❌

Reading view

↗️

Why simple math offsets break Unicode font converters (and lessons from building a zero-dependency client tool)

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/Both-Tart7460

Hey r/Frontend,

Over the weekend, I fell down a surprisingly deep Unicode rabbit hole while building a client-side text styler (creating Fraktur, double-struck, circled, and aesthetic bio glyphs) with zero external libraries.

I wanted to share two specific technical traps I ran into and how to solve them properly on the front end:

1. The "Letterlike Symbols" Offset Trap

When engineers try to convert standard ASCII characters (e.g. A-Z) into styled Unicode variants like Double-Struck (𝔸, 𝔹, ℂ) or Fraktur (𝔄, 𝔅, ℭ), the naive instinct is mathematical offset calculation: js // ❌ Naive implementation: breaks on specific glyphs const targetCodePoint = 0x1D538 + (char.charCodeAt(0) - 65); return String.fromCodePoint(targetCodePoint); Why this breaks: Unicode's Mathematical Alphanumeric Symbols block (U+1D400..U+1D7FF) has several historical "holes". Characters like Double-Struck C (ℂ, U+2102), H (ℍ, U+210D), N (ℕ, U+2115), P (ℙ, U+2119), Q (ℚ, U+211A), R (ℝ, U+211D), and Z (ℤ, U+2124) were already codified years earlier in the Letterlike Symbols block (U+2100..U+214F). If you rely on mathematical offsets, those letters either display as undefined tofu blocks (``) or completely unrelated symbols.

The Solution: Rather than writing messy conditional gap logic, an explicit static glyph map compiled ahead-of-time keeps the client runtime O(1) and guarantees 100% stable rendering across iOS, Android, macOS, and Windows.

2. Screen Reader Accessibility (a11y)

One huge UX oversight with "aesthetic font generators" is accessibility. Screen readers do not pronounce these glyphs as normal English letters; VoiceOver and NVDA pronounce 𝔄 as "Mathematical Fraktur Capital A". If users plaster this all over body text, it renders their profiles completely unusable for visually impaired users. We added an explicit accessibility notice right under the input reminding creators to reserve these purely for short bio tags/titles rather than body paragraphs.

Architecture & Specs:

  • Zero NPM dependencies: Pure Vanilla JS + CSS Glassmorphism.
  • Payload: The entire production bundle (HTML + CSS + full Unicode lookup dictionaries) compiles down to 26.4 KB.
  • Edge Deployment: Cloudflare Workers (sub-40ms edge TTFB).

If you'd like to test the real-time conversion and inspect the client-side implementation: 👉 Live site: https://fonts.100emoji.shop

Would love to hear how other frontend devs approach Unicode normalization and rare symbol handling!

submitted by /u/Both-Tart7460 to r/Frontend
[link] [comments]
  •  
  • ↗️
↗️

what do you actually look at first when something breaks in prod?

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/quietcodelife

im trying to get better at debugging production issues faster. right now when something goes wrong i kind of just grep through logs hoping something jumps out, which works eventually but feels inefficient

curious what other backend devs actually check first. like do you have a mental checklist you run through? specific log patterns you look for? or do you mostly rely on monitoring/alerting tools to point you in the right direction?

our setup is pretty basic (node backend, postgres, some redis) and im wondering if im missing obvious stuff that would speed up the "wtf just happened" phase

submitted by /u/quietcodelife to r/webdev
[link] [comments]
  •  
  • ↗️
↗️

Experts Expect 'Security Reckoning' As AI Tools Find And Exploit Software Bugs

✇Slashdot
By: EditorDavid
The Washington Post reports: Tens of thousands of South Koreans had their financial data exposed online in recent weeks after at least nine major banks there suffered cyberattacks that suggested a dark future for online security. One man, a 26-year-old living in southern China, was allegedly behind the attacks, according to an investigation by cybersecurity company CrowdStrike. Traces left online and failure to secure his own systems allowed investigators to piece together the man's name, age, location and what he allegedly did. The clues revealed that the devastating assault on some of Asia's most sophisticated financial institutions was the work of an amateur. The attacks were launched with help from a few artificial intelligence chatbots, CrowdStrike found, before asking one to help sell the stolen data online and draft a fake résumé touting cybersecurity skills... The hacker who broke into the South Korean banks had access to Anthropic's Claude, but because the U.S. firm's tools generally refuse to take illegal actions, free Chinese models were also used, including DeepSeek, CrowdStrike found. "The models are interchangeable," said Meyers, the CrowdStrike executive. The Post calls it "part of a wave of AI-enabled hacking that is advancing across the world, triggering alarm inside national governments as well as multinational companies." "Basically any pedestrian, non-hacker can take these frameworks and start leveraging them to go after different targets," said Adam Meyers, senior vice president of counter adversary operations at CrowdStrike. The company has tracked an increase in the speed with which cyberattacks can move once inside a target's networks, as seasoned hackers and rank amateurs alike get a boost from AI tools. "Anyone can be a super-hacker now," Meyers said... Many cyber experts still expect the security reckoning to intensify as AI tools that can find and exploit software bugs become more widely distributed and understood. [Last] Monday, The Post reported that cybersecurity researchers from the start-up Cathedral who set out to test Anthropic's security found that they could access internal messages and meeting transcripts. Cathedral reported its findings to Anthropic, which said it resolved the newly discovered problems... Security experts say it's unlikely that any hacker is forgoing the use of AI tools right now. Even in America, critical infrastructure like energy and water companies need to be "immediately and comprehensively" tested for exploitable bugs, according to Snehal Antani, chief executive of cybersecurity company Horizon3. He tells the Post the government might need to fund that remediation, and even form "a public and private partnership to accelerate incident response."

