标签：#webdev

If you've trained a transformer in the last three years, your GPU spent most of its wall-clock time inside a matrix multiplication. The kernels doing that work were probably written by cuBLAS, generated by a compiler stack like Triton, or hand-assembled on top of NVIDIA's CUTLASS templates. CUTLASS is the one most people don't see directly, but it sits underneath a surprising amount of modern AI infrastructure — from FlashAttention to vLLM to several internal kernels inside PyTorch. What CUTLASS actually is CUTLASS — CUDA Templates for Linear Algebra Subroutines — is a header-only C++ template library NVIDIA publishes on GitHub under Apache 2.0. It is not a drop-in replacement for cuBLAS. cuBLAS gives you a closed-source binary with a stable API: you call cublasGemmEx and you get a tuned kernel. CUTLASS gives you the building blocks to write your own kernel, with control over tile sizes, data layouts, epilogues, and how the kernel decomposes work across the GPU's memory hierarchy. That control is the point. If you're building a custom inference engine and your projection layer needs to fuse a GEMM with a SiLU activation and a residual add, cuBLAS can't fuse the epilogue for you — you'd launch the GEMM, then a separate elementwise kernel, paying twice for global memory traffic. With CUTLASS, the epilogue is a template parameter. You write the fusion once, instantiate the template, and the compiler emits a single kernel. This is why CUTLASS shows up wherever standard cuBLAS shapes don't fit — unusual data types like FP8, custom epilogues, sparse or grouped GEMMs, attention-shaped matrix products. Anywhere the stock library doesn't have what someone needs and the performance ceiling matters, you tend to find a CUTLASS kernel. CUTLASS is not a productivity library. It is a kernel-author's library. If you're writing PyTorch model code, you'll never import cutlass directly — you'll consume kernels that were built on top of it. The audience here is people who write the ker

The advice was correct. That's what makes it interesting. A creator with a large audience recently described the problem precisely: unused project ideas atrophy. They gave the prescription: externalize the idea, commit to a 30-60-90 day sprint, get into a community that holds you accountable, treat a deployed URL as the only real milestone. The audience listened. The ideas stayed unshipped. Not because the advice was wrong. Because advice is not a mechanism. The gap between diagnosis and structure There's a category of knowledge that's completely useless without enforcement. "You should exercise consistently." Correct. Also irrelevant for the 80% of people paying for gym memberships they don't use. "You should ship your side project in 30 days instead of perfecting it." Also correct. Developers have been hearing this for years. The projects that were "almost done" last year are still almost done. The advice identifies the problem. The problem persists. The gap between them is not information. It's structure. Discipline is the tax on misalignment One phrase from the transcript stayed with me: "Discipline is the tax on misalignment." The insight is sharper than it sounds. When what you're building doesn't connect to why you're building it, every work session requires a new act of will. You're not building forward momentum — you're paying an interest payment on a debt you haven't quite defined. This is why most sprint systems fail. They give you the structure (30 days, daily tasks, accountability partner) but skip the alignment check. The structure holds for two weeks. Then it becomes another system you're "almost following." What the AI makes worse Here's where it gets specific for developers using AI tools on side projects. The AI is genuinely useful. It generates architectures, writes boilerplate, outlines features, summarizes where you are. The output looks like forward motion. But the AI has no ground truth about your actual progress. It has your files and your pr

I switched my primary editor to Cursor in January of 2026 after spending three years on VS Code with GitHub Copilot. The reason was not the chatbot sidebar — every editor has one of those now — but the tab completion model that felt qualitatively different the first time I used it. After six months of daily use across TypeScript, Python, and Go projects, I have a clear picture of what Cursor actually changes about the coding experience and where the marketing outpaces the product. The Tab Completion Model Changed How I Write Code The first thing I noticed with Cursor was that I was pressing Tab instead of thinking about what to type next. That sounds minor, but after tracking my usage over a two-week comparison period, I found that Cursor's tab model correctly predicted my next edit 73 times out of 100 attempts in TypeScript files — measured by counting how often I accepted the ghost text suggestion versus how often I ignored it and typed manually. The mechanism behind this is Cursor's speculative continuation engine. It does not wait for you to stop typing before offering a suggestion. As you modify a function signature at the top of a file, the model silently recalculates the impact on every call site below. I tested this explicitly on a 340-line TypeScript service file where I renamed a parameter from userId to accountId . Before I could scroll to line 180 where the first call site appeared, Cursor had already ghost-written the updated argument. By the time I reached line 310, all six call sites had correct suggestions waiting. That multi-location awareness is what I have not seen any other editor replicate consistently. Not every language gets the same treatment. I ran the same completion acceptance test across three languages I work in regularly. TypeScript came in at the 73 percent acceptance rate I mentioned. Python was close behind at 68 percent. Go was noticeably worse at 51 percent, and the Go suggestions that I did accept frequently required minor correct

