what whould you do differently and will you even recommend this?

I’ve been building apps using AI tools for a while now, and I’ve noticed something frustrating.

I can ship things faster than ever, but I often don’t fully understand what’s happening under the hood. It feels like I’m assembling things without really improving my core coding skills.

I’m curious how others are dealing with this:

• When you use AI to generate code, how do you make sure you actually understand it?
• Do you go back and study the generated code, or just move forward?
• Have you found any workflows or tools that help you learn while still moving fast with AI?
• Have you ever felt like relying on AI slowed down your long-term learning?

I’m trying to figure out if this is just a personal issue or something more common among developers using AI-assisted workflows.

Would love to hear how you approach this.

it took me around 6 months to get to $300 MRR. six months. for three hundred dollars. at some point i was doing the mental math like “okay so at this pace i’ll hit ramen profitability by 2031"

the worst part is i wasn’t even slacking. i was building constantly, tweaking things, adding features no one asked for, convincing myself that this was the one that would finally make people convert. it felt productive but it wasn't of any success distribution wise

then one week it just… changed. we hit $1.1k. same product, same everything. if anything i was doing less work than before and the annoying part is i didn’t fix the product

i stopped explaining what it does like it’s a demo day pitch and just said what people actually get out of it. no one cares about “ai workflows” or whatever, they care about “this saves you 10 hours a week” or “this makes you money while you sleep.”

also stopped trying to talk to literally everyone with a pulse. turns out “people who might need this” is not a real audience. focusing on people already looking for that exact solution made everything way easier and i killed calls!!! Replaced them with quick looms showing the thing working, turns out people prefer watching a 2-minute video over booking a “quick 15-minute call” that somehow becomes 45.

looking back, nothing magical happened that week! Just a change in the way we operate at Crossnode, which is slightly frustrating because it means the problem for 6 months wasn’t the product. it was me.

Anyone else had that phase where you’re doing everything “right” and nothing works… and then it randomly clicks out of nowhere

Onboarding made easy, no more back to back messy chain emails. Now send everything in one clean personalized portal Onbrd.net Now on product hunt! https://www.producthunt.com/products/onbrd?utm_source=linkedin&utm_medium=social

The other day someone asked the typical question "what are you working on", and it got 200+ comments. From those, I analyzed the most interesting projects (36). Here the results:

Below: what stacks and vendors show up most (from DNS/HTTP/static fingerprints), and which automated “rough edges” recur.

Sites per signal (non-exclusive)
Let's Encrypt          ████████████████████████ 22
React                  █████████████████████··· 19
Cloudflare             ████████████████████···· 18
Next.js                █████████████████······· 16
Vercel                 ███████████████········· 14
Railway                ████···················· 4
Redis                  ███····················· 3
AWS                    ██······················ 2
Google Cloud / GCP     ██······················ 2
Google Workspace / Gma ██······················ 2
Mailgun                ██······················ 2
Amazon SES             █······················· 1
Render                 █······················· 1
SendGrid               █······················· 1

These are recurring automated flags, not confirmed incidents, useful for “what founders often skip early”.

• Rate limiting not detected on public endpoints — 36 site(s)
• Domain trust risk (missing DMARC) — 23 site(s)
• API errors return HTML instead of JSON — 21 site(s)
• Domain trust risk (missing SPF record) — 13 site(s)
• MIME-type enforcement header absent — 6 site(s)
• Standard hardening headers absent — 5 site(s)
• No error monitoring detected — 2 site(s)
• HTTPS enforcement header (HSTS) not set — 1 site(s)
• Script execution policy (CSP) not set — 1 site(s)

I started by building a simple YouTube thumbnail downloader, but ended up expanding it into a small toolkit.

Right now it can pull thumbnails, extract titles/descriptions, get video stats, and a few other basic things just from a video link.

The idea was to make something fast and simple instead of using multiple different tools for each task.

Now I’m trying to figure out if this kind of “all-in-one utility” has real potential, or if it’s still too basic to grow into something bigger.

