标签：#webdev

Honest question: Besides running AI agents interactively, while you work, do you also keep them running after hours, so that work continues or not? I am just trying to figure out how much software development has shifted towards this direction. At my workplace, we only use them while we're at work and always review the output. But I am getting the feeling that many have gone further, by having the agents work continuously. Please share your experience! submitted by /u/kagelos [link] [留言]

So, what does full-stack web development even mean with AI around these days? I mean, if I say I'm a full-stack web developer, I should probably be handling the frontend, backend, database, deployments, and all that jazz. But now, with AI advancing so much, what skills are a must for someone who wants to call themselves a full-stack web developer? Should we also be thinking about product engineering, like what architecture to pick for our projects? And should we even start thinking about shipping, the business side of things, and working with distributions? What do you all think, where should this full-stack development process begin and end now? submitted by /u/zonayedahmed [link] [留言]

Is it safe? I know nothing.. help me submitted by /u/Free-Ant-463 [link] [留言]

It's free and open source with markdown files on how to setup it for your team and host it yourself. No more paying for votes or not being able to have sessions persist longer than a few days. Enjoy and please don't eat me alive! This is my first public repo (that is actually substantial) I've put out in the world haha. JIRA Planning Poker Website submitted by /u/brut3F0rc3 [link] [留言]

Crypto APIs are no longer just tools for fetching Bitcoin prices. In 2026, they are becoming the...

I'm trying to pick a stack to use for all my freelance web dev work. I plan on building scalable ecommerce websites. I am currently using Node, React, and Docker/Cloudify for deployment on VPS. What is the best option for database? I'm currently using Supabase but I heard they sometimes deactivate databses if you don't login so I want to explore my other options? submitted by /u/wobowizard [link] [留言]

I work for a nonprofit that’s had an outdated website for decades at this point. Upper management is kinda desperate and is getting quoted left and right. $15K for a Wix site which includes: event management, volunteer management, shop, donor management, and general blogs, etc. I thought Wix was one of the lower quality sites… especially as I can just go in and drag and drop elements myself. Are we being highballed? How can I convince my management who has zero website experience that this is not the route we want to go for that price point? submitted by /u/breezyb2310 [link] [留言]

AirDrop only works between Apple devices. Most alternatives require an app install, a cloud account, or route files through a third-party server. I wanted something simpler: Open a URL → discover nearby devices → send files. So I built LocalDrop — a peer-to-peer file transfer app that works entirely in the browser over local Wi-Fi. GitHub: https://github.com/akshaykdadheech/localdrop Live Demo: https://localdrop-4fddd39fb6ad.herokuapp.com How It Works Devices connected to the same Wi-Fi network automatically discover each other through a lightweight signaling server. Once discovered, WebRTC establishes a direct peer-to-peer connection: Browser A ──► Signaling Server ◄── Browser B └──────── WebRTC P2P ────────┘ The signaling server only helps devices find each other. File transfers happen directly between browsers via WebRTC and are DTLS encrypted, so the server never sees your files. Interesting Challenges Backpressure Handling WebRTC DataChannels on Chromium have a ~16 MB buffer limit. Sending data too aggressively can crash the tab. I solved this using: bufferedAmountLowThreshold Flow control based on drain events Cross-Platform Compatibility Different browsers expose different capabilities. Android Chrome supports the File System Access API iOS Safari does not This required separate file-receiving flows for each platform. Large File Transfers Keeping multi-gigabyte files in memory isn't practical. On Chrome, showSaveFilePicker() is triggered after the transfer completes, allowing transfer progress to remain visible throughout the process without buffering everything in RAM. Tech Stack Svelte 5 + Vite TypeScript WebRTC DataChannel Node.js + ws Docker Self-Hosting git clone https://github.com/akshaykdadheech/localdrop cd localdrop docker compose up -d Then open: http://your-ip:3001 from any device connected to the same Wi-Fi network. I'd love feedback from anyone who's worked with WebRTC DataChannels, especially on mobile browsers. If you find the project useful, a

I would like some advice from well experienced devs that you would give to junior devs submitted by /u/Dizzy_External2549 [link] [留言]

There's a specific feeling you get after your third production caching incident. It's not panic....

