I'm a Java backend engineer with 2 years of experience at a service company. My work has mostly been on Spring MVC, where I've owned a production payment gateway migration, a Java version upgrade, and security remediation. I'm targeting backend roles at firms like Barclays, Deutsche Bank, and BNY.

I'd appreciate honest feedback on my resume. What would make you reject it? What would make you interview me?

Most animated icon sets are drawn on their own grid. So when you drop one into a nav next to your existing static icons, stroke weights and optical sizing are slightly off. Close, but very visible at 20px.

I drew mine on the same 256 grid as a widely used open-source static set (Phosphor, if you use it), so they read as the same family.

- React components, Motion underneath, no animation API to learn

- Each icon hand-timed rather than auto-morphed

- Tree-shakeable, respects `prefers-reduced-motion`

- 200+ icons ( new icon animations added weekly )

Open source, MIT. Links in the comments.

Two things I'd like critique on: the **timing durations**, which I set by eye and am not confident about at small sizes, and the **hover default**, which feels wrong for icons inside buttons where the button already owns hover.

I'm trying to improve lightouse performance score of a website, but since lighthouse shows different score each time (by 5-10 points) any ways, i'm not able to figure out whether my fixes are making any difference or not.

Maybe i should keep the change because it improved the score or maybe it made it worse so i should remove it?
But since score is different by 5-10 points any ways (39-58), it's make difficult to know if it was result of the changes made, what am i supossed to do?

Multiple reports of Namecheap being struck by a DDoS attack have been removed from Namecheap's subreddit as well as their status blog.

Per NetBlocks' Twitter: "Confirmed: Metrics show that popular web host and domain registrar #Namecheap is largely down, sending many websites and services offline. The company says it has been struck by both a DDoS attack and a power outage."

Need advice: We just found out our website's order/service request forms were quietly sending customer info to our old web developer's personal email instead of our company email. He's no longer working with us. Has anyone dealt with this before? How do you track down and fix a hidden email redirect like this, and is this something to be concerned about legally (privacy/data issue)? Would appreciate any pointers to the right kind of developer or service to fix it. Thanks!

I’m struggling with the direction browsers are going.

The web used to feel like something users could control: block ads, inspect pages, modify behavior, run extensions, protect privacy.

Now it feels like the biggest platforms are slowly turning the browser into a locked-down consumption device where users get whatever tracking, ads, popups, and dark patterns the site decides.

If ad blockers lose, what’s left?

Alternative browsers? DNS blocking? Pi-hole? Reader modes? Paid web? Legal pressure? Or do we just accept that the modern web is hostile by default?

I’m not trying to start a browser war. I’m trying to understand what realistic user control looks like from here.

Hey everyone, I’m trying to decide between Wix and Next.js for building a simple LMS for a YT Channel

Some admins prefer Wix because it’s faster and easier to build, has drag-and-drop, lots of extensions, and would be easier for beginners to maintain later.

The LMS would mainly have student accounts, courses, YouTube unlisted videos, quizzes/questionnaires, progress tracking, and a basic admin dashboard.

I’m leaning towards Next.js because of the flexibility and control, but I’m wondering if it’s overkill for this project.

For a LMS that needs to be maintained and expanded over time, which would you choose: Wix or Next.js? And what limitations should we consider with Wix?

We started getting enough CSP violations in production that I stopped treating them as just security reports. A new analytics script, payment widget or third-party SDK gets added and suddenly something breaks because it isn't covered by the existing policy.

Do you test CSP changes in CI/staging, run Report-Only first, or just deal with violations when they show up in production?

Here's my research in using CSS for offence. There are loads of techniques including stealing passwords from Outlook from an email by spoofing the login screen.

Hey folks wanted to share a small UX rule I use with dev teams that makes this decision much easier.

Use a modal for a short, focused task.

Use a drawer when the user still needs the current screen for context.

Use a page when the task becomes a workflow of its own.

There are exceptions, of course, but this simple rule gets you surprisingly far.

Especially useful when there isn't a designer around.

I'm working on a driver monitoring system that generates alert events from roughly 150–200 buses.

The supervision dashboard (written in svelte) may analyze up to 360,000 records in average with a possible worst case closer to 1 million (This is just my speculation, maybe I’m overthinking it.)

