Budget tracking — per-category budgets with visual progress dials Multi-currency — EUR, GBP, USD with stored exchange rates Recurring transactions — template-based recurring transaction engine Shortcuts support — deep linking via escudo:// URL scheme Integrations Source Method Trading 212 REST API — portfolio, orders, dividends Revolut Enable Banking OAuth 2.0 Bankinter PT Enable Banking OAuth 2.0 SIBS SIBS Open Banking (PT market) CSV import Revolut & Bankinter statements All credentials live in the iOS Keychain — never in UserDefaults, never in iCloud, never on a server. Known Limitations Enable Banking does not expose credit card accounts — only bank accounts and transactions are available through the PSD2 API; credit card balances and transactions are not accessible No token auto-refresh for Enable Banking — manual re-auth when tokens expire Categorisation rules are hard

I work for a nonprofit that’s had an outdated website for decades at this point. Upper management is kinda desperate and is getting quoted left and right. $15K for a Wix site which includes: event management, volunteer management, shop, donor management, and general blogs, etc. I thought Wix was one of the lower quality sites… especially as I can just go in and drag and drop elements myself. Are we being highballed? How can I convince my management who has zero website experience that this is not the route we want to go for that price point? submitted by /u/breezyb2310 [link] [留言]

AirDrop only works between Apple devices. Most alternatives require an app install, a cloud account, or route files through a third-party server. I wanted something simpler: Open a URL → discover nearby devices → send files. So I built LocalDrop — a peer-to-peer file transfer app that works entirely in the browser over local Wi-Fi. GitHub: https://github.com/akshaykdadheech/localdrop Live Demo: https://localdrop-4fddd39fb6ad.herokuapp.com How It Works Devices connected to the same Wi-Fi network automatically discover each other through a lightweight signaling server. Once discovered, WebRTC establishes a direct peer-to-peer connection: Browser A ──► Signaling Server ◄── Browser B └──────── WebRTC P2P ────────┘ The signaling server only helps devices find each other. File transfers happen directly between browsers via WebRTC and are DTLS encrypted, so the server never sees your files. Interesting Challenges Backpressure Handling WebRTC DataChannels on Chromium have a ~16 MB buffer limit. Sending data too aggressively can crash the tab. I solved this using: bufferedAmountLowThreshold Flow control based on drain events Cross-Platform Compatibility Different browsers expose different capabilities. Android Chrome supports the File System Access API iOS Safari does not This required separate file-receiving flows for each platform. Large File Transfers Keeping multi-gigabyte files in memory isn't practical. On Chrome, showSaveFilePicker() is triggered after the transfer completes, allowing transfer progress to remain visible throughout the process without buffering everything in RAM. Tech Stack Svelte 5 + Vite TypeScript WebRTC DataChannel Node.js + ws Docker Self-Hosting git clone https://github.com/akshaykdadheech/localdrop cd localdrop docker compose up -d Then open: http://your-ip:3001 from any device connected to the same Wi-Fi network. I'd love feedback from anyone who's worked with WebRTC DataChannels, especially on mobile browsers. If you find the project useful, a

The first time I deployed a Next.js app to production, it took me three days. Not because the app was complicated — it was a straightforward portfolio site. It took three days because I had no idea what I was doing with AWS, I'd never written a GitHub Actions workflow, and every tutorial I found either skipped the hard parts or assumed I already knew them. By the time I was done, I had a deployment pipeline I was genuinely proud of: push to main, GitHub Actions runs the build, tests pass, the app deploys to an EC2 instance behind CloudFront. Zero manual steps. Zero downtime deploys. Total cost: about $5/month. This guide is the one I wish had existed. We're going to deploy a Next.js app to AWS from scratch — EC2 for compute, CloudFront for CDN, GitHub Actions for CI/CD — with every step explained so you understand what you're building, not just copying commands. Why AWS Instead of Vercel? This is a fair question. Vercel is genuinely excellent for Next.js, and for most projects it's the right call. You push, it deploys. Done. AWS makes sense when: You need to control the infrastructure (compliance, data residency, custom VPC configuration) You're running other services (databases, queues, lambdas) in AWS and want everything in the same network You want to learn infrastructure skills that transfer to enterprise environments Your app has specific performance requirements that benefit from custom CloudFront configuration You're a freelancer or consultant who wants to bill separately for infrastructure If none of those apply to you, use Vercel. This guide is for when they do. The Architecture Here's what we're building: ┌────────────────────────────────────────────────────────┐ │ GITHUB ACTIONS CI/CD │ │ │ │ Push to main → Build → Test → Deploy to EC2 │ └──────────────────────┬─────────────────────────────────┘ │ SSH deploy ▼ ┌────────────────────────────────────────────────────────┐ │ AWS EC2 INSTANCE │ │ │ │ Ubuntu 22.04 LTS │ │ Node.js 20 + PM2 (process manager) │ │ N

