The signal in the feed.

The Safari MCP server for web developers

CarPlay Is Additive

Como implementar OTP (código de confirmação) por WhatsApp no Brasil

Guia prático para adicionar verificação por código OTP via WhatsApp oficial no seu sistema, com exemplos em Node.js, PHP e Python — e comparação honesta de custos entre WhatsApp, SMS e e-mail Se você tem um cadastro, login ou checkout, em algum momento vai precisar confirmar que o usuário realmente controla o número de telefone que informou. Esse é o trabalho do OTP (One-Time Password, ou senha de uso único): você envia um código, o usuário digita, você confere. No Brasil, mandar esse código por

Stop pasting JWTs into random websites

A JWT isn't just JSON you can inspect. It's a live bearer token. Here's a safer way to decode one. A few days ago I was reviewing a bug with a teammate. They wanted to see what was inside an access token, so they copied it into the first JWT decoder Google returned. It wasn't a dummy token. It was a production access token with almost an hour left before it expired. Nobody was trying to do anything risky—it was just the quickest way to inspect a JWT. That's exactly why this keeps happening. A JW

Diff from the live server, not from your git history — when a local repo has drifted from production

An investigation agent flagged "the license API PHP returns Japanese-hardcoded messages" and we sat down to fix it. But something felt off the moment we opened the file — the version running on the production server didn't match the latest commit in the local repo. Stranger still, production had more recent features than our local checkout. A bit of digging turned up the truth: months earlier, someone had hot-patched the production file in response to a different user issue, and that change had

Brex vs Ramp: The Startup's Dilemma in Corporate Cards

Brex vs Ramp: The Startup's Dilemma in Corporate Cards Running a startup is like juggling chainsaws while blindfolded. As a tech solopreneur, the struggle is real. Every day, there’s a new challenge, an unpredictable twist that’s out to get you. Here's the brutal truth: choosing the right corporate card can mean the difference between streamlined success and chaotic disarray. For startups, efficient handling of expenses isn't just about tracking cash flow—it's about scaling smarter. As you grow,

Designing Repellence for Human…

Originally published at norvik.tech Explore the implications of designing repellence for humanity and its impact on technology and web development. Designing repellence refers to creating mechanisms that effectively deter unwanted behaviors or interactions while still engaging users positively. It is rooted in behavioral psychology, focusing on how users interact with digital environments. By leveraging these principles, designers can create interfaces that not only attract but also repel certai

I Built 50+ Free Developer Tools in Next.js — No Ads, No Login, No BS

Every time I needed to format a JSON file, pick a color, or encode something in Base64, I ended up on some random website — cluttered with ads, forced sign-ups, or annoying popups. It got frustrating enough that I decided to just build my own toolkit. That's how Devkitly was born — a free collection of 50+ developer tools, all in one place, built with Next.js. Some of the tools you'll find: 🧩 JSON Formatter & Validator 🎨 Color Picker 🔐 Base64 Encoder / Decoder 🔗 URL Encoder / Decoder 🕒 Time

Order a burned CD of your own public GitHub repo

Your E2E tests pass. Are you sure they can fail?

Someone debugging a test in code-server, the 78k-star VS Code-in-the-browser project, did what all of us do: they focused a single test to iterate faster. it.only("should change to expired when not active", async () => { Then it got committed. For roughly seven months, that one .only silently disabled the other eight tests in the file. CI stayed green the entire time, because from CI's point of view nothing was wrong: the focused test ran, it passed, done. By the time the suite was re-enabled, o

An American Privacy Emergency

The 25 best AI domain name generators for 2026 (and how they actually compare)

The 25 best AI domain name generators for 2026 (and how they actually compare) The best AI domain name generator is not the one with the fanciest “AI” label. It is the one that gets you to a brandable, available domain fast, without wasting your afternoon on junk suggestions. I built NameBuddy.ai because every other tool kept showing me names that sounded clever and failed at the one job that matters: availability. That is the real test in 2026, because unregistered, on-brand .coms are described