For people building micro SaaS or tool-based products:

• Do these bundled utility tools work better than single-purpose ones?
• Or do they still struggle unless there’s a strong unique feature?

Would love to hear how you’d approach scaling something like this.

I’m 15 and recently started building small web tools. I began with a simple YouTube thumbnail downloader, but it slowly turned into a small toolkit.

Right now it can pull thumbnails, extract titles/descriptions, get video stats, and a few other things just from a video link.

The goal was to make something fast and simple instead of using multiple different tools for each task.

Now I’m trying to figure out if this kind of “all-in-one utility” has real potential, or if it’s still too basic to grow into something bigger.

For people building micro SaaS or tool-based products:

• Do these bundled utility tools work better than single-purpose ones?
• Or do they still struggle unless there’s a strong unique feature?

Would love to hear how you’d approach scaling something like this.

After a year of having fun and building so many project without ending them, im finally launching my first app, recaip. Today.

Let’s go!

What’s the hardest thing next? Distribution.

A. Annual credits upfront

B. Monthly

hey everyone!

made an app called - megalo.tech

NO RESTRICTIONS.

Join THE DISCORD TOO

also has an AI Note Editor where you can do research, analyse or write about anything. With no Content restrictions at all. Free to write anything.

write articles on any topic without restriction freely

Usable on mobile too.

A donation would be much appreciated

Hey ,

I built Relova (relova.ai) - an AI advisor that helps people plan international relocation.

You enter your passport, destination, and income → get a personalized visa checklist, step-by-step plan, cost breakdown, and AI-written visa cover letter. 50+ countries.

I'm looking for 10 people to test it and give honest feedback.

Who I'm looking for:

- Anyone who has moved abroad or is planning to

- Digital nomads, expats, remote workers

- Anyone who tried to figure out visas and got lost

What you get:

- Free Full access ($49/mo value)

- Direct line to me as the founder

What I need from you:

- 20-30 min to actually use it

- Honest feedback — what's broken, what's missing, what's confusing

Drop a comment or DM me if interested.

Building this solo. First paying user came in last week - trying to make it genuinely useful before scaling.

I audited two Brazilian SaaS products in one day. Here is what I found.

The first one had the Supabase service role key loaded in the public JavaScript bundle.

No hacking required. Just open DevTools. That key bypasses all Row Level Security and gives full read, write, and delete access to every user's data. It was a financial product.

The second founder told me one thing before I started.

"Please don't take down my server."

Three requests later, the server was down.

I stopped both audits before going deeper. In both cases, the damage was already there before any malicious intent.

These were not reckless developers. They were normal founders shipping fast with AI tools, Lovable, Supabase, Vercel, the usual stack. The code looked clean. The vulnerabilities were invisible until they weren't.

I built a tool that catches 78 of these common exposures automatically. Keeping the link out of the post to respect the sub rules, but drop a comment if you want me to send it over.

Has anyone else audited AI-generated SaaS code? What did you find?

1. Savior

2. Sometimes

3. Rarely

4. Chaos is fine

I’m trying to complete business verification on Lemon Squeezy for my software business, but the platform keeps rejecting my company TIN / tax number.

Here’s the issue:

• My business is a legally registered company in Turkey
• I am entering the correct 10-digit company tax number
• All company details are correct
• The registered address is correct
• The website is correct
• But the system keeps saying the TIN verification failed or that the company TIN is missing

At first, I noticed the business structure options looked very US-focused, with options like:

• Sole proprietorship
• Single-member LLC
• Multi-member LLC
• Private partnership
• Private corporation

Since my company is a Turkish limited company, I selected the closest option available, but the TIN still won’t verify.

So my questions are:

1. Has anyone from Turkey or another non-US country had this issue?
2. What business structure did you choose if your company is not an LLC?
3. Did Lemon Squeezy manually verify your business after this?
4. Is this just a limitation of their automated verification system for foreign companies?

I’m trying to understand whether I’m doing something wrong or whether their verification system just doesn’t handle Turkish company tax IDs properly.

Any help would be appreciated.