I would like some advice from well experienced devs that you would give to junior devs submitted by /u/Dizzy_External2549 [link] [留言]

There's a specific feeling you get after your third production caching incident. It's not panic....

Are websites with background music still in and fashionable? This would be for the landing page of a website of a fashion/editorial male model The song would be this submitted by /u/Think_Equipment4449 [link] [留言]

Hi, I have a web app that serves cached JSON files via Cloudflare CDN. The data is generated by a proprietary algorithm and has significant competitive value. The JSON structure is simple to discover: /cache/_index.json → lists manifest URLs /cache/manifest_xxx.json → lists data file URLs /cache/data_xxx.json → actual proprietary data Anyone can write a 20-line script to crawl the full dataset in minutes. Rate limiting (Nginx, 60 req/min) slows it down but doesn't stop a patient scraper. The obvious solution would be JWT token authentication on the JSON endpoints, but Cloudflare CDN caches by URL — adding auth headers breaks caching entirely, defeating the purpose of having a CDN. Constraints: Must keep Cloudflare CDN caching working (performance critical) No user login/registration exists — it's a fully public site Data must remain accessible to legitimate browser users Cannot move away from Cloudflare Is there any real, production-proven solution to this problem? Or is "public CDN-cached data" fundamentally incompatible with "access control"? What would you do? submitted by /u/JosetxoXbox [link] [留言]

Last week I had a single tool: a JSON-to-TypeScript converter. Today I have 10. I spent a day building a full suite of developer tools - all free, all client-side (nothing leaves your browser), and all open source on GitHub. The Suite DevForge is a collection of tools I built because I kept opening 15 different tabs every day: 1. JSON ? TypeScript Paste JSON, get TypeScript interfaces or types. Supports nested objects, arrays, custom root names. 2. CSV ? JSON Bidirectional conversion with header detection and delimiter support (comma, semicolon, tab). 3. Regex Tester Live regex testing with flags (g, i, m, s, u, y), match highlighting, and replace functionality. 4. Base64 Encoder/Decoder Encode text to Base64 and decode Base64 back to text. Unicode-safe. 5. JWT Decoder Decode JWT tokens into header, payload, and signature components. Read-only - no verification, no security risk. 6. SQL Formatter Uppercase keywords, indentation control. Handles SELECT, JOIN, INSERT, CREATE - the common stuff. 7. Diff Checker Side-by-side text comparison with LCS-based diff algorithm. Color-coded additions and removals. 8. UUID Generator Generate UUID v4 (or v1) in bulk. Copy individual or all at once. 9. Timestamp Converter Convert Unix timestamps to readable dates and back. Shows seconds, milliseconds, ISO 8601, UTC, and relative time. 10. Color Converter Convert between HEX, RGB, HSL, and CMYK. Color picker, presets, named color support. The Tech Stack Zero frameworks. Zero dependencies. Zero backend. Every tool is a single HTML file with embedded CSS and JavaScript. They all run entirely in the browser - no data is sent to any server. Hosted on GitHub Pages. Free forever. Why I Built This I'm a solo developer based in Nepal. Building things that help other developers is how I learn, grow, and (hopefully) earn. The suite is free, but there's a Pro tier ( one-time) that unlocks: File exports Batch operations Custom naming conventions Priority support I also do freelance development

