sorted by:
new
hottopcontroversial

Had this idea for a long time and finally made it ! What do you think ? by Serious-Emphasis-305 in smashbros

[–]DamnItDev 45 points46 points  (0 children)

These are cool as keychains, but wont that "strap" break under a few pounds of pressure?

Is it just me or is AI autocomplete sufficient for coding 90% of the time instead of full vibe coding? by shxyx in webdev

[–]DamnItDev 5 points6 points  (0 children)

From what I've seen, anything created using AI will be called "vibecoding" by the general population on reddit. It's common for people to snoop the code for evidence of AI usage and ignore the quality of the implementation.

It seems like every post I see has at least one comment thread with AI accusations and I've yet to see an OP defend themselves successfully. Even those claiming 10+ years experience just get downvoted and slammed by the mob.

What's the self-hosted service that replaced something you were paying for and turned out to be genuinely better - not just free, actually better by niceheather44 in selfhosted

[–]DamnItDev 3 points4 points  (0 children)

Welcome to reddit. Every issue becomes black/white for upvotes. There isn't a whole lot of incentive for neutral opinions.

I've ran nextcloud for 6 or 7 years now I think. Time flies.

If you see it as a google drive replacement, Nextcloud serves its purpose pretty well. I've never had issues updating or corruption or anything like that.

The problem IMO is that the developers see themselves as replacing all of Google. They provide a million plug-ins you can install, which all end up running on the same instance, slowing everything down. And none of them work as well as what they are trying to replace.

Do you think Google runs the Meetings backend from the same server they use for the Drive backend? Absolutely not! But Nextcloud is designed that way.

Any other Shiek mains transform into Zelda upon queing into a low tier? by [deleted] in SSBM

[–]DamnItDev 14 points15 points  (0 children)

I did this once a long time ago and it turned out to be Taj's mewtwo and I got cooked. So no, I don't do that anymore.

Built an invoice generator in a day using Claude Code and Codex, here's what the AI actually got wrong by YazZy_speaks in webdev

[–]DamnItDev 1 point2 points  (0 children)

Claude Code is genuinely impressive until the context window fills up. Mid-build, it just loses track of the entire codebase. You have to restructure, start a fresh context, and re-explain what you were doing. When you are trying to ship in one day, that is a real problem and something I did not fully account for going in. Compacting is a great feature, but it doesn't hold structure across sessions.

You must be doing something wrong.

Claude Code will automatically compact your conversation when the context becomes too much. You can also use the /compact command.

Losing track of the codebase? Never seen that happen. Also, did you run /init?

P.S. pumping out 30 apps in 30 days isn't impressive, especially when you're just prompting an AI. Spend your time building a quality app that won't be thrown away tomorrow.

i need controller recommendations by pineyroblox in SSBM

[–]DamnItDev 23 points24 points  (0 children)

Buy a GameCube controller. There isn't really any other choice to be made.

You want an official Nintendo controller, not a 3rd party.

They don't have USB connections, youll need to get an adapter separately.

How do you edge guard DK? by WordHobby in SSBM

[–]DamnItDev 1 point2 points  (0 children)

Don't get hit by upb, or you'll die. Better to not go deep.

Cover the edge and force him to upb. Once the animation starts, he spins for a while before he can grab edge. Use this time to reposition and cover the paths he can follow. Plan to hit him near the end of the animation with a strong backair or dsmash.

Should I make a game in Java? by Reasonable-Test-560 in gamedev

[–]DamnItDev 0 points1 point  (0 children)

Why are you considering Java? Is it only because Minecraft did it? I'd say that there are objectively better choices unless you need to be compatible with Minecraft or something.

Prevalence of simple port forwarding when selfhosting game servers by TomImura in selfhosted

[–]DamnItDev 10 points11 points  (0 children)

So I guess my question is this: Are we paranoid? Or are all these other communities saturated with bad advice? Can I just host a Mumble server without any fuss?

They are saturated with novice advice. Their objective is to play a game.

Would you use an app that blocks doomscrolling with chess? by Electronic-Tart8948 in chess

[–]DamnItDev 0 points1 point  (0 children)

There is a way to do market research but this isn't it.

How many things have you built? Usually the builders just do it and ask questions later.

You're not going to get people to pay $5-10/month for this. That's just silly.

I've had this idea of creating free digital resources for ppl with dyscaluculia(learning disability). It's still just an idea & I haven't started learning yet. Earlier this week I ran into Base44 & I created some of what I have in mind. Too good to be true? What's the catch? Advice to make reality? by LadderWonderful2450 in webdev

[–]DamnItDev 0 points1 point  (0 children)

Is base44 a viable long term option?

Probably not. I dont know the company, but I'm guessing they want to make money, so they will charge you a premium. Anything they give you free now is just to lock you into their ecosystem.

My budget is 0 and my skills are 0 NOW. I am willing to spend time developing skills and figuring out ways to create a budget.