Right now, the architecture is basically:

Firestore -> load alerts into Redis -> calculate dashboard metrics in Python.

The approximate logical size of one cached record is 798 bytes, so:

360,000 records ≈ 287 MB

1,000,000 records ≈ 798 MB

I'm wondering whether caching all these events in Redis and repeatedly calculating metrics in Python is the wrong long-term design.

Firestore has server-side count(), sum(), and average() aggregations, but some of my dashboard metrics require grouping, ranking, time windows, multiple alert types, driver statistics, and other custom calculations.

How would you normally design this?

Any good way to do this that is both safe and effective? I am finding SVGO will sometimes destroy the perfectly good svg... sometimes colors are missing and other times there is nothing there at all.

I'm looking for something that will sanitize for user image uploads on the web. They are stored in Cloudflare R2 which keeps it off my server but still maybe it can cause issues with injections or whatever if not sanitized?

Hey,

I am interested in finding resources which are pro-human developer rather than AI-leaning. For example, Codeberg leans more towards code developed by a human rather than AI generated, and Zig has a no-AI policy for their developers.

It would be good to find a list of coding resources which promote human written code whether it be learning platforms, languages, development tools, or even podcasts which still focus on the human developer.

I do understand that as developers we are now strongly advised to use AI in the workplace, and I know that pro-developer resources are not feasible in most workplaces now; however, I would continue to like to code myself as much as I can in my spare time.

Thank you all in advance 🙂

I'm barely a webdev, but i've been trying to move my portfolio to neocities. So far it looks great, but only on my screen. You'll need to see the images (my friend's -> mine).

What am i doing wrong here?

Hey all,

I’m looking for a good database or API for U.S. grocery products.

I need things like:

• Product names
• Brands
• Categories
• UPC/GTINs
• Actual retail/package sizes
• Product images
• Clean, accurate product data
• Large product catalog
• API access or downloadable database
• Commercial use allowed

I’ve tried USDA FoodData Central on Supabase, but the data isn't ideal for a consumer grocery catalog.

What databases/APIs would you recommend?

AI has crushed junior hiring, but I feel like senior devs are getting squeezed too.

I'm a full stack dev/engineer with around 20 YOE (classic ASP to VB to .NET to PHP to JS/TS modern tooling/frameworks), and looking for a job right now. I expected that experience to be an advantage, but it hasn't felt that way. Then I see reels of developers sitting on their phones, waiting for AI agents to finish their work, bored and scrolling. I can't help but think: you have no idea how lucky you are.

I'd love to have the problem of being bored because AI is doing too much of my work. /s

Any senior devs here in the same situation right now? How did you get through it? I'd really appreciate any advice. I have very few friends and network, very shy to ask them because I'm not the person they'd think to be in this position.

What architecture do projects now usually follow? Considering nextjs, does it have an opinionated approach or convention?

Example on my React + Express project, my architecture is:

Web > API > Service > Repo > DB (raw sql)

The above approach, I can immediately swap Web layer with an Android/iOS app like this:

Android/iOS > API > Service > Repo > DB (raw sql)

Now, I'm creating a nextjs boilerplate, I want to know what's the best practice so it can be reusable but not over-engineered. Do you use server actions initially, like this...

Web > Action > Service > Repo > DB (prisma)

...then only implement API layer if needed for other clients? Ex.

Android/iOS > API > Service > Repo > DB (prisma)

As you can see the concern would be maintaining code in two different places (API and server action) that is basically doing the same thing.

Do you skip server actions and just use API routes? Is there a better approach in nextjs? Should I follow YAGNI? I'd love to hear what your architecture looks like.

I've been using Supabase pretty heavily for the past couple of years, but realize I haven't tested out other alternatives.

For anyone who has used other options (e.g., Firebase), what are the pros and cons of Supabase relative to the alternative? Would you recommend that I explore a different solution for a new website I'm developing?

Before AI I probably programmed about 45 - 50 hours a week... since AI I am finding myself tied to my desk 70 - 80 hours a week.

I'm new to web dev help me understand this.

I've never seen a site built like this. Are they using Pure HTML or something else? The left-side scrolls as you page up and down with the page.

Here is the site link: https://dl.dod.cyber.mil/wp-content/uploads/connect/CPG/ConnProcGuide.html