Firefox Focus accidentally became my default browser thanks to its radical simplicity

Node.js Security Essentials: The Checklist I Use in Production

Every middleware, header, and validation rule that has actually stopped an attack — from a 7-year production record that includes one very expensive pentest. The pentest report arrived on a Tuesday.

• Checklist compiled from 7 years of production experience to prevent Node.js attacks
• Eight high-severity vulnerabilities, including open CORS policy and SQL injection, identified
• Common middleware can easily prevent listed vulnerabilities in Node.js production systems

1h ago ·dev.to

Auditing 857,655 Open Food Facts labels with pandas: how many nutrition facts contradict themselves?

Open Food Facts is the largest open food database in the world. Scan a barcode in almost any calorie app and the numbers you get come from there.

• 5.5% of 857,655 Open Food Facts labels are incoherent
• Protein bars have the highest incoherence rate at 20.8%
• Heavy-tailed failures include 31,867 labels with >20% error

1h ago ·dev.to

I automated Dependabot PR cleanup — and drew a hard line on what NOT to automate

If you use GitHub, you know the rhythm: Dependabot opens a PR, CI runs green, and then a human has to answer the same questions again — is this a patch or a major? did anyone touch source code?

• Developed CLI tool dep-triage to categorize open Dependabot PRs
• Categorizes PRs into auto-merge, escalate, close, rebase suggestion, skip
• Limits automation to dependency-only diffs, green CI, dependency-file changes

1h ago ·dev.to

The Dealership Charges $180/hr for This, I Do It With an ESP32

Your car is not magic. It is just a noisy network with cupholders. Let me tell you how a service advisor tried to charge me $180 for a diagnostic that took my $18 microcontroller eleven seconds to do.

1h ago ·dev.to