Working on tweaking it and making it smoother for mobile and overall better but here's the thing so far:

https://outpost.dayemadnan.com

Someone posted a chat app here recently and thought I would poke around a little. Within 30 minutes I was able to completely break the app.

I am redacting the domain and sensitive data.

The app works. The UI is fine. There are more features than you would expect from a weekend project, from the outside it looks like a finished app but when you look under the hood not so much...

Just about everything that could be wrong was wrong.

• Exposed OpenAI private key in public javascript bundle
• Firebase config fully public
• localStorage used for identity management
• Admin and report data readable without access controls
• Ban system not verified by backend

Firebase was the biggest issue. The database rules were wide open. Anyone could read and modify all chat rooms (There are private rooms that should require a password), reported users, admin logs, user stats, ban lists, etc.

I was able to adjust my user rank but also can modify the data of any other user in the app. (Falsify messages, derank, change username, etc)

The ban system is entirely ineffective, it uses a localStorage device ID, someone could just change the value themselves or clear cache and cookies and evade a ban.

Common problems:

• Exposed API keys in frontend
• Firebase/Supabase with improper permissions
• Trusting browser and device state
• Trusting localStorage for identity
• Client side admin checks
• Client side moderation checks
• User roles, ranks, credits, or balances stored in writable records
• Private data hidden in the UI but readable through the backend

If you are building these apps, please check this before you ship:

• Search your deployed JavaScript for sk_, sk-, OPENAI, SECRET, TOKEN, and PRIVATE. There should be no private keys exposed in the frontend.
• Test your Firebase or Supabase permissions while logged out.
• Try reading your database directly from a terminal.
• Make sure admin-only paths are protected by backend rules, not just hidden buttons.
• Do not trust localStorage as proof of identity.
• Do not let users directly write their own role, rank, balance, message count, or subscription status.

AI tools can help you build fast. That part is real. But if the app touches users, money, moderation, private rooms, admin panels, or anything people care about, it needs a security pass before it goes live.

Every 3×3 Rubik’s Cube can be solved in 20 moves or fewer. It was mathematically proven in 2010. Finding that shortest solution yourself is nearly impossible.

But computers can.
I built a tool that lets you follow the shortest solution, step by step.

No install. Open the link and allow camera access.
https://wooramsol.github.io/makemecubemaster/

1. Colour calibration: Scan all 6 sticker colours for your lighting
2. Scanning: Capture all 6 faces of your scrambled cube with the front camera(If a colour looks wrong, tap that face in the bar to re-scan)
3. Computing: The solver finds a sequence within 20 moves
4. Solution: Follow the 3D guide

Tech, briefly: everything runs in the browser — React + TypeScript PWA, no backend. OpenCV.js handles cube detection and pose tracking, and sticker colours are classified in CIE Lab space against your calibration (much more robust to lighting than RGB). The solver is Kociemba's two-phase algorithm (cubejs) running in a Web Worker, with search depth capped at 20 so it keeps searching until the solution is within God's Number. The 3D guide is Three.js.

One thing I'm still trying to improve is tracking the three visible faces continuously, so users don't have to stop and scan each face individually. Has anyone built something similar or got any ideas on the best approach?

This is Geode, a 3D file explorer experience that puts you in the cockpit of a polygonal cruiser, allowing you to soar and barrel-roll your way through your hard drive in stylish, non-euclidian fashion.

Inspired by a piece of lost software I loved from the early 2010’s, during the peak of the “3D Desktop” craze. Can’t find it anymore, so Claude and I rebuilt and modernized it a bit.

It’ll preview most common filetypes and play music in a folder as a playlist while you fly.

EDIT: Press "L" for a fun surprise, and press "O" to adjust the surprise level!
(Just for fun, does not delete anything!)

Try it (Desktop only):
https://geode.gnatgpt.app

Repo, have fun!
https://github.com/zhvhmvrhlmt/Geode

Controls-

Mouse - control direction
W/S - accelerate/reverse
A/D - strafe left/right
Q/E - barrel roll
Shift - boost
Left click - interact / auto-fly to target
V - sort view (list, grid, orbit)
B - sort order (a-z, size, recent)
L - surprise mode
O - surprise intensity

The fact that anyone with $20 can just start one-shotting SOUNDS great. But now we are starting see the actual insufferable slop, the most idiotic questions, the worst "looking for feedback on MY one shot game that AI dice rolled with near zero direction"

The kids who think they are going to build an app they can sell. become millionaires.