Are websites with background music still in and fashionable? This would be for the landing page of a website of a fashion/editorial male model The song would be this submitted by /u/Think_Equipment4449 [link] [留言]

Hi, I have a web app that serves cached JSON files via Cloudflare CDN. The data is generated by a proprietary algorithm and has significant competitive value. The JSON structure is simple to discover: /cache/_index.json → lists manifest URLs /cache/manifest_xxx.json → lists data file URLs /cache/data_xxx.json → actual proprietary data Anyone can write a 20-line script to crawl the full dataset in minutes. Rate limiting (Nginx, 60 req/min) slows it down but doesn't stop a patient scraper. The obvious solution would be JWT token authentication on the JSON endpoints, but Cloudflare CDN caches by URL — adding auth headers breaks caching entirely, defeating the purpose of having a CDN. Constraints: Must keep Cloudflare CDN caching working (performance critical) No user login/registration exists — it's a fully public site Data must remain accessible to legitimate browser users Cannot move away from Cloudflare Is there any real, production-proven solution to this problem? Or is "public CDN-cached data" fundamentally incompatible with "access control"? What would you do? submitted by /u/JosetxoXbox [link] [留言]

The AI agent security community has been converging on a problem. A researcher recently ran an experiment — feeding a memory-retrieval framework 10 scenarios involving certificate operations: signing, issuing, revoking, delegating. The system retrieved the right memory 8 out of 10 times. It matched the external authorization gate 7 out of 10. The conclusion: metadata per item isn't enough. You need a separate authorization gate over the proposed operation. That conclusion is correct. But I want to show what that gate actually looks like when you build it — because the primitive already exists, and it's older than LLMs. The problem is authorization, not retrieval Most agent frameworks today invest in memory and observability. The agent can recall what it did before. You can see what tools it called. Logs, traces, dashboards. What they don't have is a cryptographically enforced answer to the question: was this agent authorized to do this, before it did it? Those are different problems. Retrieval tells you what the agent remembers about its permissions. Authorization tells you what it was actually granted — signed, tamper-proof, at dispatch time. An agent that retrieves "I have revocation permissions" from memory and then revokes a certificate it shouldn't touch is not an authorization failure at the retrieval layer. It's an authorization failure at the gate layer — because there was no gate. Certificates are that gate A certificate is a signed declaration of what an entity is authorized to do. Issued once, verifiable offline in ~1ms, revocable instantly. We've used them for TLS, for IoT devices, for code signing. The same primitive works for agents. The model is simple: Orchestrator issues a certificate at dispatch time The certificate carries the agent's identity and its exact scope in meta Every tool call goes through a gate that verifies the certificate offline On completion — or abort, or timeout — the orchestrator revokes it // Orchestrator — dispatch const { cer

Co to jest WCAG 2.1? WCAG 2.1 ( Web Content Accessibility Guidelines ) to międzynarodowy standard techniczny określający, jak tworzyć strony www i aplikacje mobilne, aby były dostępne dla osób z niepełnosprawnościami (wzroku, słuchu, ruchu, poznawczymi). Wersja 2.1 rozszerza wcześniejsze zasady o wytyczne dla urządzeń mobilnych oraz osób słabowidzących. Struktura WCAG 2.1 i poziomy zgodności Standard opiera się na 4 głównych zasadach. Dzielą się one na wytyczne, do których przypisane są konkretne kryteria sukcesu wdrażane na trzech poziomach: Poziom A: Absolutne minimum. Bez niego strona jest całkowicie niefunkcjonalna dla wielu użytkowników. Poziom AA: Standard rynkowy i prawny. Wymagany przez polskie i europejskie przepisy dla sektora publicznego i biznesu. Poziom AAA: Najwyższy stopień dostępności, trudny do wdrożenia w całym serwisie. Zasady POUR – Fundamenty WCAG 2.1 Wszystkie wytyczne WCAG 2.1 opierają się na czterech głównych zasadach tworzących akronim POUR : P erceivable ( Postrzegalność ) - Treść musi być dostarczana w sposób czytelny dla zmysłów użytkownika (wzroku, słuchu). O perable ( Funkcjonalność ) - Interfejs i nawigacja muszą być możliwe do obsługi za pomocą różnych urządzeń (np. samej klawiatury). U nderstandable ( Zrozumiałość ) - Informacje oraz obsługa strony muszą być jasne, logiczne i przewidywalne. R obust ( Solidność ) - Kod strony musi być poprawny i kompatybilny z obecnymi oraz przyszłymi technologiami (przeglądarki, czytniki ekranu). Kto musi spełniać standardy WCAG? Dostępność cyfrowa to już od dawna nie tylko "dobra praktyka", ale twardy wymóg prawny, który stale się rozszerza: Sektor publiczny (Obecnie): W Polsce urzędy państwowe i samorządowe, szkoły, uczelnie, szpitale oraz spółki skarbu państwa mają bezwzględny obowiązek spełniania standardu WCAG 2.1 na poziomie AA. Wynika to wprost z Ustawy z dnia 4 kwietnia 2019 r. o dostępności cyfrowej . Za brak zgodności grożą kary finansowe. Sektor prywatny i biznes: Na mocy Europejskiego Akt