The AI agent security community has been converging on a problem. A researcher recently ran an experiment — feeding a memory-retrieval framework 10 scenarios involving certificate operations: signing, issuing, revoking, delegating. The system retrieved the right memory 8 out of 10 times. It matched the external authorization gate 7 out of 10. The conclusion: metadata per item isn't enough. You need a separate authorization gate over the proposed operation. That conclusion is correct. But I want to show what that gate actually looks like when you build it — because the primitive already exists, and it's older than LLMs. The problem is authorization, not retrieval Most agent frameworks today invest in memory and observability. The agent can recall what it did before. You can see what tools it called. Logs, traces, dashboards. What they don't have is a cryptographically enforced answer to the question: was this agent authorized to do this, before it did it? Those are different problems. Retrieval tells you what the agent remembers about its permissions. Authorization tells you what it was actually granted — signed, tamper-proof, at dispatch time. An agent that retrieves "I have revocation permissions" from memory and then revokes a certificate it shouldn't touch is not an authorization failure at the retrieval layer. It's an authorization failure at the gate layer — because there was no gate. Certificates are that gate A certificate is a signed declaration of what an entity is authorized to do. Issued once, verifiable offline in ~1ms, revocable instantly. We've used them for TLS, for IoT devices, for code signing. The same primitive works for agents. The model is simple: Orchestrator issues a certificate at dispatch time The certificate carries the agent's identity and its exact scope in meta Every tool call goes through a gate that verifies the certificate offline On completion — or abort, or timeout — the orchestrator revokes it // Orchestrator — dispatch const { cer

What is Wrisha? Wrisha is a desktop emotional AI companion — an animated character who can see you, hear you, talk back, and react. The pipeline is genuinely multimodal: Vision — webcam + facial-emotion detection (OpenCV / FER) Hearing — speech-to-text so you can just talk to her Brain — an LLM generates her replies, in-character Voice — text-to-speech with mood-modulated tone Avatar — an animated face (pygame) that emotes and lip-syncs I built the bones of it a while back, got busy, and walked away. The Finish-Up-A-Thon was the push I needed to come back to it. The "before": it didn't just need polish — it was dead When I reopened the repo, the harsh truth was that the app couldn't even start. Two things had rotted: The environment was a fossil. The project was so old it wouldn't install on a modern machine. Wrong numpy, stale dependency pins, and a Python version mismatch that sent pip trying to compile packages from source and failing. Just getting it to attempt to run took a full environment rebuild on Python 3.12. The code was half-migrated and crashed on launch. I'd previously upgraded the internal modules — memory, a mood engine, a smarter brain — to a "v3" design, but I never finished wiring them into main.py. So the moment it tried to start, it died: TypeError: init () missing 2 required positional arguments: 'memory' and 'mood_engine' The "before" in one screenshot: a project that built its best features and then never connected them. I'd built the hard parts — persistent memory, a smooth mood state machine, proactive behavior — and left them sitting in files that main.py never even imported. Classic abandoned-side-project energy. The "after": three things I finished I set out to do three things, and I'm counting all three as the win. It runs again The core fix was finishing the migration: rewiring main.py to actually construct the Memory and MoodEngine, inject them into the Brain, and reference mood from the engine instead of the dead attribute it used to

Migrar 100 usuários manualmente no console da AWS é lento, suscetível a erros e impossível de auditar com precisão. Neste artigo você vai ver como automatizar esse processo usando AWS CLI e Shell Script direto no AWS CloudShell — sem instalar nada localmente. O resultado final: usuários criados, alocados nos grupos corretos e com MFA obrigatório, tudo em minutos. O que é o IAM? O AWS Identity and Access Management (IAM) é o serviço que controla quem pode acessar os recursos da sua conta AWS e o que cada pessoa ou serviço pode fazer. Com o IAM você gerencia: Conceito Descrição Usuário Identidade individual com credenciais próprias Grupo Conjunto de usuários que compartilham as mesmas permissões Política Documento JSON que define o que é permitido ou negado Role Identidade temporária assumida por serviços ou usuários A boa prática é nunca conceder permissões diretamente a um usuário — sempre use grupos. Visão geral da solução O fluxo é simples: Criar os grupos IAM no console Montar um arquivo CSV com os dados dos usuários Rodar um shell script no CloudShell que lê o CSV e cria tudo automaticamente Aplicar a política de MFA obrigatório nos grupos Passo 1 — Criar os Grupos IAM Antes de importar os usuários, os grupos precisam existir. No AWS Console , acesse IAM → User groups → Create group e crie um grupo para cada perfil do seu ambiente. Neste exemplo usaremos: RedesAdmin — administradores de rede LinuxAdmin — administradores de servidores Linux DBA — administradores de banco de dados Estagiarios — acesso limitado para estagiários Nomes de grupos suportam até 128 caracteres (letras, números e + = , . @ _ - ), são únicos por conta e não diferenciam maiúsculas de minúsculas. Passo 2 — Montar o arquivo CSV Crie uma planilha com os dados dos usuários e salve como CSV separado por vírgula (UTF-8) . O arquivo deve ter exatamente três colunas: Username , Group e Password . Username , Group , Password joao . silva , LinuxAdmin , Senha @2024 ! maria . souza , DBA , Senha @2024

