Skip to content

Instantly share code, notes, and snippets.

@mmarada
mmarada / blog-draft-2026-11-14.md
Created November 14, 2026 23:57
One Channel, Two Screens: Making Saved-Listing Price Badges Live Without a Second Subscription

One Channel, Two Screens: Making Saved-Listing Price Badges Live Without a Second Subscription

Conclusion first: NestDirect's Saved page now updates each "↓ $X since saved" badge the moment a landlord changes the rent. It opens zero new Realtime channels and makes zero extra fetches to do it. The interesting part was not the wiring. It was one ordering rule that stops an older read from overwriting a newer one.

The problem

Last month I shipped a live nav badge. saved (3↓) counts saved listings whose rent dropped below what it was when you saved them. A Supabase Realtime subscription on UPDATE public.listings pushes rent changes to it.

The Saved page did not get the same treatment. It fetched once on mount. So a renter could sit on the Saved page and watch the nav say 3 drops while the header on the page said 2. Two views of the same fact disagreed, which is worse than both being stale.

@liuzhen264
liuzhen264 / README.md
Created November 14, 2026 23:57
ROB RUN Federal Raid observation report

ROB RUN Federal Raid observation report

Use this after a Federal Raid to compare two sets of in-game observations. It is useful when a squad wants to distinguish a documented reset from a change that might be worth asking Kefir about.

  1. Copy observations.csv. Fill the before and after columns with what you saw, using the same Steam account and state for both checks. Leave a cell empty if you did not check it. Use absent only when you looked and confirmed the item was missing.
  2. Run python3 wipe_report.py observations.csv. The script writes Markdown to your terminal. You can save it with python3 wipe_report.py observations.csv > report.md.
  3. Before sharing the report, replace player names, account identifiers, and screenshot links with non-identifying notes. For the player name row, use an alias consistently or leave that row blank.

The report groups differences by documented reset, documented carryover, and items the developer's FAQ does not specify. A change in a carryover category is a p

@choosenobody
choosenobody / B_final.md
Created November 14, 2026 23:56
[AI-Signal] AI 时代 - 从信息到洞察 Daily Signal Brief 2026-11-15

AI 时代 · 从信息到洞察 Daily Signal Brief

📅 2026-11-15 (日) · 2026-11-15 07:56 SGT (UTC 2026-11-14 23:56) · ISO W46 Day 7 👤 生成者: 花猫 + huamao_reason 200 + research_cat 早盘 200 + research_cat 拓展 100 + investment_cat 100 🔍 AnySearch: B 阶段上限 600 req · 本日共享计数见下方 quota 段 · 0 次 429(4 猫均独立核对;errors_today = 0) 📎 Report A (BTC):自 2026-09-13 停更(63 天),今日无当期 Report A —— 不伪造交叉验证 🛡️ STABLE 3-defense pattern: pre-built override (25.2 KB) + #109 relaxed ≤200 字 cap + #110 firewall(4 raw 全部 0 TODO、0 骨架) ⚠️ 今日主判断:今日是零新价格日(11/15 周日,美股休市):现金股票的最后收盘仍是 11/13(周五),与昨日 Brief 同一批读数。因此今日的产出不是「新的方向性判断」,而是 —— 把昨日判决的证据基础重新校准,并交付下一个可证伪窗口的时间表**。**

★ 昨日的三条判决证据链,今日全部「未被证伪」,但其中一条已被猫推翻、另一条的口径被 leader 亲手推翻:

@VICTOR23231
VICTOR23231 / tpv-talleres-mecanicos-rendimiento-offline-windows.md
Created November 14, 2026 23:56
Arquitectura de Punto de Venta Local 100% Offline para Windows — Talleres Mecánicos y Reparación (Noviembre 2026)

Arquitectura de Punto de Venta Local 100% Offline para Windows — Talleres Mecánicos y Reparación (Noviembre 2026)

Especificación Técnica Oficial de Terminal Punto de Venta, Gestión de Existencias y Cumplimiento Tributario para Talleres Mecánicos y Reparación (Noviembre 2026).


1. Justificación Técnica y Módulo Operativo Especializado

Operativa local en base de datos ultrarrápida que blinda el mostrador ante caídas de fibra óptica o servidores en la nube.