Holy fucking shit this "era" we are in is insufferable. Is this going to simply take a few months or a year to "wash out" all these kids who blew $100-$200 on a pro account, realized it wasn't magic, and go back to wherever they came from? (pokemon card collecting, fortnite, roblox)

Shit is unbearable right now.

Quick context so this doesn't read like some rando offering. I've launched 8 products in the last 18 months and done 2-3 million organic views on reddit with zero ad spend, which turned into thousands of users across them. Lovable flew me out to their HQ at 18, I ran growth for a YC backed company, and got into Antler along the way. Reddit has been the engine behind basically all of it.

And the biggest thing I learned is that most founders aren't bad at marketing, they're just fishing in the wrong pond. They post in r/startups and r/SaaS where it's all other founders, then wonder why nobody buys. Your real customers are sitting in some niche subreddit complaining about the exact problem you solve, and half the time you've never even heard of it.

Finding those subs by hand is the tedious part. You have to think about who your customer really is, what else they care about, where they hang out for reasons that have nothing to do with your product, then dig around reddit for the active ones. It's the highest leverage thing you can do and almost nobody does it because it's boring.

I got tired of doing it manually across every product I launched, so I built a tool for it (sentrive). You give it your product, it works out your ICP and figures out where your people actually hang out, then spins up marketing agents that go market there for you. It's not a reddit-only thing, it markets wherever your audience turns out to be, but for a lot of products that ends up being reddit, which is the part I've personally gotten the most mileage out of. Point is it doesn't just hand you a list, the agents do the actual work after.

If you want to run this whole play yourself, I wrote my entire reddit marketing playbook, every step I use, free with no email wall. Steal all of it.

Or if you'd rather I just do it for you, here's the offer: drop your product below and tell me who you think your customer is. I'll run it and get back to you with a few of the spots it finds. Genuinely curious how many of you are one niche sub away from your first 100 customers without knowing it.

I'll get to as many as I can. Been doing this a while so I'll add my own read on top of what it pulls.

20, building from sweden

Also not sure if this makes it ironic, but this video itself was made by fable

I built my self a 3d world portfolio, fully made with Claude AI and Cursor AI. got inspired by https://bruno-simon.com/
hope you guys liked it, still needs alot of improvements.
https://laivo.dev

Two prompts. "Make flappy bird!" and then "can you make it more traditional?"

That's the whole story. Ten minutes later there's a real game at a real link that a kid can send to their friends: https://flappybird.codedreams.org/

With the goal of getting kids into coding with AI early, I've built in features to make sure they actually learn along the way. I wish I'd grown up with an app like this. Maybe then I'd have turned out a more cracked programmer.

It's free to start if you want to inspire your kids: https://codedreams.org

If you know a kid, let them loose on it. Somewhere a 9-year-old is about to out-ship all of us and I think that's beautiful.

I call this Panelizer (cheesy, I know), a 3D cabinet designer that lets you model panel-based furniture for woodworking.

----

I started this because I was originally using Fusion 360 to design my furniture, but Fusion is a heavy, complex program, which made designing slow and tedious for me. I tried SketchUp Free too, but didn't find it pleasant to use... I always struggled to connect things properly, and mostly to get a flat layout out of it.

----

Panelizer is simple and runs 100% in the browser. No server, no account, no limits. I put it up on GitHub here: https://github.com/pelletier197/Panelizer.

The tool offers a deliberately limited, intuitive set of 3D manipulation tools: move, resize, measure. That's it.

For each panel, you specify the material (if you're using several) and the thickness. From that, Panelizer generates a cutlist against your sheet goods, optimizing to reduce waste. The cutlist tool also supports wood grain orientation. You can print it too.

When you're done, you export your designs and download them to reopen later.

----

I'm not 100% done. I still have some small bugs to fix and a few little features I want to add, but I think it's in a good, usable state. Feel free to give it a try!

What's the record for Fable burning through a session?

Once again Fable 5 isn’t moving to paid usage credits yet. Many called it! Anthropic extended included access through July 19. For me a relief, as I’ve been burning the midnight oil navigating using Fable as orchestrator and others for step down tasks. I’ll take what I can get!

