标签：#webdev

Applied to this job. Googled the company, it's a real company. Fishy website but whatever. Got an email from the job posting to do a coding test. It's a google doc with open read access pointing to a figma file with open read access. It says to submit fully coded layouts to a random github user. That user profile is listed as located in Ukraine. If you go to company page on Indeed, it's unclaimed. Yet a person is messaging me via a job post associated with the unclaimed profile, leading me to believe it's the company. If you go to the company's real website jobs page, this job is not listed at all. Indeed in making it possible for people to easily impersonate companies and try to get free work, and who knows what else. STAY WOKE Link to google docs "test" https://docs.google.com/document/d/1lkbS_Mw655_fZbHuABLLQ9vyX5OhcWrO4o4_p53AH-0/edit?tab=t.0 Link to figma: https://www.figma.com/design/7SgqDtl84sAJisWNkZ41bP/Sample-Design?node-id=0-1&p=f&t=AcL8p49tCHnKvHfN-0 Link to git hub profile https://github.com/sharomet Real company's job page: https://lendingpad.com/lendingpad-corp-jobs submitted by /u/notgoingtoeatyou [link] [留言]

This was my very first side project 3 years ago. I guess I have a soft spot for it, because this is actually my 3rd time completely rewriting it from scratch. The new version turns flat scanned PDFs into searchable files, or converts photos of text into editable Word docs. It runs client-side for privacy (except for ai features), and the core OCR features are completely unlimited (no account required). → https://olocr.com submitted by /u/Embarrassed_Ad719 [link] [留言]

Hi everyone, I want to verify if I'm missing anything. I am making a small restaurant website and I want to make it comply with German GDPR. I notice there are solutions like Cookiebot. I was wondering if we can make all of the compliance stuffs by ourselves, or if these 3rd party solutions have something superior that we cannot execute on our own? Thanks submitted by /u/leon8t [link] [留言]

https://cityknow.vercel.app Whenever I look up a city in Google Maps, I mostly see only the same touristic landmarks. However, I wanted to know what the actual city looks like, like the neighbourhoods, side streets, the mundane stuff. So I built CityKnow. You search a city, and get a grid of random street-level images arranged by distance from the center (inner rings show the core, outer rings show the suburbs). Would love any feedback! submitted by /u/BarisSayit [link] [留言]

The role is Junior software engineer, nextjs and python. Fully remote and the interview is online. I'm confident I can deliver but I'm not so confident I can do good enough at the technical interview, if there will be one. I have more than a week to prepare. What are my options here? How can I not bomb the technical interview if they do one? Anything I can do to offset the damage? submitted by /u/Shahadat__ [link] [留言]

https://preview.redd.it/fa5yz70xka4h1.jpg?width=1080&format=pjpg&auto=webp&s=4d13acefd4e2a21999756d282c21b342e96136b3 Recently added a small fun feature on my portfolio's about page, a "Summon bok" button that unleashes a horde of lil boks, you can drag and play play with it. She clearly approved the final result if anyone wants to summon her themselves (you can drag n play) https://thevaibhav.co/about submitted by /u/BuriBuriZaymon [link] [留言]

I wanted to build a build a game, but this time, instead of implementing an existing game I tried to make something unique, without reinventing the wheel: memory mahjong . Initially, I started with a more ambitious project, with more complex mechanics that seemed to take ages, so I said, first I'll shift towards something that I can finish fast but focusing on polishing and simple mechanics. So I took the simplest idea and make it more playable. A memory game combined with mahjong tiles. So, I used mahjong tiles and made the matching rules more interesting: Tiles can match by number across different suits, not just identical pairs Dragon tiles clear as a set of three Flower tiles act as wilds 4 different board layouts so each round feels a bit different It's still a memory game at its core but there's more to think about than just remembering positions. Build with React and then made into a NextJs site. submitted by /u/quantotius [link] [留言]

submitted by /u/veroz [link] [留言]

I'm building a webapp that converts location text into geo co-ordinates. Google's APIs works great and I doubt I would go beyond the USD200 free credits each month. However, I am not keen to have a postpaid commitment since there is no guarantee that I won't go above USD200. There does not seem to be a way to set any global limits on spending in Google Cloud either. I prefer something that is on a prepaid model like how OpenAI or Claude does it. submitted by /u/sonomodata [link] [留言]

