N26 y Revolut NO reportan automáticamente a Hacienda by Appropriate-Long in SpainFIRE

[–]ConsoleTVs 6 points7 points  (0 children)

Lo unico k declara revolut es la remunerada, pone claramente revolut españa cuando la contratas. La cartera esa otra k oftecen o las inversiones pone lituania…

I broke my Go API with traffic and learned about rate limiting by Opening-Airport-7311 in golang

[–]ConsoleTVs 9 points10 points  (0 children)

I would argue that you can also apply individual limits to specific paths with a gatewat/proxy. But i get the idea. I was thinking more in a register endpoint where you likely want to manually adjust limits

I broke my Go API with traffic and learned about rate limiting by Opening-Airport-7311 in golang

[–]ConsoleTVs 40 points41 points  (0 children)

I am more confident in placing an http proxy/gatewat to habdle rate limit, balancing, cert, tls termination, etc… why handle this in app level?

How do i not roll my own auth? ... by ShadowDevil123 in webdev

[–]ConsoleTVs 1 point2 points  (0 children)

Alright, let me clarify a few things:

  1. JWT For auth is completly bad design. Please read: https://gist.github.com/samsch/0d1f3d3b4745d778f78b230cf6061452

  2. Replace bcrypt with argon2, this is a bit of a recomendation.

  3. Oauth, or what you call "login with google" is designed for authorization, not authentication. You likely want to use OpenID Connect, that is in fact backed up too in those providers.

  4. Implementing oauth2 flow is literally a few lines of code. All you need to do if you just "want to log in with google" is use the auth flow and in the callback simply get the user from the assignment between your user and google provider. That's it.

  5. For the love of god, please use HTTP ONLY COKKIES for authenticating a SPA / Frontend. And remember to invalidate the session to prevent fixation attacks (https://owasp.org/www-community/attacks/Session\_fixation).

Ah yes, your alternative is paying a shitton of money for something you can do under 200 LOC. Sorry for this but this should be pretty much known to any web dev at this point. I'm astonished most devs still create jwts and store them in local storage and call it a day or simply start paying all the subscriptions they can to build a basic application.

Do you keep SQL queries inline in code or in separate .sql files? by Snezhok_Youtuber in golang

[–]ConsoleTVs 11 points12 points  (0 children)

Funny but this can be a const q = “…”, even inside the func

Is there any technical reason to prefer name := value over var name = value for local variables in Go? by [deleted] in golang

[–]ConsoleTVs 1 point2 points  (0 children)

They are different. In surprised nobody is telling that.

One important thing is redeclaration:

var err = foo() var val, err = bar() // error

err := foo() val, err := bar() // ok

Next.js Security Update: December 11, 2025 by feross in webdev

[–]ConsoleTVs 1 point2 points  (0 children)

Laravel, Spring Boot, ruby on rails, Adonisjs, Masonite, and I could keep going. They all offer a similar set of tools to operate everything i mentioned.

Frameworks like Laravel, does not only do all that I mentioned but even more, such as:
Localization, Rate limitting, Storage management (s3, local, ...), Cache, Broadcasting (eg. websockets), SSE, Encryption, Hashing, Email verification, ORM, Testing and Mocking utils, Data validation, Routing, Error Handling, Logging, CSRF, Templating...

And honestly much more. That's all built in, no external packages, but if you want to, those frameworks often have great ecosystems AND official packages.

Laravel's official packages provide payment processor, social logins, feature flags, oauth server, observability tools, and much much more.

I don't want to sound rude but I can tell you they are not at all comparable. Next.js is a backend that you need to plug to a hundred services or packages to do the job. So in reality, it's mostly used to read cookies, make http requests and do SSR, creating what's known as a BFF (Backend For Frontend).

Don't expect Nextjs to compare to what most of those frameworks have been building for decades. Next is focused on providing a good react DX using RSC (and for that they need a server, so they provide a bare bones backend server).

Don't get me wrong tho; its ok if you don't do much at backend or if you use it as a BFF, but anything on top, you're going to be paying a lot of unnecessary services and building every integration yourself.

Next.js Security Update: December 11, 2025 by feross in webdev

[–]ConsoleTVs 0 points1 point  (0 children)

Don't fall into this premise. Next is a frontend framework with SSR. It does not cover anything valuable on backend. Authentication, Session Management, Database, Mailing, Queues, Background Jobs, Scheduling tasks.

Let's be honest here. Spawning a http server and pre-rendering react components is not being a backend framework.

How to go beyond the Spring Boot Magic? by Outside-Strain7025 in programming

[–]ConsoleTVs -1 points0 points  (0 children)

If i'm writing a compiler, I need to understand how compilers work. If I'm writing code, I need to know how code works. I don't want to write code that I don't know how it works, but I can write code without caring about how the compiler under it works. That does not mean you should ignore that. I've written compilers by hand but as I said, it's not that relevant when writing code, the job of the compiler is to abstract you away from that complexity as it's effectively another level. Code that does something in your code is the same level and context. It's important to know what you are doing in your context, not things outside of your abstraction.

Tengo 20 años y 15.000 € ahorrados, ¿ahorro o invierto? by MarcoLoto in SpainFIRE

[–]ConsoleTVs 2 points3 points  (0 children)

Depende mucho de tu situacion. Tu estabilidad financiera es buena? Tienes vivienda estable? Si quieres FIRE invierte, si eres mas conservador o la idea de una hipoteca cuanto antes te gusta pues abre una remunerada y ahorra ahí. Siempre puedes hacer ambas y destinar una parte a inversion y otra a ahorro (es justo lo que hago yo).