Read more of this story at Slashdot.

  •  
  • ↗️
↗️

Good providers for hosting a basic html + js website?

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/nobaaaaaa

I feel this may seem like a very strange question to ask given the circumstances, and hopefully this isn't breaking any rules. A few days ago I had a falling out with someone who happened to be hosting my website on their rented server. It's a very basic portfolio website with HTML and some JS for dynamically generating HTML elements from a Json file.

I'm pretty decent in HTML and JS but by no means a web developer, it's simply not my career. This means I can make a decent website but figuring out how to host it is beyond me. Are there any services that simplify this sort of thing, or is the process of renting and setting up my own basic server for a website straightforward? Github Pages maybe? Forms etc are not required.

I also own my domain, but it's currently still set up to link to that server. Once I get my own sorted out, will I have to worry about the two conflicting?

submitted by /u/nobaaaaaa to r/webdev
[link] [comments]
  •  
  • ↗️
↗️

Self-hosted proxy for npm, PyPI and pub: new releases wait 7 days before anyone at work can install them

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/iApexxx
Self-hosted proxy for npm, PyPI and pub: new releases wait 7 days before anyone at work can install them

What it is: a self-hosted caching proxy (git-pkgs/proxy, one Go binary) between everyone at work and npm, PyPI, pub, Maven and Go. New releases stay hidden for a week, and every download is logged with who pulled it.

Why: this year's big hijacks were all pulled within a few hours, so a week means you basically never see them.

The post has the config, what broke, and the built-in settings if you'd rather not run a proxy.

submitted by /u/iApexxx to r/selfhosted
[link] [comments]
  •  
  • ↗️
↗️

Binance Reopens to $3.64 in Net Outflows. '98% Choose to Stay', Says Its Founder

✇Slashdot
By: EditorDavid
Binance now says it's replenished 90% of assets stolen last week in a $6.3 billion security breach, its customers still "rushed to move funds off the platform" when it reopened Sunday, CNBC reports, and Binance "said it recorded $3.64 billion in net outflows after reopening withdrawals on Sunday." The exchange processed $4.65 billion in withdrawals and $1.01 billion in deposits between 6 a.m. and 3:30 p.m. UTC on Nov. 1, Binance said in a post on X. The resulting net outflows represented 2.1% of Binance's $171 billion in total assets, based on its latest available proof-of-reserves data as of Oct. 28. Binance said withdrawal volumes had declined and were stabilizing following an initial spike, while deposit volumes remained substantial. The exchange began restoring withdrawals in phases at 6 a.m. UTC on Sunday, with services resuming across all 15 networks and assets included in the initial phase by 12:36 p.m. UTC. It said testing was continuing for the remaining networks and assets. Binance founder and former CEO Changpeng Zhao sought to reassure users following the breach, writing on X that "98% choose to stay!" He said most of the net outflows occurred within the first couple of hours after withdrawals resumed.

Read more of this story at Slashdot.

  •  
  • ↗️
↗️

Stack Overflow: 'Reports of Our Death are Greatly Exaggerated'

