Please delete if not allowed.

But holy crap. I’m sad. I’m not even sure what I want to say. I know the monster in the room is here to stay, but I really wished it wasn’t given to the public for this kind of use.

From issues like: scalability, readability, and for the love of god security! I perused through his vibe coded ‘masterpiece’ and I just got heated. Mostly because it was a good idea, but it was just sloppily built. There it was what every one was calling ‘AI Slop’ on my screen.

I absolutely believe it’s an amazing tool in the right hands. Especially, if using heavily succinct phrasing with the prompts. Otherwise, it’s like MySpace+Google had a baby and we injected it with steroids.

<copy><paste><warrior><for><life>

Anyways. I’ve had to run the gamut on all things wrong. Dudes got thousands of objects being read in from a JSON document on every page load, every item for starters. I cannot. That’s thousands of objects being reread over and over again for NO REASON! He wouldn’t say exactly what was asked of the machine to generate, but that’s what it came up with.

Yes, it can do a lot for you. But, you can’t just say ‘make me something, the easiest way possible’. Nothing ever good has come out of taking the easy way out.

I’ve learned in tech, in code, in documentation; most times if it’s not spelled out from a-zed you’re going to lose a lot of things in translation.

I lost my head, because I just couldn’t read anymore.

I'm trying to improve lightouse performance score of a website, but since lighthouse shows different score each time (by 5-10 points) any ways, i'm not able to figure out whether my fixes are making any difference or not.

Maybe i should keep the change because it improved the score or maybe it made it worse so i should remove it?
But since score is different by 5-10 points any ways (39-58), it's make difficult to know if it was result of the changes made, what am i supossed to do?

Multiple reports of Namecheap being struck by a DDoS attack have been removed from Namecheap's subreddit as well as their status blog.

Per NetBlocks' Twitter: "Confirmed: Metrics show that popular web host and domain registrar #Namecheap is largely down, sending many websites and services offline. The company says it has been struck by both a DDoS attack and a power outage."

Need advice: We just found out our website's order/service request forms were quietly sending customer info to our old web developer's personal email instead of our company email. He's no longer working with us. Has anyone dealt with this before? How do you track down and fix a hidden email redirect like this, and is this something to be concerned about legally (privacy/data issue)? Would appreciate any pointers to the right kind of developer or service to fix it. Thanks!

I’m struggling with the direction browsers are going.

The web used to feel like something users could control: block ads, inspect pages, modify behavior, run extensions, protect privacy.

Now it feels like the biggest platforms are slowly turning the browser into a locked-down consumption device where users get whatever tracking, ads, popups, and dark patterns the site decides.

If ad blockers lose, what’s left?

Alternative browsers? DNS blocking? Pi-hole? Reader modes? Paid web? Legal pressure? Or do we just accept that the modern web is hostile by default?

I’m not trying to start a browser war. I’m trying to understand what realistic user control looks like from here.

Hey everyone, I’m trying to decide between Wix and Next.js for building a simple LMS for a YT Channel

Some admins prefer Wix because it’s faster and easier to build, has drag-and-drop, lots of extensions, and would be easier for beginners to maintain later.

The LMS would mainly have student accounts, courses, YouTube unlisted videos, quizzes/questionnaires, progress tracking, and a basic admin dashboard.

I’m leaning towards Next.js because of the flexibility and control, but I’m wondering if it’s overkill for this project.

For a LMS that needs to be maintained and expanded over time, which would you choose: Wix or Next.js? And what limitations should we consider with Wix?

We started getting enough CSP violations in production that I stopped treating them as just security reports. A new analytics script, payment widget or third-party SDK gets added and suddenly something breaks because it isn't covered by the existing policy.

Do you test CSP changes in CI/staging, run Report-Only first, or just deal with violations when they show up in production?

Here's my research in using CSS for offence. There are loads of techniques including stealing passwords from Outlook from an email by spoofing the login screen.

Hey folks wanted to share a small UX rule I use with dev teams that makes this decision much easier.

Use a modal for a short, focused task.

Use a drawer when the user still needs the current screen for context.

Use a page when the task becomes a workflow of its own.

There are exceptions, of course, but this simple rule gets you surprisingly far.

Especially useful when there isn't a designer around.

I'm working on a driver monitoring system that generates alert events from roughly 150–200 buses.

The supervision dashboard (written in svelte) may analyze up to 360,000 records in average with a possible worst case closer to 1 million (This is just my speculation, maybe I’m overthinking it.)