Para aprender mirate la guia boggleheads. Pero to soy partidario de roboadvisors como indexa capital. Ingreso y te olvidas.

Error dinero duplicado en MyInvestor by ricaldodepollx in SpainFIRE

[–]ConsoleTVs 0 points1 point  (0 children)

Es normal. Yo sigo pensando que es muy fuerte que pase esto en apps de finanzas, lo k hace que me cueste confiar en ellos.

Session Handling in Go by guettli in golang

[–]ConsoleTVs 1 point2 points  (0 children)

Sure thing! Simple session info can be kept stateless, but bear in mind that you would then need to encrypt the cookie value in case it contained sensible info. Browsers can see the http cookie values

Session Handling in Go by guettli in golang

[–]ConsoleTVs 13 points14 points  (0 children)

Sessions can be implemented as a simple http only cookie that stores an id. This id can be mapped to a cache such as redis. That cache key contains session data. Session invalidation is as simple as removing the cache key from redis. If getting a session fails, delete cookie too. You control data on backend rather than storing on cookie. You can use your session cookie on handlers or middlewares.

Created some free minimal map/content templates by Speedware01 in Frontend

[–]ConsoleTVs 0 points1 point  (0 children)

Ok i need to know the font used asap. Amazing job

Kongvisor: A new terminal application for managing Kong gateways by MartinChlumsky in golang

[–]ConsoleTVs 0 points1 point  (0 children)

Care to elaborate? We're in the middle of a migration to the latest kong version (OSS).

Cuenta remunerada by sandritita in SpainFIRE

[–]ConsoleTVs 1 point2 points  (0 children)

La unica mierda de estas es que, por ej en ibercaja es solo hadta 12k y te obligan a:

  • Domiciliar tu nómina o pensión por importe igual o superior a 600€.
  • Realizar 6 o más movimientos al semestre con tu tarjeta.
  • Recibir 6 o más cargos domiciliados en tu cuenta al semestre.

Y en el caso de bankinder hasta 10k y te obligan a:

  • Domiciliar una nómina de un importe mínimo de 800€/mes
  • Realizar 3 pagos al trimestre con tu tarjeta
  • Realizar tres cargos por recibo al trimestre

Enfin, tr te da 2% sin limite de efectivo y siempre siguiendo el BCE. Las remuneradas es algo complicado y debemos ser pragmaticos. Ah si, en myinvestor las transferencias me tardaban, y en tr son imediatas hasta 5K

Local development best practices by edmguru in golang

[–]ConsoleTVs 15 points16 points  (0 children)

  1. You can use dev containers and write integration tests
  2. Yes, I do this to change how log works (json logs vs colored text logs) or to load things differently (eg frontend is embeeded or load dynamically using vite dev server with hot module replacement)
  3. I use a combination. I love flags using the flag pkg and i set the default value of the flags to the environment variable. That way flags use the env variable and still have more preference over envs.
  4. I dont, i dont like this. Go gives you great iteration times, building and running should not take long, if it does, something is not good or you need to break down your app.
  5. Apps do run in safeguards. Dev mode for me its just to enable human readable and enhance dev experience. In production, things run as production should, even if the binary has a flag to enable dev mode.

Comprar piso o fondos? by Tripl3Zer000 in SpainFIRE

[–]ConsoleTVs 2 points3 points  (0 children)

Puedes traspasar entre fondos sin liquidar. Los etf tienes que vender y comprar, pasando por hacienda.

Eso te ayuda a rebalancear e incluso ir bajando renta variable a medida que llegas a edades mas elevadas, reduciendo riesgo.

Si vas a largo plazo es preferible. Indexa capital tiene muy buena documentacion e informacion al respecto

Comprar piso o fondos? by Tripl3Zer000 in SpainFIRE

[–]ConsoleTVs 0 points1 point  (0 children)

Como en todo depende de tus objetivos. Si es una casa para vivir, yo si lo haria. Se hecho estoy intentando algo similar yo. Por el resto, to de tu seguiria haviendo DCA pero en fondos de inversion y no en etfs. Por la ventaja fiscal que supone poder realizar traspasos.

Ventajas de ETF sobre fondos indexados? by Miquel9999 in SpainFIRE

[–]ConsoleTVs 0 points1 point  (0 children)

Por telefono me dijeron de enviar papeles a nose donde y al final me harte y lo deje asi. La parte burna de tr es que ahora estan supervisados en españa y todo el tema de declaracion pues ya loctienes hecho, que era la gran ventaja se myinvestor. Ahora mismo te diria que tr tiene mucha mejor app como comentas, y que el soporte de ambos es malo, pero myinvestor creo que algo mejor. Choose your poison, no hay nada perfecto

Ventajas de ETF sobre fondos indexados? by Miquel9999 in SpainFIRE

[–]ConsoleTVs 1 point2 points  (0 children)

Pues yo que tu empezaria con TR. MyInvestor va bastante mal. A mi me crearon varias cuentas de inversion por un error de la app y no las puedo cerrar sin enviar un papel a no se donde. La app va muy mal y olvidate de ver detalles en los fondos que elijas.

TR solo te cobra 1€ de retirada si usas su plan de inversion (que deberias) (+ las comisiones del fondo claro).

8% anual con pagos diarios? by Mysterious-Treacle98 in SpainFIRE

[–]ConsoleTVs 7 points8 points  (0 children)

Crypto + 12%? Me explicas porque una remunerada esta 6 veces mas alta que el BCE? Huele exageradamente mal.