I built auth wrong for months.
localStorage JWTs. No rate limiting. Raw DB
errors leaking to the browser.
Finally finished it right.
Magic Links, CSRF protection, auto-login pipeline,
@ custom-auth/core as the backbone.
Full before vs after π
#webdev#nodejs
Full breakdown of every security fix, the
@ custom-auth/core architecture, and how
GitHub Copilot actually helped:
dev.to/devcodehub99/i-rebuilβ¦
Also submitted for the GitHub Finish-Up-A-Thon π
Took a week off X.
Came back to:
Anthropic valued at $900B
Google I/O dropped 100 announcements
Gemini 3.5 Flash launched
OpenAI preparing IPO
Bhai ek hafte mein
poori industry badal gayi.
Can't afford to blink anymore. π
#AI#DevLife
I just shipped a full auth system for JS devs.
8 packages. One ecosystem.
Plug in your ORM. Plug in your email provider. Done.
No more frankensteining 5 different libraries.
β Here's what I built
42 tanstack npm packages poisoned on May 11.
No tokens stolen. No accounts hacked.
Attacker used TanStack's own CI pipeline to publish 84 malicious versions in 6 minutes with valid SLSA provenance.
Rotate every secret if your CI ran that evening.
#npm#webdev
Repeated suspicious are being made to my motherβs number from an unknown caller. Caller avoids identification, gives vague responses, repeatedly calls late evening, and disconnects after disturbing behavior Requesting strict investigation and action @DelhiPolice@CyberDost@TRAI
caller Number : 917412890837
In one recording, asked βKisse baat karni hai?β and the caller replied βAap seβ in a suspicious and harassing manner. Caller repeatedly avoids identification, keeps calling, and disconnects after vague replies. @CPDelhi@DoT_India
Microsoft just launched Agent 365 today
AI agents now have a dedicated
governance layer inside enterprise
Multi-model orchestration: Claude, GPT, and Microsoft models all running on the same task
The "which AI tool" debate is over
Now it's "who governs the agents."
#AI#DevTools
The MERN interview question that filters real understanding:
βWhat happens from typing a URL to seeing a React app?β
If you can explain this cleanly, you understand the web. π
#MERN#WebDev#Interviews
Full chain = DNS β TCP/TLS β HTTP β HTML/JS β React β API β State β DOM
Not memorization. Mental model.
Explain this once clearly = strong engineer signal
#SystemDesign#MERN#TechInterviews
Reconciliation: React diffs virtual DOM
Updates only changed nodes in real DOM
Browser paints pixels β user sees UI
Fast because updates are minimal
#React#Performance#WebDev
Answer: 1, 4, 3, 2
Why: setTimeout goes to macrotask queue. Promise.then goes to microtask queue. Microtasks always run before macrotasks, even with 0ms delay.
This is asked in every senior Node.js interview.