AI 资讯
serving static data to the front-end
I am trying to build a guess-the-x sort of game/quiz, a full stack application, the stack doesn't matter, I was trying to find a way to send an API payload to my front-end securely without users being able to cheat by inspecting the payload using the requests devtools tab. the idea of this quiz is users are given a pixelated image, and many game details like title, summary, devs, pubs, platforms etc... depending on the difficulty I reveal to the users a percentage of the hints early, e.g. easy they can 30% of [devs, pubs, summary, etc...] 15% at medium, and 0% at hard. the image cannot be unpixelated manually however, at each wrong guess it unpixelated automatically, but for other indicators users can "unredact" them using hint points, (3 in total) obviously if not designed properly this is very each to cheat if a user is even slighly tech savvy since the backend sends the entire payload as-is to the client, what i did was my payload response looks something like this: { summary: { { text: "xxxxxxxxxxxxxxxxxxxxxx", revealded: false, text: "something something", revealed : true } } } and i store game state in redis that way i dont have to hit my database for every post request the client makes to fetch the game data; the redis state looks something like this { answer : game.title, hints_left: 3, guesses_made: 0, full_game_data : game, } then the other issue is the game cover, the data isnt mine, prior to this i had built an ETL pipeline to ingest data from IGDB's api, i only save their cover id to my database, something like 1234abc. so on the initial GET request, i hit their CDN endpoint, get the cover, process it in the backend, (pixelization), base64 encode it, which im aware that encoding binaries to base64 is a 1.37x increase over the original data, but i found no way of transmitting images securely to the front end except this one; so im asking for recommendations. right now this is a little slow, even on local host it could reach 2s for image load, mainly beca
AI 资讯
Pullfrog AI: Open-Source CodeRabbit Alternative Powered by GitHub Actions
Pullfrog is an open-source AI-powered GitHub bot by Colin McDonnell, designed for automation in GitHub Actions. It supports a model-agnostic approach, allowing integration with various LLM providers. Key features include orchestration for pull request reviews, issue triage, and CI remediation, all managed within GitHub's environment. The tool operates with a bring-your-own-key model for access. By Daniel Curtis
AI 资讯
Hermes Mentor — A Local AI Agent That Gets You Out of Tutorial Hell
This is a submission for the Hermes Agent Challenge: Build With Hermes Agent What I...
开发者
Next.js 16 Broke My App in 4 Places and None of Them Threw an Error
The CI was green. Build passed. No TypeScript errors. No warnings. Everything looked clean. I...
开发者
Queueing Requests Queues Your Capacity Problems, Too
submitted by /u/fagnerbrack [link] [留言]
开发者
Reviving a 12K+ Star Abandoned Library: toastr-next v3 🍞
This is a submission for the GitHub Finish-Up-A-Thon Challenge What I...
AI 资讯
I hate web development and Im looking for a way out
Hey guys. Ive been in the web development game since 2019. I was a student working in the UX/UI department at university back then, and covid caused every student to be laid off - so i started an agency. It worked out for a while. I made enough to cover covid expenses - but then i got picked up by a company for a few years running their entire tech stack (small company). Nowadays i take on freelance clients in between my retainer with that company. Thing is - over the years i realized how much i LOATHE working with consumers. They always want a new feature, always want it free, and they can always “do better” themselves. This week i had a client call me and ask if i could have the girl who makes her TShirt graphics style the website because “shes just so talented”. Im pretty upset with myself for going into this industry. At first it was the obvious move since i had experience, but its not sustainable anymore. Projects get pushed out for months due to scope creep and clients dont understand these things take time - and therefore money. Lately ive been studying a lot of DevOps. I put together a k3 server with an external nginx proxy and an outbound DNS whitelist. i want to start a hosting service in the future. I think im just done with front end design - i just dont have the passion for it. Id much rather focus on function. any of yall ever make the jump from WebDev to DevOps or Sysadmin? Id love to hear any stories of it. submitted by /u/ibeatu85x [link] [留言]
AI 资讯
Why LLMs will be always Terrible at Software Architecture
submitted by /u/NegotiationInner7307 [link] [留言]
开发者
How do I create a scroll-jack effect where one section stays pinned while the other section scrolls using GSAP?
Like in this website https://bennett-tea.com/tea-store.html submitted by /u/Next_Parsley_1289 [link] [留言]
AI 资讯
As a freelancer or small agency owner, have you seen an increase or decrease in demand in the last few months?
I think the bar for what a website is or can do or the purpose serves is only going to increase as AI tools make them more accessible. Tools like Claude Code can help stand up a landing page or a simple static site very quickly but they can’t easily accomplish even some of the basic off-the-shelf features from robust platforms like WordPress and Shopify. We are already seeing a flood of similar looking websites, which also consequently makes users more discerning and demanding of something more bespoke. I’m curious what your experience has been? If you traditionally provide provided design or development services: - has the scope of those projects changed? - have clients been more price sensitive? If you’re working on a team, has your team size changed? submitted by /u/dennisplucinik [link] [留言]
开发者
CSS vs. JavaScript
submitted by /u/feross [link] [留言]
AI 资讯
How do you actually build a genuine network as a developer on platforms like LinkedIn?