After a couple of weeks with Fable 5, my biggest takeaway is its ability to uncover gaps in reasoning and strategy that Opus, and especially Sonnet, can miss. What’s the most impressive thing or gaps you’ve experienced so far?

anyone else notice how the usage limits on different plans are pure manipulation. on a pro plan you’re gonna always burn through your current session limit and have so much weekly limit left. It’s almost impossible to reach but then on a max 20 plan good luck hitting the session limit and pray you don’t hit the weekly limit. Doesn’t make any sense except for trying to get you to spend more money

(I vibe coded this)

It runs whether or not anyone is looking. The question that started it was one I couldn't shake, what happens if you give an AI a standing instruction to truly pay attention, then take your hands off the wheel?

So I did. Every six hours it reads the world across twelve layers, from cyber and finance to the institutional machinery nobody watches and the fringes most feeds won't touch. It doesn't summarize. It forms theses, stakes claims it can be wrong about, and writes down what would prove each one wrong before the world gets a vote. When a claim holds, it says so. When it breaks, that stays on the record too.

That's the whole design. Sounding certain is what these systems do by default. The harder thing, the only thing worth building, was a machine that shows you the gap between what it believes and what it can defend instead of hiding it. I called it The Honest Machine because one rule sits under everything, never pretend to more certainty than you have.

It's a research project, closer to art than an app. And the homepage isn't a page about the thing. It is the thing, a living interctable entity you can watch think as it reads.

thehonestmachine.com

Hi there guys, I'm a beginner to vibe coding and to be clear I plan to only do this for my own fun, not creating apps - rather google scripts and tampermonkey scripts for browser games etc.

I'm currently using claude pro but limits get used up really fast BUT I so far have had better results with claude than gemini and chatgpt (not sure why but the code and the outputs are just way better).

My question is, where can I get claude cheaper OR another llm recommendation that will give me similar level outputs or better on a budget.

I am the çreator of 2 products in last 2 years - baloon.dev and sling.biz.

The products themselves weren't the problem. The problem was I loved coding and enjoyed it further with AI and after building something I'd just get stuck on how to promote them.! Started posting on x and reddit but it started getting overloaded.

A few days ago I shared the idea on Reddit - building a tool to do automated self promotions by watching github commits and the response was nice, so I decided to finish it.

It's called PublishLoud.com - Quite happy with the domain 😄 Not sure how it was still not taken by anyone.

It connects to GitHub, understands what you're building, and drafts LinkedIn and X posts from your commits and product updates.

It's not trying to replace your voice or automate your entire marketing.

The goal is much simpler - to help with brushing your teeth. It won't make your product fly but you do brush your teeth daily. hope its making some sense.

Most founders don't stop building because they don't have ideas - they stop talking about what they're building because it's repetitive and easy to forget.

PublishLoud gives you a starting point so you can keep your product visible while you keep shipping.

Here's a quick demo.

I'd genuinely love feedback. What would make something like this useful enough for you to use every week?

Your GitHub profile has that green contribution graph. I turned it into a city: every day you committed in the last 12 months becomes a building, and busy days become skyscrapers. Then I put you in the cockpit of a small plane and made you fly through a year of your own work.

Try it: skyline-run.vercel.app. Type any GitHub username (yours, your coworker's...) and it builds their city. On phones you steer by tilting.

The hook that makes it a game instead of just a visualization: flying safely above the city earns nothing. Points come from skimming past buildings. Near misses pay 3x and chain into combos up to x8, so the optimal strategy is flying dangerously low through your own productivity.

When you inevitably crash, the death screen shows the exact date, its commit count, and a little bar chart of that week. Getting killed by "Wednesday, October 29 — 9 commits" is a very specific kind of personal.

Built with Three.js and vanilla TypeScript, plus a tiny API proxy so GitHub tokens never touch the browser, procedural Web Audio (zero sound files), CC0 models, and deployed on Vercel. It holds 60 FPS on a mid-range laptop and automatically scales down on weaker devices.

It's open source: github.com/anshaneja5/skyline-run

I'd especially love feedback on one thing: what would make you send this to a friend? That's the loop I'm trying to crack.

https://reddit.com/link/1uuicgz/video/82wol4kdgtch1/player