BFBozad from GetXAPIintwitter-api.hashnode.dev·2h ago · 18 min readX (Twitter) API Object Reference: Tweet and User FieldsEvery response from the X API v2 is built from a small set of objects: the Post (still called a Tweet in most field names), the User, and the Media, Poll and Place objects that hang off them. This ref00
DJDevy Jonesindevyjones.hashnode.dev·12h ago · 4 min readFinding Exposed APIs and Services: A Practical Guide for DevsAs developers, we're constantly building and deploying applications, often exposing APIs, web services, and various network ports. While we strive for security from the outset, it's easy for misconfig00
EPEUNMIN PARKineunminpark.hashnode.dev·15h ago · 11 min readThe 403 That Only Real Users SawA while ago, every native user of Q-Alpha — every person on iPhone, iPad, or Mac — opened the Dashboard and found the same thing: the Institutional Signal Sync card, frozen on "Unable to load data." N00
LDLakshay Dhoundiyalinlakshaydhoundiyal.hashnode.dev·2d ago · 10 min readHow Does Gmail Know a Username Is Already Taken in Milliseconds?You type a username. Maybe it is something simple like example123@gmail.com. Before you have even finished thinking about it, the signup page responds: “Username already taken.” ❌ It feels almost inst00
MMma michaelincloudsway.hashnode.dev·2d ago · 9 min readGPT-6 Astra vs. GPT-5.6 Sol: How to Evaluate Cost and ReliabilityTL;DR GPT-6 Astra’s standard input and output token prices are 2.5 times GPT-5.6 Sol’s launch-period rates. Independent benchmarks show uneven improvements, not a universal advantage across every wo00
DJDevy Jonesindevyjones.hashnode.dev·4d ago · 5 min readFinding Exposed APIs and Services: A Practical Guide for DevelopersAs developers, we're constantly building and deploying applications, often exposing APIs and services to the internet. While this is essential for functionality, it also introduces security risks. Uni00
QQnaydsinai-guide.hashnode.dev·5d ago · 7 min readFrom Prompt to Product: A Beginner-Friendly Way to Add AI to a Web AppAI features are becoming common in web applications. A search box can understand natural language, a support page can answer questions, and a writing tool can generate a first draft. What looks simple00
OBOliver Bloominoliver-bloom-musings.hashnode.dev·6d ago · 6 min readWhat Are Some Alternatives to Building Your Own Email Sending Infrastructure for Product Notifications?For sending product notifications — usage alerts, plan-limit warnings, single-user status updates — without building your own mail server, the main alternatives fall into three categories: managed tra00
PEPaymos Engineeringinpaymos-engineering.hashnode.dev·Aug 23 · 5 min readYour webhook sender is an SSRF gadgetMost writing about webhook security is about the receiving end. Verify the signature, compare in constant time, reject a stale timestamp. All correct, all about the wrong direction for the problem I w00
RRulestackinrulestack.hashnode.dev·Aug 23 · 4 min readCreating Bluesky starter packs from code: three AT Protocol records and one non-idempotency trapBluesky starter packs look like a single thing in the app — a shareable page that lets a new user follow a curated group in one tap. At the protocol level they are three separate records glued togethe00