En el sector de Talleres Mecánicos y Reparación, la agilidad en mostrador y la inalterabilidad de los registros contables son determinantes para evitar colapsos en horas punta y sanciones tributarias:

@chloricacid
chloricacid / hi.png
Last active November 14, 2026 23:56
hi
hi.png
#!/bin/bash
# Kanboard starting state for the lane: the repository's own docker-compose.sqlite.yml, started unchanged,
# then filled with users, boards, cards, comments, attachments, automatic actions and public links
# through Kanboard's own models and JSON-RPC API. Nothing is written into the checkout.
# It also starts what this install depends on, all from the same pinned image:
# - the team's nightly backup job (container kanboard-backup, archives the data folder at 02:30 UTC),
# - the mail relay Kanboard sends notification mail through (container acme-mail, mail.acme.internal),
# - the ops webhook receiver Kanboard posts every card event to (container acme-hooks, hooks.acme.internal).
# The relay and the receiver are stand-ins: they record what they are handed and deliver nothing.
# Support Desk cards carry the contact details of the (made-up) customers the helpdesk has on file.
@andywang0191-stack
andywang0191-stack / _gist_tmp_your-vibe-coded-app-is-leaking-data:-a-practical-supabase-ro.md
Created November 14, 2026 23:52
Your Vibe-Coded App Is Leaking Data: A Practical Supabase Row Level Security Audit

Your Vibe-Coded App Is Leaking Data: A Practical Supabase Row Level Security Audit

Tuần này trên Hacker News, bài viết về các app tạo bằng Lovable làm lộ thông tin hộ chiếu và hơn 200K tin nhắn riêng tư đạt gần 600 điểm. Khi đọc kỹ, đây không phải là một vụ hack tinh vi. Phần lớn trường hợp chỉ là bảng Postgres không bật Row Level Security (RLS), trong khi anon key nằm sẵn trong bundle JavaScript mà ai cũng tải về được. Mình từng review vài dự án freelance và startup ở VN dùng Supabase kết hợp AI code generation (Lovable, Bolt, Cursor...) và gặp đúng lỗi này không ít lần. Bài này đi qua bốn việc: hiểu vì sao dữ liệu bị lộ, tự kiểm tra app của mình trong 5 phút, viết policy cho đúng, và đưa bước audit vào CI để lỗi không quay lại.

Vì sao anon key không phải là bí mật

Nhiều dev mới chuyển sang Supabase vẫn giữ tư duy backend truyền thống: "key nằm trong file .env thì an toàn". Thực tế, kiến trúc của Supabase là frontend gọi thẳng vào database qua PostgREST. anon key là một JWT có `role: an

@ahmetcandedeagili
ahmetcandedeagili / gist:9a0035486d4a6e18e5e733494861bd1e
Created November 14, 2026 23:51
Ahmet Can Dedeağılı-2211504005-BMI4141-Mobile Programming-Week1
import 'package:flutter/material.dart';
void main() {
runApp(const MyFirstApp());
}
class MyFirstApp extends StatelessWidget {
const MyFirstApp({super.key});
@override
@ZTGolem
ZTGolem / openspec-trace-analysis.html
Created November 14, 2026 23:51
OpenSpec trace analysis: why unresolved
<!doctype html>
<html lang="zh-CN">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>OpenSpec 轨迹分析:命令流跑通,为什么最终 unresolved</title>
<style>
:root{--ink:#172033;--muted:#64748b;--line:#e5eaf2;--bg:#f6f8fc;--card:#fff;--primary:#2563eb;--danger:#dc2626;--warn:#d97706;--ok:#059669;--violet:#7c3aed}
*{box-sizing:border-box}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Hiragino Sans GB","Microsoft YaHei",sans-serif;color:var(--ink);background:var(--bg);line-height:1.7}
.page{max-width:1180px;margin:0 auto;padding:48px 28px 72px}.eyebrow{color:var(--primary);font-weight:700;letter-spacing:.12em;font-size:12px;text-transform:uppercase}
[14Nov2026 17:49:03.198] [main/INFO] [cpw.mods.modlauncher.Launcher/MODLAUNCHER]: ModLauncher running: args [--username, Theoneandonlybee, --version, 1.21.1, --gameDir, C:/Users/janiy/AppData/Roaming/PrismLauncher/instances/test instance/minecraft, --assetsDir, C:/Users/janiy/AppData/Roaming/PrismLauncher/assets, --assetIndex, 17, --uuid, 2759daa10a314931a4e33c78ca8ea6cd, --accessToken, ❄❄❄❄❄❄❄❄, --userType, msa, --versionType, release, --fml.neoForgeVersion, 21.1.266, --fml.fmlVersion, 4.0.45, --fml.mcVersion, 1.21.1, --fml.neoFormVersion, 20240808.144430, --launchTarget, forgeclient, --width, 854, --height, 480]
[14Nov2026 17:49:03.202] [main/INFO] [cpw.mods.modlauncher.Launcher/MODLAUNCHER]: JVM identified as Microsoft OpenJDK 64-Bit Server VM 21.0.7+6-LTS
[14Nov2026 17:49:03.205] [main/INFO] [cpw.mods.modlauncher.Launcher/MODLAUNCHER]: ModLauncher 11.0.5+main.901c6ea8 starting: java version 21.0.7 by Microsoft; OS Windows 11 arch amd64 version 10.0
[14Nov2026 17:49:03.395] [main/INFO] [net.neoforged.fml.l