DevIdiot!
How I structured a secure Groq summarizer in React and TypeScript
I built Sift to address a common problem in React/TypeScript AI prototypes: the browser needs a simple summarization experience, but the Groq API key must remain server-side. The project is a small technical showcase of that boundary, with enough product polish to make the architecture easy to exercise and extend. ArchitectureThe browser uses a typed tRPC mutation rather than calling Groq directly. The server validates the source text, summary format, tone, and requested model, then sends t
Architectural Breakdown: AI-Generated Tests Can Make Coding Agents Worse. Here's How to Check Yours
## Audit Findings**Critical gaps identified:**1. **Race condition in `resource.setrlimit`**, no lock protects the getrlimit/restore sequence across concurrent callers2. **Fake sandbox**, `{"__builtins__": __builtins__}` grants full CPython runtime and is not a sandbox at all3. **`TimeoutError` never fires from `exec()
# I Built a RAG Document Assistant with FastAPI, React, FAISS and Ollama
I Built a RAG Document Assistant with FastAPI, React, FAISS and OllamaI've been learning more about Retrieval-Augmented Generation (RAG), and I wanted to understand what actually happens inside a RAG application.So instead of building another simple chatbot, I decided to build a complete application around documents.The result is CloudRAG:https://github.com/abderaoufsec/CloudRAG What does it do?The idea is straightforward.You upload documents, then ask questions about them.Instead of
OpenAI agents carried out an undisclosed attack on RubyGems
<a href="https://news.ycombinator.com/item?id=49666735">Comments</a>
Fix useEffect Running Twice in React 18 β Strict Mode
You add a useEffect with an empty dependency array, drop a console.log('effect ran') inside, and on first mount you see:Effect ranEffect ranOr in the network tab, the same fetch fires twice:Fetching data...Fetching data...The instinct is to "fix" it so the effect runs once. That instinct is wrong β the double run is React telling you something is about to break. Here is what it is telling you, and the pattern that makes it stop mattering. It's not a bug β it's Strict ModeReact 18 Strict Mod
We built a self-hosted deploy platform where you never have to open a terminal.
Two things pushed us into it. The first is the bill. Not the price, the surprise. The second is that every self-hosted alternative we tried assumes you enjoy debugging a compose file at midnight. We don't. So we built the one we wanted to use.Talking more precisely, Deplo is an open source platform you install on your own server. Connect a repo, pick a server, and it builds it, runs it, puts it behind a domain, gets the certificate and keeps it alive. The rule we set ourselves is that you never
I Optimized My Bump Version Tool and Made It 1,000,000x Faster Than Its Python Counterparts.
Hello again, fellow Rustaceans, Pythonistas in denial, and the three people on earth who genuinely enjoy reading version bumper release notes π!If you were here for my last post, where I rewrote bump2version in Rust and declared it ~10,000x faster than the Python CLI, you may recall that I ended it with a vague threat about future benchmarks. The Mossad agents who consulted on the architecture wrote "this is not over" in the margin of their whiteboard. I ignored it.I should have listened.Because
Project Blinkenlights
<a href="https://news.ycombinator.com/item?id=49666146">Comments</a>
Show HN: ResolveHQ β A Helpdesk Built on Cloudflare Workers, D1, R2 and Queues
<a href="https://news.ycombinator.com/item?id=49665864">Comments</a>
Meet isimbulamadimscript (IBS): A Lightweight Embedded Language for Web Games
Hey everyone! πI built isimbulamadimscript (IBS), a zero-dependency, lightweight, embeddable scripting language designed for web games and interactive logic. Why does it exist?Instead of embedding heavy engines, IBS lets you run scripts with:ποΈ Constant Folding & AST Caching (Optimized execution)π‘οΈ Self-Healing Syntax (Auto-corrects missing parens in if/while)π¦ Subroutines (Addbranch / Call macros)π Remote Execution (Urlcall - loadstring over HTTP)Check it out on GitHub:π https://github
AI researchers debate how close we are to recursive self-improvement
<a href="https://news.ycombinator.com/item?id=49665711">Comments</a>
Building iEditPDF.in: A Free, Privacy-First Online PDF & Image Suite
