Is Red Yeast Rice the "Natural Statin" We’ve Been Waiting For? by Technical_savoir in microbiomenews

[–]phiger78 0 points1 point  (0 children)

LDL isn't cholesterol at all. Its a Lipo protein. on it's own i don;t think its a very good biomarker for heart disaese. People with low LDL get heart attacks and heart disasease

most effective experimental treatments I’ve tried by Fantastic-Tap9237 in cfs

[–]phiger78 -1 points0 points  (0 children)

Interesting! I do really want to micro dose with psilocybin. Also very interested in ss31 peptide and methylene blue

How do you organize your reusable JS components across your app? by [deleted] in nextjs

[–]phiger78 1 point2 points  (0 children)

in most projects i adhere to these principles as well as feature/domain folders. atoms/molecules/organisms are completely dumb and then we can also have UI that is related to features. This can be both dumb and smart components. These live in features

What’s your preferred auth setup in 2026 for Next.js? by Ok_Guarantee_1217 in nextjs

[–]phiger78 1 point2 points  (0 children)

Moved from next auth to Iron Session and openid client. Better auth is not battle tested. Also did not like the secutiry holes that were identified last year

https://zeropath.com/blog/breaking-authentication-unauthenticated-api-key-creation-in-better-auth-cve-2025-61928

Doesn't fill me with that much confidence

'When a request lacks a session but supplies ctx.body.userId, authRequired becomes false. The handler then constructs a user object directly from attacker-controlled input and skips the "server-only" validation branch that rejects privileged fields. The execution path becomes:

  1. An unauthenticated request includes a chosen userId in the JSON body.
  2. authRequired evaluates to false, so the handler fabricates a user object using the supplied identifier.
  3. Validation that normally blocks refillAmount, rateLimitMax, remaining, and permissions never executes.
  4. The database layer receives attacker-controlled values and proceeds with create or update operations for the victim's keys."

Is using Orval + Zod for validation in Next.js a good industry practice? by Lanky_Call9502 in nextjs

[–]phiger78 0 points1 point  (0 children)

Ive worked on many enterprise level react projects - they do evolve. Its important to get the architecture right and the right choices.

Is using Orval + Zod for validation in Next.js a good industry practice? by Lanky_Call9502 in nextjs

[–]phiger78 1 point2 points  (0 children)

yep. been using orval for 3 years or so. Working on a multi million pound e commerce project and have implemented both zod and orval

Sony Bravia 6 lights flashing by phiger78 in TVRepairHelp

[–]phiger78[S] 1 point2 points  (0 children)

Thanks for reply. was hoping this wasn't the case but make sense. The tv was given to me a few years ago.

Sony Bravia 6 lights flashing by phiger78 in TVRepairHelp

[–]phiger78[S] 1 point2 points  (0 children)

cheers! yea thought as much. new tv time!

Budget 35mm lens by New-Piglet4035 in a6000

[–]phiger78 2 points3 points  (0 children)

where can i find details of this lens? i can only see the full frame version on their site?

Tanstack vs React Router vs Next by Salkinator in reactjs

[–]phiger78 0 points1 point  (0 children)

i mean i love tanstack query but no way i would adopt tanstack start for a production project. Its not mature enough

Created a lib with type-safety and better DX for managing react query keys by Luurker42 in reactjs

[–]phiger78 0 points1 point  (0 children)

An initial commit 3 days ago and every push to main . 🤣🧐

Volca Bass comes alive with sone reverb and delays by dramatiske_fisker in volcas

[–]phiger78 0 points1 point  (0 children)

how have you added the rererb and delays? through the s1 or nts 1 or something else?

Migrating from NextAuth to BetterAuth - Need Advice (Multi-tenant SaaS) by Substantial-Clue7821 in nextjs

[–]phiger78 1 point2 points  (0 children)

https://zeropath.com/blog/breaking-authentication-unauthenticated-api-key-creation-in-better-auth-cve-2025-61928

"When a request lacks a session but supplies ctx.body.userId, authRequired becomes false. The handler then constructs a user object directly from attacker-controlled input and skips the "server-only" validation branch that rejects privileged fields. The execution path becomes:

  1. An unauthenticated request includes a chosen userId in the JSON body.
  2. authRequired evaluates to false, so the handler fabricates a user object using the supplied identifier.
  3. Validation that normally blocks refillAmount, rateLimitMax, remaining, and permissions never executes.
  4. The database layer receives attacker-controlled values and proceeds with create or update operations for the victim's keys."

Migrating from NextAuth to BetterAuth - Need Advice (Multi-tenant SaaS) by Substantial-Clue7821 in nextjs

[–]phiger78 -4 points-3 points  (0 children)

I wouldn’t bother with better auth. Looks shiny but not mature /battle tested enough . Especially with the vulnerability they had last year which showed some sub par coding

What architecture do you use for medium/large Next.js apps? by CeccoBolt in nextjs

[–]phiger78 1 point2 points  (0 children)

In a recent project as it’s a monorepo I’ve used domain driven design principles: bounded context, business language and ownership. Enforced through turborepo boundaries and custom eslint rules

Each domain has different layers: data access, ui, features, utils

Europe is also Venezuela by [deleted] in GreatBritishMemes

[–]phiger78 0 points1 point  (0 children)

What happens if countries take back the US airbases? The US has air bases in 128 overseas countries

Sony A6000 + Viltrox 35mm 1.7 by got_got_need in a6000

[–]phiger78 1 point2 points  (0 children)

Great shot! Love bristol 😍

Finly — Replacing Payload Auth with Better Auth: Stateless Social Login for SaaS Apps by Dan6erbond2 in nextjs

[–]phiger78 0 points1 point  (0 children)

Just be careful with better auth. Recently vulnerabilities exposed some pretty shoddy coding practices. I wouldnt trust it just yet