✇Slashdot
By: EditorDavid
Stack Overflow's senior VP of community says predictions of their demise "make for compelling headlines, but they confuse a change in how people access knowledge with the disappearance of the knowledge — and the company — behind it. AI has changed developer behavior. In our recently released 2026 Developer Survey, 64% of respondents said they visit Stack Overflow less frequently for simple questions. But developers also report asking more advanced questions and visiting the site to verify AI-generated answers. Stack Overflow remains a place where people can challenge assumptions, compare approaches, and validate solutions. But it's also important to understand that our public Q&A site is only one part of Stack Overflow, the company. The knowledge created on the Q&A site helps power the AI ecosystem itself. Stack Overflow's human-validated content is used to train and improve models, strengthen retrieval systems, and make AI assistants and other tools more reliable. Developers and technologists may encounter an answer through a different interface — such as their IDE — but the underlying knowledge may still have begun the same way it did in the past: with a developer sharing what they learned on Stack Overflow. We're also building for what comes next. We recently launched the beta of Stack Overflow for Agents, an API-first knowledge exchange where agents can share knowledge and verify solutions. We also brought back Developer Story, giving developers a verifiable way to showcase their expertise, accomplishments, and contributions beyond a traditional résumé. And we have much more planned and in development to give people compelling new reasons to visit the site beyond Q&A. Several years ago, we pivoted aggressively toward the enterprise. In September, we launched the next generation of Stack Internal, our governed AI context layer for companies. It captures and curates organizational knowledge, adds provenance and trust signals, and brings in subject-matter experts when validation is needed. The goal is straightforward: to make sure employees and AI agents are working from accurate, current, permission-aware information — not confidently acting on whatever context happens to be nearby. That is the thread connecting everything we do: making human knowledge useful and trustworthy, whether it is being consumed by another developer, an enterprise team, or an AI agent. Stack Overflow is not standing still, and it is not disappearing. We are evolving from a website people visit for answers into knowledge infrastructure that supports developers, companies, and AI systems wherever they work. Reports of our death are, indeed, exaggerated.

Read more of this story at Slashdot.

  •  
  • ↗️
↗️

Toyota's EV Sales More Than Doubled In a Year, While Its Gas Car Sales Dropped 20% In China

✇Slashdot
By: EditorDavid
Toyota's EV sales have jumped 127% through September, reports Electrek: Including Lexus, Toyota sold 309,766 battery electric vehicles (BEVs) globally through the first nine months of 2026, up 127.4% from the same period last year. Except for January (+87.5%), Toyota's EV sales have more than doubled every month this year compared with 2025... While its EVs are catching on, Toyota Motor's global sales fell for the third straight month in September. Toyota sold 860,107 vehicles in September, down 2.2% from the previous year. The company said that although overall demand remained steady, sales in China fell, leading to lower overall sales than last year. Through September, Toyota sold 7.51 million vehicles globally, down 3.4%. In China, Toyota's sales plunged nearly 20%, marking its eighth consecutive month with lower sales. Toyota said the overall market in China "remained weak due in part to rising gasoline prices, while the market for gasoline vehicles and hybrid vehicles was particularly affected," resulting in lower sales. In the first nine months of 2026, Toyota sold just over 1.05 million vehicles in China, 18.9% fewer than in the same period last year... After the US, China is Toyota's second-largest market.

Read more of this story at Slashdot.

  •  
  • ↗️
↗️

How many apps have non-engineers at your company built with Claude/Cursor/Lovable, and who owns them when they break?

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/lightninja987

I’m an ML engineer. Last month I got a Slack from marketing asking why “their dashboard” stopped updating. Nobody on my team knew it existed. It was a Lovable app hitting our Supabase with a service key, deployed to Vercel under someone’s personal account, and the person who built it had left.

That got me wondering how common this is. So, for people on platform/eng/IT teams:

  • Roughly how many of these are running in your company right now? Could you actually list them?
  • When one breaks, who finds out, and who fixes it?
  • Have you tried to get a handle on it (inventory, policy, blocking, importing into Retool/Superblocks), and what happened?

Not selling anything. Trying to understand whether this is a real problem or just my company

submitted by /u/lightninja987 to r/devops
[link] [comments]
  •  
  • ↗️
↗️

Launching Make My Shop: An Open-Source Telegram E-Commerce & CRM Platform

✇CRM - Customer Relationship Managment
By: /u/MakeMyShop

Launching Make My Shop: An Open-Source Telegram E-Commerce & CRM Platform
I’m excited to share Make My Shop — an open-source Telegram e-commerce platform and lightweight CRM designed to launch fully functional online stores directly within Telegram in minutes.
While Telegram is becoming a primary sales channel for many businesses, managing orders, catalogs, and customer communication manually often creates unnecessary friction. Make My Shop solves this by providing a complete automated storefront out of the box.
Core Capabilities
Product Catalog & Search: Category-based navigation, real-time product search, rich media cards, and direct manager communication routing.
Interactive Shopping Cart: Live cart item counter, structured multi-step checkout, shipping address capture, and automated order total calculation.
Payment Verification: Streamlined customer receipt uploading (photo/text) paired with real-time admin payment confirmation workflows.
Embedded Order Chat: Isolated 1-on-1 messaging thread embedded directly within each order detail card for seamless customer-manager clarification.
Merchant Control Panel: Complete CRUD interface for product catalog management, order status tracking, and instant new order event notifications.
Native Localization: On-the-fly, edit-in-place interface switching across English, Spanish, and Russian.
Technical Architecture
Backend & Framework: Python 3.12, aiogram 3.x, Pydantic v2
Persistence & Database: Async SQLAlchemy 2.0 (PostgreSQL / SQLite), Alembic schema migrations
Execution Model: Fully non-blocking background task execution (asyncio), structured service layer, and comprehensive integration testing.
The project is completely open-source, lightweight, and ready for self-hosting.