After finishing the app I've been working on, I decided to use Paddle to handle monthly and yearly subscriptions. I followed their documentation and getting started page and did almost everything they say, yet I got this error as in the screenshot. That happens after I generate a checkout link in the server side, and navigating to it. If you've encountered such issue before and somehow fixed it, or at least you know a little better in this field, any helpful hints or advices will be truly appreciated https://preview.redd.it/1y9muysics3h1.png?width=1209&format=png&auto=webp&s=baebc208c65540d0a2cc8be24c0e90110b3ceefd submitted by /u/WadieZN [link] [留言]

The Problem We Were Actually Solving Treasure hunts in Hytale arent just about generating loot. Theyre about generating simultaneous loot across thousands of players while keeping the world state consistent. We started with the assumption that events are stateless notifications: a hunt starts, we fire an event, clients react. That model worked fine when we had 200 concurrent players. At 2,000 players, the event bus turned into a 40 MB/s firehose of JSON blobs. Each loot drop required serializing the entire chunk state—blocks, entities, metadata—so clients could render the drop in real time. The JVMs G1GC couldnt handle the allocation rate. Every 47 minutes, a GC cycle would pause for 4.2 seconds, the chunk cache would fragment, and the server would hard crash with an OutOfMemoryError in net.minecraft.server.MinecraftServer#processQueue. The real problem wasnt the hunt logic. It was the architectural laziness of treating events as a catch-all glue layer instead of a boundary layer with explicit interfaces. What We Tried First (And Why It Failed) We tried Kafka as the event bus. The plan was to shard hunts by region and stream loot drops as compacted topics. The first run worked for about 6 hours before the compacted topics started to bloat. Each hunt was generating 700 KB of serialized chunk state per drop. At 30 drops per hunt per minute, thats 21 MB per hunt per minute. With 400 active hunts, the brokers couldnt keep up. The lag grew to 12 seconds, clients started rubber-banding, and we got a flood of Discord reports: You sank my boat! The event stream was now the bottleneck, not the event source. Next, we tried Redis Streams with a Lua script to aggregate loot drops per chunk. Within 30 minutes, we hit the 4 GB maxmemory limit because Lua scripts were stacking dropped items in memory while waiting for the next batch. The script was elegant—O(1) per drop—but the memory footprint made it unusable in production. Finally, we tried a sidecar service: a small Go process

Disclosure: I work on Passlens, a browser-first passport and ID photo maker. This post is about the product decisions behind that workflow, not a neutral review of every tool in the space. A passport photo looks simple until you try to make one that an upload form will actually accept. It is a headshot, yes, but it is also a small chain of constraints: physical size, pixel size, background, head position, print scale, and whatever the destination country's portal decides to reject that week. That is why generic photo editors feel slightly wrong for this job. They can crop. They can resize. They can export. The hard part is not any one of those actions. The hard part is keeping all of them tied to the document rule the user picked. The unit problem For developers, document photos are awkward because two units matter at the same time. A user may need a 2x2 inch passport photo. A visa portal may ask for 600x600 pixels. A print sheet may need 35x45 mm photos at 300 DPI. These are not the same request, but people often treat them as if they are. If the app only thinks in pixels, the print can come out the wrong physical size. If it only thinks in millimetres or inches, the digital upload can be rejected for the wrong pixel dimensions. A good workflow has to keep both ideas alive: the document size and the export target. That is the main reason Passlens keeps presets and print layouts as first-class pieces of the workflow instead of treating them as labels on a crop box. The crop is not the output Another small trap: the crop the user sees is not always the final output. For a digital upload, the crop usually becomes one image file. For printing, the same crop may become several photos arranged on 4x6, A4, or Letter paper with spacing, margins, and optional cut marks. If that print sheet is scaled by the browser or printer dialog, the whole thing is wrong. So the editor needs to separate three things: the face and shoulder crop the finished document-photo size the print s

submitted by /u/chicametipo [link] [留言]

