SShortSingh.
Back to feed

Dev Team Rebuilds AI App Backend in 48 Hours After API Key Theft by Bots

0
·4 views

The team behind AI mentor KODA suffered an overnight credential breach after their API key was left exposed in frontend JavaScript code, allowing bots to drain their credits. Within 48 hours, they migrated the key to a Cloudflare Worker, a serverless proxy that keeps the key hidden from the browser and adds automatic AI model fallback. Chat history was also moved from browser-local storage to a Supabase cloud database, meaning user conversations now sync across devices and sessions. Row Level Security was implemented at the database level to ensure users can only access their own chat data. The team also automated a referral and ambassador program using database triggers, all built and deployed from a budget Android smartphone.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingHacker News ·

French Award-Winning Author Faces Backlash Over Alleged AI-Written Work

A celebrated French author has come under fire amid accusations of using artificial intelligence to produce their award-winning work. The controversy has sparked a broader public debate in France about authenticity and integrity in literature. Critics argue that using AI tools undermines the creative process that literary prizes are meant to recognize. The author's publisher and the awarding body have not yet issued definitive public statements on the matter.

0
ProgrammingDEV Community ·

Iraqi Developer Builds Free Research Portal Offering Access to 250 Million Papers

Ehsan, a developer from Baghdad, Iraq, created ScholarAI Pro to address the high cost of academic papers, which can reach $35 each — roughly a month's salary in Iraq. The platform provides free, login-free access to over 250 million research papers sourced through the OpenAlex and Semantic Scholar APIs. It also offers AI-generated summaries and direct PDF downloads where available. Built on Next.js 14 and hosted on Vercel, the site has attracted users primarily from the US, Germany, Iraq, and Canada since launch. Ehsan is seeking feedback from researchers and students on how to improve the platform further.

0
ProgrammingDEV Community ·

Developer Creates Word Cipher Using ASCII Code Products, Encodes Linus Torvalds Quote

A developer shared a cryptographic puzzle on DEV Community where each word in a sentence is replaced by the product of its letters' ASCII values. The encoded sentence turned out to be 'Linus doesn't want his Linux to be called GNU/Linux,' a nod to the longstanding debate between Torvalds and Stallman over naming. The slash in GNU/Linux was represented as actual mathematical division, making that word appear as a small decimal fraction. Solvers could deduce word lengths from digit counts and identify letters through ratios between encoded values. The developer also shared a short Python snippet to generate such ciphers and suggested ways to make future puzzles harder to crack.

0
ProgrammingDEV Community ·

Developer open-sources Astro SEO Theme with perfect 100/100 Lighthouse score

A developer has released Astro SEO Theme, a free open-source website template built with Astro, Tailwind CSS v4, and React, aimed at B2B SaaS companies and startups. The theme achieves a perfect 100/100 Lighthouse score across performance, accessibility, best practices, and SEO by shipping zero client-side JavaScript by default. It includes enterprise-grade SEO features such as automatic hreflang tags, JSON-LD structured data, canonical URLs, and auto-generated sitemaps out of the box. The template also supports multilingual routing with English and Spanish implementations, author E-E-A-T profiles, and a strict Content Security Policy configured for Vercel deployments. Developers can scaffold a new project instantly via the Astro CLI, with a live demo available at astro-seo-theme.vercel.app.