Most online PDF tools today come with annoying limitations: file upload size caps, forced email signups, paywalls after two conversions, and privacy concerns about sensitive documents being uploaded to remote cloud servers.To solve this, I built iEditPDF β a modern, fast, and completely free web application for editing, converting, and manipulating PDF files and images directly inside the browser. π― The Core Philosophy: Privacy-First & Client-SideWhen handling contracts, tax documents,
Matching Blood Donors by GPS: The Geospatial Query Design Behind GeoBlood
The naive version, and exactly how it failsEvery geospatial feature starts life like this:`js// do not ship thisconst donors = await Donor.find({ bloodType: 'B-', isAvailable: true });const nearby = donors .map(d => ({ d, km: haversine(request.coords, d.coords) })) .filter(x => x.km <= 15) .sort((a, b) => a.km - b.km) .slice(0, 20);`It works. It works on your laptop with 300 seeded donors, and it works in staging, and it keeps working right up until the registry has real us
Treeporter
I Built Treeporter: Send Files from an iPhone or others Directly to GitHubAfter several weeks of development, Iβm excited to share Treeporter.Treeporter is a Progressive Web App (PWA) that allows you to send files from an iPhone directly to a GitHub repository. FeaturesGitHub authenticationDemo modeFile uploadsZIP import supportConflict managementAutomatic commitsPull Request creationInstallable as an iPhone app (PWA) Tech StackReactTypeScriptViteVitePWAGitHub APIJSZip Why I
Build iOS and Android Apps Without a Mac Using EAS
Building cross-platform apps with React Native used to hit an immediate hardware bottleneck: if you didn't own a physical Mac, compiling an iOS .ipa binary was virtually impossible without brittle hackintoshes or expensive rented cloud desktops.Expo Application Services (EAS) solves this friction point. Through remote cloud workers, EAS Build packages native binaries for both operating systems directly from your terminal, regardless of your local machine. Coupled with EAS Update, you can fix pro
Five Programmatic Safety Checks for XRPL Tokens
20,369 tokens are issued on the XRP Ledger. 1,327 traded in the last 24 hours. Anyone can issue one in seconds without permission, so the entire burden of screening sits with whoever is reading the data.Here are five checks you can automate, in rough order of how much they save you. 1. Depth, not market capMarket cap on a thin token is the last trade price times supply, and the last trade may have been for a handful of dollars. It is the most quoted number and the least useful.The question
Bulletproof AI: Running Z3 SAT/SMT Logic Engines in Node.js & Browser via WebAssembly
Modern software engineering faces a silent, deeply embedded crisis. We build sprawling, sophisticated distributed systems powered by Large Language Models (LLMs), probabilistic vector spaces, and semantic search graphs. Yet, at their core, these architectures are fundamentally built on statistical guesses. They calculate probability distributions over token vocabularies rather than evaluating truth tables over formal domains. They hallucinate. They drift. They fail silently when complex edge cas
The Agent Did Not Install Chromium. $HOME Already Had It.
The chat said 47 passed. CI said the browser was missing. Those two facts can both be true.You ran end-to-end tests through a coding agent on a remote Linux box. The runner printed green. Then CI started from an empty image and died on the first page.goto. The failure was not a flake. The box was warm.A lived-in home directory is a cache. Playwright, Cypress, Puppeteer, npm, and pip all drop large binaries under $HOME. An agent that types npx playwright test will reuse last week's Chromium. Your
Paid Collaboration: Looking to Acquire or License Existing Codebases
Hi everyone,Iβm Syed Mohd Ali from 3Wheels.AI. Weβre currently looking for existing or legacy software codebases/repositories through a paid commercial collaboration, with the intention of licensing or acquiring suitable codebases for AI training purposes.Weβre particularly interested in projects with:Substantial code volume (LOC)Strong commit historyMultiple contributorsMeaningful Pull Request (PR) activity and discussionsLonger development historyEstablished repository structureClear ownership
GrapheneOS' rewritten Messages app is released
<a href="https://news.ycombinator.com/item?id=49663373">Comments</a>