Calculate and track FPS on the web page yourself to track performance issues and regressions. submitted by /u/jssmash [link] [留言]

Hey all, I want to setup a feed to stay on top of whats going on in specifically the software/web sector. Currently for this industry, I've only followed Cybernews, which is nice for what's going on with cyber security. However, I would also like to follow tech sources that generally have good writers and report on existing languages such as React, Vue, Django, Ruby, PostgreSQL, etc; as well as upcoming languages. Yes, I could search around and find whatever pops to the top of my search, but I would like to know what is actually reliable vs what might just look good. Also a plus if you can recommend any apps or sites that can create an organized feed or dashboard for news outlets. Things change quickly in this industry, so I'm trying to be a little more proactive to stay somewhat on top of things. Thanks! submitted by /u/Snowdevil042 [link] [留言]

I made a funnel site for a client in a pretty tough niche. It's honestly a waste of money, but he pays. I felt bad so I did a total design refresh because I wanted his business to do better. His invoice was due yesterday. He sent me a text saying his site has been down all month and sent me a screenshot. I could clearly see http:// and immediately corrected him. He said "oh it's working now with https. Do you think people will know to type that?" people click links to this, it will never be an issue if your site was down all month why didn't you tell me user error I'm about *this* close to terming this one and putting on some Amazon affiliate links. Edit: just redirected https to http. Thanks everyone! ✌️ submitted by /u/ihateroomba [link] [留言]

Hey guys, the past few months I've been building a marketplace (selling mainly digital assets) and I've been running to some issues with deciding on a payment system. I've heard from some friends that standard options like Stripe Connect is terrible for international vendors. I was doing some research but got stuck as it seems that the payment provider sector moves quickly, and I'd rather avoid using anything outdated. Would love to hear some recommendations, thanks guys. submitted by /u/mirror_mirror248 [link] [留言]

submitted by /u/fagnerbrack [link] [留言]

Is there a system that can handle this? Handling units where one row in the DB can have both pieces and kg ex. HU Code 001; Article PART1; Lot code ABC; Location X; tracking qty 5pc; base qty 200kg Loose lot ex. Article PART2; Lot code XYZ; Location Y; tracking qty 100pc; base qty 2000kg This should be configurable per article family and inherited in the article... So i can have a part of articles in HU and part in loose lot... both carying 2 inventory unit of measurments.. submitted by /u/dirtyfrank22 [link] [留言]

Part one hit 69K views, 250 upvotes here. The comments were better than the post. A lot of you asked about SEO, accessibility, performance, and whether GSAP is even necessary. Several pointed out the demo was missing something. You were right. Part one had a cursor clicking through scenes on a flat stage. No depth, no focus. This post adds a camera: zoom into the action on right-click, pan to follow the cursor through a save dialog, zoom into the result on the destination board, pull back and loop. Still under 40 KB. Still no video files. What part two covers: Zoom wrapper architecture — why gsap.to(frame, { scale: 1.4 }) breaks responsive scaling Pan math — the formula to center any target in the viewport at a given zoom level "Stay zoomed, pan to follow" — zoom in once, pan through the interaction, zoom out once. Not PowerPoint. Easing philosophy — why camera pans need sine.inOut , not power2.inOut , and the full easing table by motion type Cursor alive during camera moves — a frozen cursor during a zoom makes the whole thing feel mechanical. 30% drift fixes it. Graceful loop lifecycle — outro pattern instead of snap-reset SEO — every button label and heading in the demo is indexable DOM text, not a black box video Accessibility — prefers-reduced-motion support, autoAlpha for screen readers Performance — live FPS stress test you can run in your browser (8 → 24 → 48 elements with zoom + pan + stagger), not much performance drop The agent split — I wrote ~60% (the directing), an AI agent wrote ~40% (the tedious timeline code). Still a lot of manual editing, but way better than recording a video and the maintenance The full post has 4 interactive demos you can pause and inspect, including side-by-side comparisons of easing curves and cursor behavior during zooms. Full writeup with live demos: https://spanthi.com/blog/gsap-choreography-part-2 Production examples: https://costumary.com and https://costumary.com/web-clipper Skill for AI agents if anyone wants to save ti