hey guys, i’ve been frustrated for a while by how bloated and ad-heavy existing wheel fitment databases are. if you’ve ever tried to look up a simple bolt pattern or offset, you know the pain: 3 trackers, 5 pop-ups, and a database that looks like it was built in 2005. so i decided to build a "zero-bloat" alternative: https://boltpatternhq.com/ the core challenge here wasn't the AI part—it was the data structure. i needed to map 10,000+ vehicles with PCD, center bore, and offset specs in a way that was instantly searchable but didn’t require a massive backend hit. a few technical details for those curious: architecture: the site is served as a pure static frontend (html/css/js). no backend, no server maintenance. search: i’m using a pre-computed client-side search index (json-based) for the auto-complete. it’s instant, local-first, and keeps the search experience snappier than any backend call. ai integration: this is the fun part. i'm using cloudflare workers ai to run the models directly at the edge. it avoids all the typical "openai wrapper" latency and cost issues. the model is constrained specifically to my structured database, which helps keep the fitment advice precise and prevents it from hallucinating wildly. it’s still a work in progress, but the goal was to create something "utility-first" for car guys who just want the specs without the tracking trash. i'm currently looking for feedback on the ux of the search widget and the load performance. does the search feel snappy enough on your side? would love to hear what you guys think about the tech stack. submitted by /u/SideQuestDev [link] [留言]

I'll keep this brief. Most of us can write great code. The harder part? Finding clients who actually pay well and don't ghost you after the first message. I struggled with that for a long time. Then a few weeks ago, something clicked - and the two platforms that changed everything for me were LinkedIn and Reddit. Here's why they work: 🔹 LinkedIn - Real people with real budgets post here. It's less about cold outreach and more about being present and visible. Set up your alerts, keep your profile sharp, and let opportunities come to you. Patience pays off. 🔹 Reddit - Underrated, honestly. Yes, the lead volume is lower, but the quality is surprisingly solid. People posting in relevant subreddits are often genuine and ready to hire. Bonus: no geo-restrictions, so you're playing in a global market from day one. The secret sauce? Be in the right subreddit at the right time. That's genuinely it. If you've been sleeping on either of these platforms, give them a real shot. You might be closer to consistent freelance work than you think. submitted by /u/theonlyaswin [link] [留言]

I really like the look of Bootstrap v2, but it is ancient. It does not use flexbox, customizing it nowadays is more difficult… Of course, using Bootstrap v2 for a serious project now would be laughable. Design trends are just too different today. But I need something like Bootstrap v2 for a personal project, maybe used by at most a dozen people. submitted by /u/AwwThisProgress [link] [留言]

In November 2023 we ran our first global Hytale servers on Google Kubernetes Engine using Veltrix 3.2 as our configuration orchestrator. The Treasure Hunt Engine—a service that fans spawn to claim event loot—started crashing every time search volume exceeded 12 k RPM. Grafana showed a steady climb of 503 errors on /hunt/claim until the autoscaler maxed out at 32 G1 CPU cores and still couldnt keep up. Operators kept filing tickets that boiled down to one sentence: We click the map, nothing happens. We never saw the actual error because the ingress controller was swallowing it and returning a generic Too many requests. What we tried first (and why it failed) Our first move was to crank up the nginx-ingress-controller replicas from 3 to 12 and switch the load-balancer tier from GKE Standard to Premium. The 503 rate dropped to 8 k RPM, but now the p99 latency on claims spiked from 80 ms to 420 ms. The culprit was a recursive call in the hunt service: every claim required a round trip to the player-profile service to validate tier eligibility, and that service was on a shared Postgres 15.4 cluster with 3 k TPS of unrelated traffic. The error stack in Jaeger was literally tracing_id=7f3a1c8… server=profile-db pool_timeout . We tried adding connection pooling with PgBouncer, but the hunt service was using raw libpq and refused to reuse connections—no matter how many times we told it. The Architecture Decision We ripped the validation out of the synchronous path and made the hunt engine publish an event called HuntTierCheckRequired to a dedicated Kafka topic player-events-tier . The hunt service would respond to the client with a 202 Accepted immediately, then the loot-claim worker would listen to that topic and, if the tier passed, publish HuntLootReady . The worker ran in the same pod but on a separate goroutine with a 60-second TTL so we didnt leak memory if the tier service hung. We moved the player-profile service to an SSD-backed CloudSQL instance and gave it 32 GB R

