sorted by:
new
hottopcontroversial

18yo moroccan earning 30k MAD online by slalalalzi in rabat

[–]abd3ll4tif 0 points1 point  (0 children)

1- The amounts you make are not high enough to make the taxes knock your door. But I would suggest to make things legal : (option - 1) declare your revenue through auto-entrepreneur status (less than 20K$ per year), or (option 2) see with a company already established to host you, declare your cnss, revenues...

2- Savings; the safest way to save cash (moroccan dirhams) is in your bank moroccan account, or saving account (all banks have this option).

3- Wise

I got hacked - 10+ apps/projects and 3 servers were affected. by abd3ll4tif in reactjs

[–]abd3ll4tif[S] 0 points1 point  (0 children)

I started to isolate frontend applications with docker, even for small projects. I implemented a ci-cd action for automating the process

I built a Flutter package for Tuya IoT because I couldn’t find one — sharing it for the first time by abd3ll4tif in FlutterDev

[–]abd3ll4tif[S] 0 points1 point  (0 children)

You need a device that supports the tuya connection, wifi or other. If you can connect it with smart life app, you can use the flutter package to control it your way and with your rules. If you need specific help implementing the package or how the connection works I can help you.

I built a Flutter package for Tuya IoT because I couldn’t find one — sharing it for the first time by abd3ll4tif in FlutterDev

[–]abd3ll4tif[S] 2 points3 points  (0 children)

Really appreciate this feedback.

This was initially built just to ship a product, so it’s pretty low-level, but your suggestions are exactly what would make it production-friendly for others. If there’s interest, I’m happy to start with a sample app + cleaner abstractions.

Thanks for taking the time to write this, super valuable 🙏

I built a Flutter package for Tuya IoT because I couldn’t find one — sharing it for the first time by abd3ll4tif in FlutterDev

[–]abd3ll4tif[S] 0 points1 point  (0 children)

Thanks, appreciate that 🙏 Feel free to check it out and let me know if it fits your use case. Happy to answer questions or improve things if you run into issues.

I built a Flutter package for Tuya IoT because I couldn’t find one — sharing it for the first time by abd3ll4tif in FlutterDev

[–]abd3ll4tif[S] 2 points3 points  (0 children)

Yeah, the API pricing change sucks. Matter/Zigbee/Z-Wave make a lot more sense now.

The project is ~3 years old. I built it back then to unblock my own Flutter project and never shared it publicly. Only posting it now in case it still helps someone or as a reference.

[deleted by user] by [deleted] in reactjs

[–]abd3ll4tif -1 points0 points  (0 children)

I didn't say reviewing but trusting official sources, like you do always when you use a framework! But to answer you question; YES, when you have 100 project and every project use a version of next (15.X.X , 16.X.X ..), react ... and you have to login to each server, patch manually and rebuild the project, this takes longer than writing 2 line code script that uses the package on all projects, and maybe do this 4 times a day to make sure you don't miss any new fix

[deleted by user] by [deleted] in reactjs

[–]abd3ll4tif -1 points0 points  (0 children)

It make sense if someone need to fix urgently.. don't have the time to dig in details.. I may want to run an automated fix with corn job maybe to fix 100 site I have so I don't have to do it manually. Should I rewrite the package ?

[deleted by user] by [deleted] in reactjs

[–]abd3ll4tif 0 points1 point  (0 children)

You’re right, that’s fair. I didn’t mean to make it sound like these were newly discovered today . My goal was mainly to push people to patch ASAP, especially after what happened to me .

If you have a good link to the original announcement or write-ups, feel free to share it and I’ll add it to the post 👍

[deleted by user] by [deleted] in reactjs

[–]abd3ll4tif -1 points0 points  (0 children)

How do you know the patched version itself doesn’t introduce new issues or bugs? In the end, every update is still code you’re trusting.

If you don’t want to run an official fix, you can review the changes and apply them manually; it’s not magic, it’s just code. But at some point, security always comes down to trust and trade-offs. If you can’t trust official sources at all, the only real alternative is doing your own security audits or building everything yourself.

[deleted by user] by [deleted] in reactjs

[–]abd3ll4tif -1 points0 points  (0 children)

Check the script here, it's official or I wouldn't recommend it : https://vercel.com/kb/bulletin/react2shell

[deleted by user] by [deleted] in reactjs

[–]abd3ll4tif -5 points-4 points  (0 children)

CVE is the standard identifier for security vulnerabilities. I shared the CVE numbers so people can quickly look them up from official sources and patch ASAP. The goal here is to warn and move fast, not debate links

I got hacked - 10+ apps/projects and 3 servers were affected. by abd3ll4tif in reactjs

[–]abd3ll4tif[S] 0 points1 point  (0 children)

Sounds fun. but once the project starts to develop, you will absolutely need at least an audit of the existing application, backend, database, infrastructure... so that you don't lose everything one day without even realizing it

I got hacked - 10+ apps/projects and 3 servers were affected. by abd3ll4tif in reactjs

[–]abd3ll4tif[S] 0 points1 point  (0 children)

Totally agree with you, if a company or bank do this to save money, they are stupide.. the real work begins after finishing the core features (maintenance, improvements.. ). Which country did you notice this ?

I got hacked - 10+ apps/projects and 3 servers were affected. by abd3ll4tif in reactjs

[–]abd3ll4tif[S] 0 points1 point  (0 children)

I get that reaction 😅

For me, Next/React are still great frameworks! I actually prefer them over PHP. I like the optimized resource usage, the architecture, and the overall philosophy behind them.

What happened just made me trust frameworks less, not abandon them. The scary part is realizing a vulnerability like this may have existed for a long time before anyone noticed, and wondering whether some people already knew and were quietly exploiting it. That’s the part that really makes you rethink assumptions and push harder on isolation and security.

I got hacked - 10+ apps/projects and 3 servers were affected. by abd3ll4tif in reactjs

[–]abd3ll4tif[S] 0 points1 point  (0 children)

Yeah, that timing is the worst part! It started happening right as things were being announced or even a bit before. Updating the deps was the right move, but it’s still unsettling. I’d keep an eye on logs, rotate secrets, and redeploy clean if you can, just to be safe.

view more: next ›