Balmike_dev

Tech enthusiast | Auditor by profession, Indiedev by passion 🛠️ | Learning in public: Android, web & AI | कर्मवीर | Be O+ | Patriot 🇮🇳

[Balmike_dev @BalmikeKvijay]

Supabase tip: turn on row level security for every table you create. With RLS off, anyone holding your public anon key can read the table. With RLS on and no policy, access is denied by default. Start closed, then add policies one by one.
#buildinpublic #WebDev

[Balmike_dev @BalmikeKvijay]

Never store money as a float. Store integer minor units. But "minor units" differ: INR and USD have 2 decimals, JPY has 0, KWD has 3. Keep the decimals per currency in one table, or your multi-currency totals will be quietly wrong.
#buildinpublic #indiedev

[Balmike_dev @BalmikeKvijay]

Building a location feature on Android? Test it with a mock provider, then check Location.isMock() (API 31+). Real users spoof GPS too. Decide what your app does with a faked fix instead of trusting every coordinate.
#AndroidDev #buildinpublic

[Balmike_dev @BalmikeKvijay]

A new arXiv study tested LLM code repairs after API migrations. Typical test inputs let 41% of wrong repairs ship. One edge input written from the release note cut that to 6.5%. My take: write edge cases from the changelog, not the code.
Source: arXiv #AI #LLM

[Balmike_dev @BalmikeKvijay]

Apiiro found Claude Code's "Don't ask again" option left passwords in 1,122 public GitHub files. My guess: approved commands get saved to a settings file, and that file gets committed. Gitignore your agent settings and keep secrets in env vars.
Source: Apiiro #CyberSecurity #AI

[Balmike_dev @BalmikeKvijay]

When you parse messy text, never silently drop a line that fails. Save the raw text with a "needs review" flag. Your parser will be wrong someday, and the raw line lets you fix it later without asking the user to re-enter anything.
#buildinpublic #indiedev

[Balmike_dev @BalmikeKvijay]

A new arXiv paper: a signature on an offline AI knowledge pack proves who sent it, not that its vectors match its text. Tampered vectors cut a Raspberry Pi's correct answers from 0.75 to 0.39. Signing a file isn't verifying it.
Source: arXiv #CyberSecurity #LLM

[Balmike_dev @BalmikeKvijay]

A new open speech model, Woof, is 32MB and runs in a browser tab offline, TechCrunch reports. My read: when a voice fits in the size of one photo, it becomes a free default, not a paid cloud feature. Per-word pricing gets harder to defend.
Source: TechCrunch #AI #Tech

[Balmike_dev @BalmikeKvijay]

Before you build a feature that needs a login, ask what the user already has on their phone. Bank SMS, share sheets and clipboard text carry real data. Parsing it on-device means no accounts, no password storage, and nothing to leak. Fewer moving parts.
#buildinpublic #indiedev

[Balmike_dev @BalmikeKvijay]

Store dates for recurring things (bills, reminders) as a rule plus a timezone, not a pile of timestamps. "Monthly on the 31st" needs a plan for short months. Decide it once, write a test for February, and it stops being a bug report.
#buildinpublic #indiedev

[Rajat Jain @RajatJain]

Hindus, Beware of such Fake babas😤

First he divided Hindus and Muslims, now he’s pitting Ram and Krishna devotees against each other.

We have seen him undertake politically backed yatras for a “Hindu Rashtra.” Now, mocking Lord Krishna’s name and posture.

This is their true face. For them, religion is a business and a political tool, not a source of spirituality, wisdom, or inner reflection.

[Balmike_dev @BalmikeKvijay]

Test your app's first launch in airplane mode. A lot of "it works" bugs hide in a splash screen quietly waiting on a network call. If the first screen can't render offline, users on weak signal see a blank app. Two minutes, once per release.
#buildinpublic #indiedev

[Balmike_dev @BalmikeKvijay]

A new arXiv study asked 5 LLMs to modernize 100 WordPress PHP files. 83 originals already passed every behavior check. The best model left only 59 passing. Each broke 32 to 51 working files. My take: "modernize this" without tests is a rewrite.
Source: arXiv #AI #LLM

[Balmike_dev @BalmikeKvijay]

An Anthropic VS Code extension on Cursor was backdoored for nearly 12 hours, Ars Technica reports. Editor extensions run with your full permissions, SSH keys included. Treat them like npm packages: install few, review updates.
Source: Ars Technica #CyberSecurity #Tech

[Balmike_dev @BalmikeKvijay]

Store money as integers in the smallest unit (paise, cents), never floats. 0.1 + 0.2 isn't 0.3, and a budget app that's off by one paisa loses trust fast. Convert to decimals only when displaying. In my money app, this was a day-one rule.
#buildinpublic #indiedev

[Balmike_dev @BalmikeKvijay]

Reddit is moving to a logged-in experience as search traffic dries up, TechCrunch reports. My read: AI answers now take the click, so open pages can't pay for themselves. Expect more walls. Builders: own an audience you can reach directly.
Source: TechCrunch #Tech #AI

[Balmike_dev @BalmikeKvijay]

Keep 10 real bank SMS texts (numbers scrubbed) as test fixtures for any parser you write. Banks change wording without warning, and a silent parse failure looks like a missing transaction. In my money app, that fixture file is the first thing I update.
#buildinpublic #indiedev

[Balmike_dev @BalmikeKvijay]

Before you tell users "we don't store your data", grep your logs for it. Search for a real amount, phone number or email you typed while testing. Crash reporters and debug prints keep more than you think. 10 minutes, once per release.
#buildinpublic #Privacy

[Balmike_dev @BalmikeKvijay]

Before launching on Supabase or Firebase, call your database with only the public anon key and try to read another user's rows. Ten minutes in a terminal. If you can see them, so can everyone.
#buildinpublic #WebDev

[Balmike_dev @BalmikeKvijay]

A new arXiv study kept telling Codex and Claude Code to refactor again. Across 5 models and 3,000+ turns, none stopped on their own. Some rewrote up to 31x the original code. My take: agents can't tell "done". Give them a stop rule.
Source: arXiv #AI #SoftwareEngineering