Co to jest WCAG 2.1? WCAG 2.1 ( Web Content Accessibility Guidelines ) to międzynarodowy standard techniczny określający, jak tworzyć strony www i aplikacje mobilne, aby były dostępne dla osób z niepełnosprawnościami (wzroku, słuchu, ruchu, poznawczymi). Wersja 2.1 rozszerza wcześniejsze zasady o wytyczne dla urządzeń mobilnych oraz osób słabowidzących. Struktura WCAG 2.1 i poziomy zgodności Standard opiera się na 4 głównych zasadach. Dzielą się one na wytyczne, do których przypisane są konkretne kryteria sukcesu wdrażane na trzech poziomach: Poziom A: Absolutne minimum. Bez niego strona jest całkowicie niefunkcjonalna dla wielu użytkowników. Poziom AA: Standard rynkowy i prawny. Wymagany przez polskie i europejskie przepisy dla sektora publicznego i biznesu. Poziom AAA: Najwyższy stopień dostępności, trudny do wdrożenia w całym serwisie. Zasady POUR – Fundamenty WCAG 2.1 Wszystkie wytyczne WCAG 2.1 opierają się na czterech głównych zasadach tworzących akronim POUR : P erceivable ( Postrzegalność ) - Treść musi być dostarczana w sposób czytelny dla zmysłów użytkownika (wzroku, słuchu). O perable ( Funkcjonalność ) - Interfejs i nawigacja muszą być możliwe do obsługi za pomocą różnych urządzeń (np. samej klawiatury). U nderstandable ( Zrozumiałość ) - Informacje oraz obsługa strony muszą być jasne, logiczne i przewidywalne. R obust ( Solidność ) - Kod strony musi być poprawny i kompatybilny z obecnymi oraz przyszłymi technologiami (przeglądarki, czytniki ekranu). Kto musi spełniać standardy WCAG? Dostępność cyfrowa to już od dawna nie tylko "dobra praktyka", ale twardy wymóg prawny, który stale się rozszerza: Sektor publiczny (Obecnie): W Polsce urzędy państwowe i samorządowe, szkoły, uczelnie, szpitale oraz spółki skarbu państwa mają bezwzględny obowiązek spełniania standardu WCAG 2.1 na poziomie AA. Wynika to wprost z Ustawy z dnia 4 kwietnia 2019 r. o dostępności cyfrowej . Za brak zgodności grożą kary finansowe. Sektor prywatny i biznes: Na mocy Europejskiego Akt

I won't name names because I got in trouble for that last post but I interviewed with the biggest agency I've ever gotten a call back from. They are 150+ employees, at least one major national corporation as a client. You would think that because they are so high and mighty they have their s*** together but honestly no. The first interview was with the "big boss" the digital director. The second interview was actually 4 separate teams calls scheduled back to back with a total of 9 people. The director loved me and told me I would be moving on. He said my second call would be with three people which is hilarious because he wasn't even close to correct. My second interview was chaos. First call ended up being a different group of project managers than was listed, and they just hammered me with hypothetical situations of conflict the entire time. All rain clouds, no sun. Second call was two developers who didn't seem that invested in talking to me. They mainly just said that works comes in from many different places and you can be expected to work on a bunch of things while managing a bunch of people AND be suddenly put in front of a client at any point. My third call was hilarious because the top senior dev and the top senior designer in the company on this call loved me. We clicked on everything - our stance on AI, our views on WordPress and PHP in general, our approach to projects. My fourth call was back to doom and gloom - more managers and all just hypothetical situations about conflict and everything going wrong. The people on call four were telling ME that a person from call two has a "different idea of what finished means" and were basically talking s*** on this person who is probably their smartest back end developer. During all of this, the HR person had no idea who I was the entire time. I am interviewing virtually and would have to relocate and she sent me multiple emails about my "In Person Interview". My rejection email was actually the same email sent t

