KJ

security audits for founders who built fast with AI and skipped the security pass.

[KJ @hollowbytesec]

“cooked” CS grads, pls for the love of god LEARN NETWORKING OR CYBERSECURITY. Hate to say it but conventional SWE is dead.

Big fan of certs personally. Oh, and networking (the people kind), showers too

Thats all, kthxbye 👋

[KJ @hollowbytesec]

@pkellner @Lovable @tan_stack Nonprofits are definitely a great use case for Lovable. Do you know what kind of data they are working with?? Donor info, volunteer management, etc etc?

[KJ @hollowbytesec]

@ShubhangiYaps It's insane how quickly you can bring something together with lots of these tools. Curious though, whats the app? Always fun looking at these things

[KJ @hollowbytesec]

@Malerm_crypto @w3arew3 Nice, payment workflow in a day is quite the feat!! Being said, curious what are you using for your backend?? And how are you handling the transaction data storage?

[KJ @hollowbytesec]

People selling technical services dont seem to fully grasp that generally, their target demographics exist entirely outside of technical circles.

Its like selling oil changes to auto mechanics versus single mothers. The demographic is *crucial* here.

Anyway, more for me🍽️👀

[KJ @hollowbytesec]

Ok sorry, too real. Outta my phone, feds 👋

[Ayushi☄️ @iyoushetwt]

men will literally buy used thinkpad and install arch linux instead of going to therapy

[KJ @hollowbytesec]

@richardnystrom Just stumbled upon this build, given that many surveys die due to friction alone the one question at a time framing is perfect. All around, looking solid! 🎉

That said, just curious what you're using on the backend to store and process the response data?

[KJ @hollowbytesec]

@jithinix @AayanShips Looking sharp, one workspace for all of that is certainly an ambitious scope no doubt.

Curious, what are you building the backend on??

[KJ @hollowbytesec]

@Ongi_app @AayanShips Sounds like you're doing a great job on the security front honestly, Firebase is A1 for dealing with this kind of live data, so kudos.

Also, how are you handling auth/access control on the diary entries specifically?? client side rules or server side validation?

[KJ @hollowbytesec]

Have you ever considered selling copies of your house key at the local mall kiosk?

No?

Me neither, but i also don’t put API keys in frontend JavaScript.

#AppSec #WebSecurity #VibeCoding #APIKeys #Lovable

[KJ @hollowbytesec]

@Ongi_app @AayanShips AI in a mental health context is honestly super cool, I've always mused with this conceptually as its a fascinating application of ML.

Though storing emotional diary entries/crisis detection signals is a pretty sensitive data profile. What are you building the backend on??

[KJ @hollowbytesec]

@nolain_on_x @AayanShips I like it, four clicks from PDF to structured spreadsheet is brag worthy no doubt.

Just curious, what are you using on the backend to handle the document processing and storage?

[KJ @hollowbytesec]

@vladsiu @AayanShips Looking good! Debt management is undoubtedly a space where data sensitivity is legit. Just out of curious what the data architecture looks like on the backend?? financial data at rest is usually where things can get interesting.

[KJ @hollowbytesec]

@LeeMazzone87 @RoundtableSpace Real time cognitive assist, now that's a wild niche. Looks amazing.

What's the backend stack looking like here, Supabase presumably?

[KJ @hollowbytesec]

@papipava @RoundtableSpace Looking solid, must say,the 5 minute setup is a strong hook for the SMB market specifically.

Just out of curiousity, what are you using for the backend and how are you handling data storage for the conversation history?

[KJ @hollowbytesec]

What if i told you i have a list of every possible password combination extracted from real life data breaches?

a script to spam your login screen would only require ~30 of code.

Would you allow an exploit that a nosy 12 year old with ChatGPT access on the school bus home could do completely shatter client trust?

My friends, rate limiting is cool.

#RateLimiting #AppSec #WebSecurity #VibeCoding #Lovable

[KJ @hollowbytesec]

found 15 unauthenticated API endpoints on a live B2B SaaS, wrote to their production database twice with no login. their docs page was public and had the Upwork contract value, dev name, every client, and full architecture.

this was a paid product with real paying customers.

#appsec #pentesting #buildinpublic

[KJ @hollowbytesec]

@NoahKingJr AGI, robots, and impending doom and destruction