Everyone keeps saying things like “networking is the most important thing for getting a job” or “build your LinkedIn network,” but almost nobody explains how to actually do it. I’m not even talking only about getting referrals or jobs. That’s obviously a bonus. What I really want is to build a genuine network with other developers, people who are learning, building projects, sharing ideas, experimenting with technologies, and maybe even collaborating on things together. Right now, I feel kind of lost in the endless ocean of tutorials. I’ve built some projects, learned different technologies, and improved my skills, but I still don’t feel like I have a clear direction or connection to an actual developer community. So I wanted to ask people who’ve successfully built a network online: What platforms actually work best for this? LinkedIn? Reddit? X/Twitter? Discord? GitHub? How do you approach people without sounding fake or transactional? What kind of content or posts help you connect with like-minded developers? Is “building in public” actually useful, and if yes, how do you start? How do you go from being just another silent profile to someone who’s genuinely part of a community? How do you find people to collaborate with on projects or learn together? I’d especially appreciate advice from people who started with zero connections and slowly built meaningful relationships online. Would love to hear your experiences, mistakes, or things that actually worked for you. submitted by /u/Loud_Dragonfruit_154 [link] [留言]
AI 资讯
Platform Engineering Labs Expands formae with Kubernetes Support, Native Helm Integration
Platform Engineering Labs has announced a major update to its open-source Infrastructure-as-Code platform, formae, introducing full Kubernetes support, native Helm integration, direct .tfvars compatibility, and a new public plugin hub aimed at simplifying cloud-native infrastructure management By Craig Risi
AI 资讯
TamboUI Promises to Bring Better Capabilities to Build TUIs in Java
The call to action “to make 2026 the year of Java in the terminal” was quickly responded to by the launch of TamboUI. Inspired by Ratatui, the library used in Claude CLI, it promises support ranging from low-level terminal drawing to high-level APIs such as components and event handling. Currently at version 0.3.0, it has already been adopted by major projects such as Maven and Spring. By Olimpiu Pop
AI 资讯
Article: Architecting Cloud-Native Kafka: From Tiered Storage Towards a Diskless Future
This article explores Kafka's transition toward a cloud-native architecture, examining how tiered storage, FinOps telemetry, elastic consumer scaling, virtual clusters, and Share Groups reshape the operational and economic model of event streaming platforms. It also analyzes emerging diskless-storage proposals and their architectural trade-offs. By Viquar Khan
开发者
Best options to deploy my website
Hi guys! I'm rn developing a website and I'm using Astro for the front-end and Strapi for CMS. The client has currently around 200 entries, but it is expected to grow along the years. I was trying to search for the cheapest option for him to deploy. What do you suggest? I was thinking about Vercel for the front end, also because the webpage doesn't have that much traffic, but I'm unsure about how to deal with the database and the Strapi platform. What do you think? The idea is to save as much money as he can submitted by /u/guantesdepobre2 [link] [留言]
AI 资讯
PSA Scam Alert - Fake calendly link
I received an email seemingly from a business asking for a website redesign. Everything seems legit on first glance. The website is legit because it's a real company but the person doesn't work there. The sender's email is a bit suspicious as its not a domain email but rather emma.companyname@gmail.com . After you reply they will send a followup email asking you to schedule on their calendly. Here's a screenshot: https://preview.redd.it/fjqmwpsbre3h1.jpg?width=637&format=pjpg&auto=webp&s=72114d4e53d7a18e35b795472fffe78f215dcf98 But one clue that I missed originally is the russian text at the timestamp. If you click on the "calendly" link it opens a calendar like this: https://preview.redd.it/llb5ip7gre3h1.jpg?width=1100&format=pjpg&auto=webp&s=876613e41eb2389194675c557526858f0a7371de Pretty convincing but you see the url is not calendly. It's a url with calendly attached. When you try to book an appointment you are shown this: https://preview.redd.it/3vnr00zjre3h1.jpg?width=610&format=pjpg&auto=webp&s=896a00cbe40ff8f104c1d43c1eb13fb84af2d65a Here the form won't submit until you "sign in with google". At this point I stopped as I use calendly myself and know it wouldn't require a login. Unfortunately others may not be aware. The main trigger for me is, why are there so many steps to scheduling an appointment? Just as a check I emailed "emma" and told her I could make a Thursday 2:30 time but the link was broken. Of course, instead of scheduling it for me she says the link works and please register there. Be careful out there! submitted by /u/theideamakeragency [link] [留言]
开发者
What the Heck is an API?
Table of Contents Intro The Restaurant The Menu Placing the Order The Plate Coming...
开发者
Como estudar JavaScript pelo livro Eloquent JavaScript está abrindo a minha mente
Fiz um curso de devweb e achei que tinha aprendido JavaScript O problema Fiz um curso de...
AI 资讯
GitHub for Beginners: Getting started with Git and GitHub in VS Code
Discover how to use VS Code to interact with GitHub and maintain your projects. The post GitHub for Beginners: Getting started with Git and GitHub in VS Code appeared first on The GitHub Blog .