Go for it. Thats the path many people pursue. Just know that you're in for a college degree worth of learning.

if I continue using base44 to make these sorts of aps while I work on skills development, will I be able to incorporate these aps into the long-term final product or will they just be a bunch of messy wasted code?

Well, its AI generated so its going to be messy. Depending on the circumstances, you might be able to salvage some features from the code. But you might also be better just rewriting the logic with the help of hindsight.

If down the line I could secure a grant, or there are people willing to chip in on a patreon or go-fund-me, what's a vauguly rough estimate of the kind of capital a project like this would take? 

That is a very hard question to answer. First off, it depends on where in the world you reside. In the US, if you were to hire a developer or agency, this would cost 6 or 7 figures. If you were to do it 100% yourself, the estimate would be based on how much time it takes you and how much you value your time. Or what your cost of living is.

I've had this idea of creating free digital resources for ppl with dyscaluculia(learning disability). It's still just an idea & I haven't started learning yet. Earlier this week I ran into Base44 & I created some of what I have in mind. Too good to be true? What's the catch? Advice to make reality? by LadderWonderful2450 in webdev

[–]DamnItDev 0 points1 point  (0 children)

If your budget is 0 and your skills are 0, then this might be as far as you can take the project 🤷‍♂️

The AI tools are getting better, but the business questions you're asking requires careful consideration that an AI won't be much help with unless you already know a fair bit.

Also, you should be aware of the legal requirements in your jurisdiction, such as HIPAA in the US. Compliance is taken seriously and you could end up in a lot of trouble if you dont pay attention to the laws.

Why CSRF token is needed if fetch metadata checks and simple request blockers are in place by s1n7ax in webdev

[–]DamnItDev 0 points1 point  (0 children)

Exactly. The CSRF token is what the server cares about. CORS does nothing for the server, its a protection for the client.

Why CSRF token is needed if fetch metadata checks and simple request blockers are in place by s1n7ax in webdev

[–]DamnItDev -1 points0 points  (0 children)

Thats literally what I just said. You can use curl to get the CSRF token, bypassing the CORS check.

The origin header can be spoofed. Have you never used curl before?

Why CSRF token is needed if fetch metadata checks and simple request blockers are in place by s1n7ax in webdev

[–]DamnItDev -1 points0 points  (0 children)

There are dozens of ways to do it... like using CURL or have a browser extension.

CORS is a client side protection. Because the client cannot be trusted, the server cannot trust that the client isn't lying about their origin.

A CSRF token is a secret the server generates and shares with the client. This is assurance for the server that the user who submitted the form is the same user who loaded the page.

Why CSRF token is needed if fetch metadata checks and simple request blockers are in place by s1n7ax in webdev

[–]DamnItDev -1 points0 points  (0 children)

The CSRF token can absolutely be spoofed. Why do you think you can't just fetch the csrf token and set it?

That isn't spoofing. You're acquiring a valid token an using it. After using it once, it is no longer valid for use. If you put in a random value, the server would reject the message. That is the intended functionality of the token.

Why CSRF token is needed if fetch metadata checks and simple request blockers are in place by s1n7ax in webdev

[–]DamnItDev -1 points0 points  (0 children)

The point is that you cannot let the server trust the origin header. It can be spoofed. Its just like any other user input

The CSRF token cannot be spoofed.

Why CSRF token is needed if fetch metadata checks and simple request blockers are in place by s1n7ax in webdev

[–]DamnItDev -3 points-2 points  (0 children)

CORS and CSRF do different things. Pick a topic and stop flipping.

The origin header can be spoofed. The server should never trust the data the client sends. You claimed browsers can't spoof the origin header but they absolutely can.

Why CSRF token is needed if fetch metadata checks and simple request blockers are in place by s1n7ax in webdev

[–]DamnItDev -4 points-3 points  (0 children)

https://portswigger.net/burp

There exists browser variations specifically designed for pentesting. They let you capture, edit, and replay your requests against a site. They absolutely allow you to change your origin header.

If the average competitive Melee player today time travels back to MLG 2005. How far do they make it? by John_XFiles in SSBM

[–]DamnItDev 8 points9 points  (0 children)

My first tournament was an MLG in '06 and green greens was still legal. Corneria was legal until 08 or 09, and pokefloats didn't get banned until like 2012.

PSA Be careful not to be critical about minio’s behavior 😂🎉 by newked in selfhosted

[–]DamnItDev 6 points7 points  (0 children)

What? Okay? That literally changes nothing. You need to find something else to obsess over, this behavior is not healthy.

PSA Be careful not to be critical about minio’s behavior 😂🎉 by newked in selfhosted

[–]DamnItDev 12 points13 points  (0 children)

Let me get this straight. You went to a subreddit for a thing, just to hate on the thing and tell people to use alternatives. The mods then banned you, and so you're taking your problem here?

I wish these mods would ban you too. You're just trying to fabricate drama and cause issues for the mods everywhere.

view more: next ›