With Hov3r, you are able to switch between animated wallpapers, background audio, widgets, cursor skins, cursor animation, and create wake words or keybinded shortcuts. It also comes with a massive free library with thousands of cursor skins, background and background music for you to choose from. You can choose between a $2.99/month or a $9.99 lifetime subscription, and even refer friends and family to get either plan for free (more info on website). P.S. I have some free keys left from testing, while Hov3r offers a free trial for you to try the app out, shoot me a DM for a free license key to test the app out(if i still have any). Download now from: https://hov3r.app submitted by /u/CoolDownDude [link] [留言]

Hello guys, i am a 17 year old IT student and i have recently had a "trial job" at a Robotics company, the trial job is a part of my schools curriculum but one thing about the comapny is is that their website is horrible, it is years old and looks very outdated, so i wanted to propose the idea of making and effectively selling them a new one. The website has around 50 pages and made in Joomla however it is based on Joomla 3 so i would have to bring it over to a newer version. Anyway i was wondering how much i should ask for a website like this? From a discussion with a person who works in website selling and marketing the "big shot" companies would charge up to 20 500 Euro or 24 000 USD which is obviously too much for a person still in school with no actual professional experience, the price i made out to not be too much while also getting my money's worth was around 5 200 Euro or 6 000 USD. Despite me having no professional experience i have had time to redesign a tiny bit of their website simply so i can show them that i can actually make the website, so i am wondering if this price is appropriate for a web that would take me around 250-ish hours to make probably with the domain transfer and transfer to Joomla 5. The website is: www.exactec.com in case anybody wanted to check it out, it is in czech however you should still be able to tell the cost from the layout. also i think you can see which parts i did and didn't make. P.S: the current pages made by me aren't my full effort as they are not my trial job's fill and i only did them in spare time while learning robotics, the actual ones would be more thought through and professional. submitted by /u/Zealousideal-Mood-45 [link] [留言]

I've been specializing in frontend for more than ten years, gaining full stack and backend experience for the last four or five, and I'm starting to think I might just be done. Not to harp on the AI discussion that gets posted on here all the time, but I do feel like our jobs have fundamentally shifted over the last 12 months to something I no longer enjoy; I don't want to be a pseudo manager of AI agents, I want to write code, and if there's no longer a need for that I can just do something else. But I would like this community's help - looking at it from the ground up, what are fully unrelated jobs or industries where you feel like our skills would be most transferable? And I mean fully blue sky approach, things I might not have considered, not just coding in a different stack. I think I have above average computer skills and awareness of operating system details that would put me above a lot of other candidates from different backgrounds, so where could I go to leverage that (that is at least a little more future proof)? Or beyond computer at all, I feel like I have spent years building strong critical thinking skills and analytical reasoning; I just don't have a wide base of knowledge outside our industry to know where these would be best used. For practical purposes, I can't look at anything that would require its own degree and four more years back to school, but there have got to be lots of certifications I could get quickly to start to open doors and prove my qualifications. I'm certainly expecting a pay cut, but I'm open to entry level jobs if it means a good career path. So I am interested in your thoughts - if you were starting out today in any other field than webdev, where would you be looking? submitted by /u/mx-chronos [link] [留言]

- Good pay compared to many other professions - Remote/hybrid work options - Opportunities to travel or work in different countries - Working with global teams - Decent work-life balance - Solving interesting problems - Continuous learning - Respect and recognition in society What keeps you motivated to stay in software development? submitted by /u/Majestic-Taro-6903 [link] [留言]

I was not expecting gyroscope API to be this sensitive lol but it was a subtle bug in my implementation. ps. I even added Absolute orientation sensor to compare stability... You can visit the fixed live demo here - https://ctx-0.github.io/gyroscope/ (use a mobile device) Here's the repo if you want to take a look - https://github.com/ctx-0/gyroscope submitted by /u/goldbookleaf [link] [留言]