🚨 URGENT: Highly Critical Drupal Core SQL Injection (CVE-2026-9082) Affecting PostgreSQL — Patch Immediately! The Drupal Security Team has released a "Highly Critical" security advisory ( SA-CORE-2026-004 / CVE-2026-9082 ) fixing a severe unauthenticated SQL injection vulnerability in Drupal Core. If you are running a Drupal site backed by a PostgreSQL database, you are at extreme risk. 📌 Vulnerability Overview CVE ID: CVE-2026-9082 Drupal Risk Score: 23/25 (Highly Critical) Attack Vector: Remote, Unauthenticated (Anonymous) HTTP requests Exploitation Status: ACTIVE IN-THE-WILD ATTACKS reported globally. CISA has officially added this flaw to its Known Exploited Vulnerabilities (KEV) catalog. Over 15,000 attack probes across thousands of sites have already been detected. Root Cause: A flaw in Drupal Core's database abstraction API—specifically within the PostgreSQL EntityQuery condition handler. Attacker-controlled PHP array keys reach SQL placeholder construction without proper sanitization, allowing arbitrary SQL execution. 💥 High Impact & Risks While Drupal estimates that less than 5% of installations use PostgreSQL, this configuration is heavily concentrated in enterprise, government, and higher-education environments. Successful exploitation grants: Full Database Access: Exfiltration of session tokens, sensitive data, and password hashes. Privilege Escalation: Promotion of standard or anonymous sessions to Administrator. Remote Code Execution (RCE): In PostgreSQL environments where database permissions are misconfigured (e.g., allowing COPY FROM PROGRAM ), attackers can pivot from SQL injection to executing arbitrary shell commands on the host server. 🔍 Affected Versions The flaw impacts all supported Drupal Core branches configured with PostgreSQL, including some legacy branches: Drupal Core 8.9.0 through 10.4.9 Drupal Core 10.5.x before 10.5.10 Drupal Core 10.6.x before 10.6.9 Drupal Core 11.1.x before 11.1.10 Drupal Core 11.2.x before 11.2.12 Drupal Core 11.

I got passion and no money submitted by /u/Free-Ant-463 [link] [留言]

What comes to mind is you have some code that you want other ppl to be able to interact with, then you want to store data somewhere so you provision a database, then you need somewhere to host that code so you spin up a server then plop your code into that server and make it publicly accessible. I get that there are other parts like networking, security, RBAC/permissions, Linux commands, scalability/maintainability, API, cloud infrastructure, version and change management. But does it basically boil down to those three things: Code Database Server Thanks submitted by /u/throwaway0134hdj [link] [留言]

The company I work for was bought up and in the new company, one of my responsibilities will be developing our website. The issue is that the website was built by an external agency. And almost any change to the website have to be implemented by them. And of course they charge for every change. They own both the backend and frontend side of the website. I can basically only add text and images. I wonder what exactly I should advise my new boss(whom really doesn’t like it and wants to make several changes). Is it really an option to move the site to a different hosting plattform and build another theme? Which seems like last resort. And not even sure if that is really feasible either. Hiring a developer would probably be more costly and I am decent with front end, but not enough experience with backend. So don’t think I can do it myself. Should I just cave and downgrade my position? Asking for higher access will probably be rejected. This is how they make money. Hopefully this is the correct sub, and someone have some insights and experience! submitted by /u/craigularperson [link] [留言]

submitted by /u/Ekrof [link] [留言]

I built a bot trained on my own X bookmarks and likes. Around 50,000 of them, accumulated over years...