<form action= "https://bank.com/transfer" method= "POST" > <input name= "to" value= "attacker" > <input name= "amount" value= "10000" > </form> <script> document . forms [ 0 ]. submit () </script> Five lines of HTML on a malicious page. When a user who's logged into bank.com in another tab visits this page, the browser auto-submits the form, attaches their session cookie, and ten thousand dollars leave their account. They didn't click anything. The malicious site didn't see their password. There was no XSS, no breach, no leak in the traditional sense. The browser did exactly what it was designed to do. That's CSRF — Cross-Site Request Forgery — and it's been the classic "confused deputy" attack on the web for two decades. Let's walk through what makes it work, why CORS doesn't help, and the one cookie flag that mostly killed it around 2020. Why the browser attaches your cookie to that request Cookies belong to a domain. When you log into bank.com , the bank sets a session cookie in your browser: Set-Cookie: session=abc123; HttpOnly From that point on, every single request your browser sends to bank.com carries that cookie. Every page load. Every API call. Every image fetch. The browser does it automatically, without asking, and regardless of who triggered the request. That last word is the door CSRF walks through. The browser attaches the cookie based on where the request is going , not where it came from . So when evil.com triggers a POST to bank.com/transfer , the browser sees a request destined for bank.com , looks up the cookies for bank.com , and attaches them. As far as the bank's server can tell, the request looks exactly like one the user submitted from inside the bank's own page. This is the "confused deputy" idea. Your browser is the deputy. It has authority on your behalf (your cookies). And it's been tricked into using that authority for someone else's benefit. The server has no way to tell the difference, because from its point of view, there isn't one.

Live app: https://layoffs.kadoa.com Data and code are open source: https://github.com/kadoa-org/layoffs-tracker The federal WARN Act requires employers with 100+ workers to give 60 days notice before mass layoffs or plant closings (different thresholds by state, but roughly 50+ jobs lost). But the notices are scattered across 50 state websites, each with its own format, broken links, and no API. I think this should be transparent and easy-to-access public data, so I built an open-source aggregator for it. submitted by /u/madredditscientist [link] [留言]

submitted by /u/rebane2001 [link] [留言]

What will happen if i failed to pay my imagekit bill? i used imagekit server initaly bill is 9 dollar but after 2 week my invoice is 120 dollar , if i didnot able to pay they will terminate my account or take legal action? submitted by /u/Few_Construction7431 [link] [留言]

I started with project level .codex and .claude folders to keep the skills. Most of the skills are common for both of the models and when I change something in them now I need to update the other one as well. It has become an additional maintenance job. I created a root level skills folder and tried to make them share the same skills but; they sometimes create files that they like to use like codex adds openai.yaml things; they still go .codex or .claude folders sometimes even though I told them to look in the skills folder etc. etc. I would like to know how do you deal with these kind of things? submitted by /u/abstracten [link] [留言]

I've been putting off getting deeper into web design for a long time. Not because I wasn't interested, but because I kept telling myself I'd do it properly "at some point". At some point eventually arrived, and this is what came out of it. The motivation was simple: I couldn't find a task manager that just lived in my browser tab without requiring an account, an extension, a subscription, or a whole app install. I wanted something minimal, fast, and always there. So I built it myself. What it is: Vanta is a single HTML file Open it in your browser, bookmark it, done. It has: - Three themes (Focus, Minimal, Paper) - Drag-and-drop reordering - Separators to group tasks visually - Named profiles to save and switch between different lists - Full undo/redo (Ctrl+Z / Ctrl+Y) - JSON import/export - Keyboard shortcuts throughout - Everything persisted in localStorage I deliberately kept it as one file. I didn't really see a reason to split it - it's not a framework project, it's a tool I open in a tab. That was a conscious choice, though I'm curious if others would have approached that differently. https://github.com/Ventexx/vanta-Checklist What I'm actually after: Functionally, I'm happy with it. It does what I needed it to do. What I'm less confident about is everything else. I have always had a complicated relationship with web design. I've made projects that touched on it, but I've never built something I was genuinely visually pleased with at the end. Vanta comes closer than anything I've done before, but I still feel like I'm missing something beyond this - if I want to keep going down the path of building things that are actually aesthetically considered, I don't think I'm quite there yet in how I approach it, and I'm not sure where to look next. So if you have thoughts on where to go from here - what to learn, what I've approached wrong, or just what you'd improve in the app itself - I'd genuinely appreciate hearing it. This is the kind of thing I usually don't have

Hi r/webdev ! I have a bit of a unique backstory for this Showoff Saturday. Back in 1992 , while working as a math teacher, I wrote the very first version of a mental math training program named Aritm in C. Fast forward to today, and I have completely modernized it into Aritm SR —a mobile-first web app, now featuring full English support and optional speech recognition. The Tech & Features: Why I built it: While great platforms like Khan Academy exist, they often rely purely on randomly generated questions. Based on my experience teaching math, Aritm acts more like a physical deck of flashcards that gets shuffled, creating a much better learning rhythm for memorization. I would love to get the community's feedback on the frontend structure, how the speech recognition feels, or any tips on optimizing mobile web performance!Thanks for checking it out, and I'm happy to answer any questions about its 30+ year evolution! submitted by /u/mobluse [link] [留言]