submitted by /u/MakeMyShop
[link] [comments]
  •  
  • ↗️
↗️

SystemD's Creator Opens Signups for Private Preview of Amutable's Cryptographically Verified Linux Systems

✇Slashdot
By: EditorDavid
SystemD creator Lennart Poettering left Red Hat for Microsoft in 2022, but 10 months ago left to co-found Amutable a company that aims to build cryptographically verified Linux systems that stay trusted over time. It's FOSS calls it "a read-only, image-based system where every machine produces signed reports of its own state" — and signups are now open for a private preview: Before announcing this Linux-based implementation, Amutable had released two open source tools. tine, a Buck2-based build system that composes OS images; available under MPL-2.0, and Quarry, a TUF-based tool that distributes those images to machines; available under Apache-2.0. What Amutable Foundations brings to the table is a service where Amutable runs the images, update repositories, control plane and vulnerability fixes for organizations and individuals who operate their own systems. No license has been stated for those company-run parts, and the preview announcement does not say how much of Foundations beyond tine and Quarry will be open source. Software and configuration both ship as signed images, and a machine boots only what is signed. Because there is no package manager and no SSH or interactive shell, a change means giving every machine in your fleet a new signed image. Its images are reproducible, come with a software bill of materials (SBOM) and are built from pinned inputs of whichever distribution you pick, with tine being able to import packages from Fedora or CentOS Stream. Each machine sends a signed report that records what it booted, from the firmware and boot loader up to the kernel and OS, plus the configuration it runs... Amutable's control plane verifies reports from systemd-report, an experimental command in systemd 260 that the company helped build. It compares each one with the declared state and flags machines that deviate. A rollout only continues while machines can show they are in a good state... Amutable is signup formlooking for teams that manage Linux fleets and need to show what state each machine is in. It expects to start bringing the first 'design partners,' as it calls them, on board over the coming weeks.

Read more of this story at Slashdot.

  •  
  • ↗️
↗️

Exploring new opportunities in WordPress and web development

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/Abject_Show_8256

Exploring new opportunities in WordPress and web development

Hello everyone!

I've been working with website development, online stores, and hosting for several years. More recently, I've started exploring AI and its potential applications in web development.

I'm curious to know what other services or technologies WordPress professionals are currently working with.

Are you incorporating AI into your projects? Have you expanded into areas such as automation, integrations, SEO, or other digital solutions?

I'd love to hear about your experiences and what new opportunities you're exploring in this industry.

submitted by /u/Abject_Show_8256 to r/Wordpress
[link] [comments]
  •  
  • ↗️
↗️

¿Recuerda el caso de la chica que fue "violinizada" en la asamblea? Hay algo turbio en todo esto.

✇posts from Frontend, drupal, Panama, reactjs, devops, selfhosted, webhosting, Wordpress, web_design, webdev, PHP, technology, ProgrammerHumor, CRM
By: /u/Top-Bed6440

¿Alguien sabe algo al respecto?

Esto pasó en 2023. Nunca se supo quienes fueron los culpables, la madre no salió a hablar mas y actualmente la familia de la chica ostenta un nivel económico muy superior al que tenían antes.

No puede mencionar nombres ni poner cuentas personales aquí por un tema de politicas de privacidad, pero si saben quienes son, realmente la familia se la pasa viajando, comprando casa en Estados Unidos y carros de buenas marcas..

submitted by /u/Top-Bed6440 to r/Panama
[link] [comments]
  •  
  • ↗️
↗️

Exploring new opportunities in WordPress and web development

✇WordPress
By: /u/Abject_Show_8256

Exploring new opportunities in WordPress and web development

Hello everyone!

I've been working with website development, online stores, and hosting for several years. More recently, I've started exploring AI and its potential applications in web development.

I'm curious to know what other services or technologies WordPress professionals are currently working with.

Are you incorporating AI into your projects? Have you expanded into areas such as automation, integrations, SEO, or other digital solutions?

I'd love to hear about your experiences and what new opportunities you're exploring in this industry.

submitted by /u/Abject_Show_8256
[link] [comments]
  •  
  • ↗️
❌