I won't name names because I got in trouble for that last post but I interviewed with the biggest agency I've ever gotten a call back from. They are 150+ employees, at least one major national corporation as a client. You would think that because they are so high and mighty they have their s*** together but honestly no. The first interview was with the "big boss" the digital director. The second interview was actually 4 separate teams calls scheduled back to back with a total of 9 people. The director loved me and told me I would be moving on. He said my second call would be with three people which is hilarious because he wasn't even close to correct. My second interview was chaos. First call ended up being a different group of project managers than was listed, and they just hammered me with hypothetical situations of conflict the entire time. All rain clouds, no sun. Second call was two developers who didn't seem that invested in talking to me. They mainly just said that works comes in from many different places and you can be expected to work on a bunch of things while managing a bunch of people AND be suddenly put in front of a client at any point. My third call was hilarious because the top senior dev and the top senior designer in the company on this call loved me. We clicked on everything - our stance on AI, our views on WordPress and PHP in general, our approach to projects. My fourth call was back to doom and gloom - more managers and all just hypothetical situations about conflict and everything going wrong. The people on call four were telling ME that a person from call two has a "different idea of what finished means" and were basically talking s*** on this person who is probably their smartest back end developer. During all of this, the HR person had no idea who I was the entire time. I am interviewing virtually and would have to relocate and she sent me multiple emails about my "In Person Interview". My rejection email was actually the same email sent t

With Hov3r, you are able to switch between animated wallpapers, background audio, widgets, cursor skins, cursor animation, and create wake words or keybinded shortcuts. It also comes with a massive free library with thousands of cursor skins, background and background music for you to choose from. You can choose between a $2.99/month or a $9.99 lifetime subscription, and even refer friends and family to get either plan for free (more info on website). P.S. I have some free keys left from testing, while Hov3r offers a free trial for you to try the app out, shoot me a DM for a free license key to test the app out(if i still have any). Download now from: https://hov3r.app submitted by /u/CoolDownDude [link] [留言]

Hello guys, i am a 17 year old IT student and i have recently had a "trial job" at a Robotics company, the trial job is a part of my schools curriculum but one thing about the comapny is is that their website is horrible, it is years old and looks very outdated, so i wanted to propose the idea of making and effectively selling them a new one. The website has around 50 pages and made in Joomla however it is based on Joomla 3 so i would have to bring it over to a newer version. Anyway i was wondering how much i should ask for a website like this? From a discussion with a person who works in website selling and marketing the "big shot" companies would charge up to 20 500 Euro or 24 000 USD which is obviously too much for a person still in school with no actual professional experience, the price i made out to not be too much while also getting my money's worth was around 5 200 Euro or 6 000 USD. Despite me having no professional experience i have had time to redesign a tiny bit of their website simply so i can show them that i can actually make the website, so i am wondering if this price is appropriate for a web that would take me around 250-ish hours to make probably with the domain transfer and transfer to Joomla 5. The website is: www.exactec.com in case anybody wanted to check it out, it is in czech however you should still be able to tell the cost from the layout. also i think you can see which parts i did and didn't make. P.S: the current pages made by me aren't my full effort as they are not my trial job's fill and i only did them in spare time while learning robotics, the actual ones would be more thought through and professional. submitted by /u/Zealousideal-Mood-45 [link] [留言]

I've been specializing in frontend for more than ten years, gaining full stack and backend experience for the last four or five, and I'm starting to think I might just be done. Not to harp on the AI discussion that gets posted on here all the time, but I do feel like our jobs have fundamentally shifted over the last 12 months to something I no longer enjoy; I don't want to be a pseudo manager of AI agents, I want to write code, and if there's no longer a need for that I can just do something else. But I would like this community's help - looking at it from the ground up, what are fully unrelated jobs or industries where you feel like our skills would be most transferable? And I mean fully blue sky approach, things I might not have considered, not just coding in a different stack. I think I have above average computer skills and awareness of operating system details that would put me above a lot of other candidates from different backgrounds, so where could I go to leverage that (that is at least a little more future proof)? Or beyond computer at all, I feel like I have spent years building strong critical thinking skills and analytical reasoning; I just don't have a wide base of knowledge outside our industry to know where these would be best used. For practical purposes, I can't look at anything that would require its own degree and four more years back to school, but there have got to be lots of certifications I could get quickly to start to open doors and prove my qualifications. I'm certainly expecting a pay cut, but I'm open to entry level jobs if it means a good career path. So I am interested in your thoughts - if you were starting out today in any other field than webdev, where would you be looking? submitted by /u/mx-chronos [link] [留言]

- Good pay compared to many other professions - Remote/hybrid work options - Opportunities to travel or work in different countries - Working with global teams - Decent work-life balance - Solving interesting problems - Continuous learning - Respect and recognition in society What keeps you motivated to stay in software development? submitted by /u/Majestic-Taro-6903 [link] [留言]

I was not expecting gyroscope API to be this sensitive lol but it was a subtle bug in my implementation. ps. I even added Absolute orientation sensor to compare stability... You can visit the fixed live demo here - https://ctx-0.github.io/gyroscope/ (use a mobile device) Here's the repo if you want to take a look - https://github.com/ctx-0/gyroscope submitted by /u/goldbookleaf [link] [留言]