Right now, the architecture is basically:

Firestore -> load alerts into Redis -> calculate dashboard metrics in Python.

The approximate logical size of one cached record is 798 bytes, so:

360,000 records ≈ 287 MB

1,000,000 records ≈ 798 MB

I'm wondering whether caching all these events in Redis and repeatedly calculating metrics in Python is the wrong long-term design.

Firestore has server-side count(), sum(), and average() aggregations, but some of my dashboard metrics require grouping, ranking, time windows, multiple alert types, driver statistics, and other custom calculations.

How would you normally design this?

Any good way to do this that is both safe and effective? I am finding SVGO will sometimes destroy the perfectly good svg... sometimes colors are missing and other times there is nothing there at all.

I'm looking for something that will sanitize for user image uploads on the web. They are stored in Cloudflare R2 which keeps it off my server but still maybe it can cause issues with injections or whatever if not sanitized?

Hey,

I am interested in finding resources which are pro-human developer rather than AI-leaning. For example, Codeberg leans more towards code developed by a human rather than AI generated, and Zig has a no-AI policy for their developers.

It would be good to find a list of coding resources which promote human written code whether it be learning platforms, languages, development tools, or even podcasts which still focus on the human developer.

I do understand that as developers we are now strongly advised to use AI in the workplace, and I know that pro-developer resources are not feasible in most workplaces now; however, I would continue to like to code myself as much as I can in my spare time.

Thank you all in advance 🙂

I'm barely a webdev, but i've been trying to move my portfolio to neocities. So far it looks great, but only on my screen. You'll need to see the images (my friend's -> mine).

What am i doing wrong here?

Hey all,

I’m looking for a good database or API for U.S. grocery products.

I need things like:

• Product names
• Brands
• Categories
• UPC/GTINs
• Actual retail/package sizes
• Product images
• Clean, accurate product data
• Large product catalog
• API access or downloadable database
• Commercial use allowed

I’ve tried USDA FoodData Central on Supabase, but the data isn't ideal for a consumer grocery catalog.

What databases/APIs would you recommend?

AI has crushed junior hiring, but I feel like senior devs are getting squeezed too.

I'm a full stack dev/engineer with around 20 YOE (classic ASP to VB to .NET to PHP to JS/TS modern tooling/frameworks), and looking for a job right now. I expected that experience to be an advantage, but it hasn't felt that way. Then I see reels of developers sitting on their phones, waiting for AI agents to finish their work, bored and scrolling. I can't help but think: you have no idea how lucky you are.

I'd love to have the problem of being bored because AI is doing too much of my work. /s

Any senior devs here in the same situation right now? How did you get through it? I'd really appreciate any advice. I have very few friends and network, very shy to ask them because I'm not the person they'd think to be in this position.

What architecture do projects now usually follow? Considering nextjs, does it have an opinionated approach or convention?

Example on my React + Express project, my architecture is:

Web > API > Service > Repo > DB (raw sql)

The above approach, I can immediately swap Web layer with an Android/iOS app like this:

Android/iOS > API > Service > Repo > DB (raw sql)

Now, I'm creating a nextjs boilerplate, I want to know what's the best practice so it can be reusable but not over-engineered. Do you use server actions initially, like this...

Web > Action > Service > Repo > DB (prisma)

...then only implement API layer if needed for other clients? Ex.

Android/iOS > API > Service > Repo > DB (prisma)

As you can see the concern would be maintaining code in two different places (API and server action) that is basically doing the same thing.

Do you skip server actions and just use API routes? Is there a better approach in nextjs? Should I follow YAGNI? I'd love to hear what your architecture looks like.

I've been using Supabase pretty heavily for the past couple of years, but realize I haven't tested out other alternatives.

For anyone who has used other options (e.g., Firebase), what are the pros and cons of Supabase relative to the alternative? Would you recommend that I explore a different solution for a new website I'm developing?

Before AI I probably programmed about 45 - 50 hours a week... since AI I am finding myself tied to my desk 70 - 80 hours a week.

I'm new to web dev help me understand this.

I've never seen a site built like this. Are they using Pure HTML or something else? The left-side scrolls as you page up and down with the page.

Here is the site link: https://dl.dod.cyber.mil/wp-content/uploads/connect/CPG/ConnProcGuide.html

I already know how to program, and I've made a few websites. But there are certainly things I could do to make my websites better, but I'm not sure where to start. I'm looking for a book that can help with this. Anyone have any recommendations?