The signal in the feed.

Stop pasting JWTs into random websites

A JWT isn't just JSON you can inspect. It's a live bearer token. Here's a safer way to decode one. A few days ago I was reviewing a bug with a teammate. They wanted to see what was inside an access token, so they copied it into the first JWT decoder Google returned. It wasn't a dummy token. It was a production access token with almost an hour left before it expired. Nobody was trying to do anything risky—it was just the quickest way to inspect a JWT. That's exactly why this keeps happening. A JW

Diff from the live server, not from your git history — when a local repo has drifted from production

An investigation agent flagged "the license API PHP returns Japanese-hardcoded messages" and we sat down to fix it. But something felt off the moment we opened the file — the version running on the production server didn't match the latest commit in the local repo. Stranger still, production had more recent features than our local checkout. A bit of digging turned up the truth: months earlier, someone had hot-patched the production file in response to a different user issue, and that change had

Brex vs Ramp: The Startup's Dilemma in Corporate Cards

Brex vs Ramp: The Startup's Dilemma in Corporate Cards Running a startup is like juggling chainsaws while blindfolded. As a tech solopreneur, the struggle is real. Every day, there’s a new challenge, an unpredictable twist that’s out to get you. Here's the brutal truth: choosing the right corporate card can mean the difference between streamlined success and chaotic disarray. For startups, efficient handling of expenses isn't just about tracking cash flow—it's about scaling smarter. As you grow,

Designing Repellence for Human…

Originally published at norvik.tech Explore the implications of designing repellence for humanity and its impact on technology and web development. Designing repellence refers to creating mechanisms that effectively deter unwanted behaviors or interactions while still engaging users positively. It is rooted in behavioral psychology, focusing on how users interact with digital environments. By leveraging these principles, designers can create interfaces that not only attract but also repel certai

I Built 50+ Free Developer Tools in Next.js — No Ads, No Login, No BS

Every time I needed to format a JSON file, pick a color, or encode something in Base64, I ended up on some random website — cluttered with ads, forced sign-ups, or annoying popups. It got frustrating enough that I decided to just build my own toolkit. That's how Devkitly was born — a free collection of 50+ developer tools, all in one place, built with Next.js. Some of the tools you'll find: 🧩 JSON Formatter & Validator 🎨 Color Picker 🔐 Base64 Encoder / Decoder 🔗 URL Encoder / Decoder 🕒 Time

Order a burned CD of your own public GitHub repo

Your E2E tests pass. Are you sure they can fail?

Someone debugging a test in code-server, the 78k-star VS Code-in-the-browser project, did what all of us do: they focused a single test to iterate faster. it.only("should change to expired when not active", async () => { Then it got committed. For roughly seven months, that one .only silently disabled the other eight tests in the file. CI stayed green the entire time, because from CI's point of view nothing was wrong: the focused test ran, it passed, done. By the time the suite was re-enabled, o

An American Privacy Emergency

The 25 best AI domain name generators for 2026 (and how they actually compare)

The 25 best AI domain name generators for 2026 (and how they actually compare) The best AI domain name generator is not the one with the fanciest “AI” label. It is the one that gets you to a brandable, available domain fast, without wasting your afternoon on junk suggestions. I built NameBuddy.ai because every other tool kept showing me names that sounded clever and failed at the one job that matters: availability. That is the real test in 2026, because unregistered, on-brand .coms are described

The Onion’s ‘Infowars’ Parody Is Here. Alex Jones Is Going to Hate It

The satirical site is fighting to officially take over Infowars. In the meantime, CEO Ben Collins says the new show will mock “how fucking stupid” conspiratorial brain rot has become.

Last chance to apply — Startup Battlefield Australia applications close July 6

If you're going to apply for Startup Battlefield Australia, now is the time. Applications close July 6, and once the deadline passes, the opportunity is gone.

Meta releases its React design system

#​481 — July 3, 2026 Read on the Web React Status Meta Releases Its Astryx Design System — Built on React and StyleX, and under development at Meta for over 8 years (powering “over 13,000 apps”, they claim), Astryx provides more than 160 components, theming, templates, and tooling. There's also a playground to experiment with. Meta 💡 In How Astryx Works, the Meta team explains the technical story behind the project, why they built it, and the basics of its operation. Agentic Frontend Developmen