Two exploits, one public API key: the day I attacked my own Supabase app
This is a submission for DEV's Summer Bug Smash: Smash Stories powered by Sentry . Every app has its rockstar bug. Mine didn't crash, didn't throw, di…
Team Management
⚑ Report a ProblemLatest Team Management news from Tech News
All topics
Culture
agents
ai
api
architecture
automation
beginners
career
claude
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
opensource
productivity
programming
python
react
saas
security
showdev
softwareengineering
startup
testing
tutorial
typescript
webdev
Defeating the Multi-Tenant SaaS Concurrency Trap in PostgreSQL
Most backend engineers implement multi-tenant quota checks using a standard "read-then-write" pattern. In production, this pattern is highly unsafe: S…
Organizations, Teams, and Invitations
In Subscription Billing and Plans we wired up the part of the product that collects money. This article covers the part that gets people into the prod…
Build a Feedback Channel That Does Not Become Another Abandoned Inbox
A feedback button is easy to ship. A feedback system is harder. The difference is not the input form. It is what happens after someone presses Send : …
I tried to build a DNA-inspired database. I accidentally made a Postgres index checker.
This project was supposed to be a quick experiment. I had been reading about DNA storage and got carried away with the idea. DNA can pack a ridiculous…
RAG in Laravel: Embeddings and pgvector for a Knowledge-Base Bot
In the last post we streamed AI responses over SSE. Now let's fix the problem every chatbot hits in week one: the model doesn't know your data. Ask it…
# Why We Built DRM: Stopping Production Incidents Caused by Manual Database Deployments *By Alexey Levin & Eli Shohat, co-founders of D-Band* ---
Why We Built DRM: Stopping Production Incidents Caused by Manual Database Deployments By Alexey Levin & Eli Shohat, co-founders of D-Band Between …
Why I Chose Neon (dev.to Database Partner) for My AI Routing Platform
When Neon became the official database partner of DEV Community, I was already a user. But the partnership made me look closer at why I chose Neon — a…
Building Vidiflow: A Production-Grade Video Downloader Backend in TypeScript
I Built a Production-Ready Video Downloader Backend in TypeScript — Here's What I Learned I just completed V2 of Vidiflow , a production-ready backend…
Node.js Email Verification Tests with PostgreSQL
Email verification looks easy until you try to prove it works repeatably in CI. The happy path is obvious: create user, send email, click link, mark a…
How I Built a 93-Day Streak Engine in Postgres That Scales to 28K Users
How I Built a 93-Day Streak Engine in Postgres That Scales to 28K Users Streaks are the backbone of habit-forming products. Duolingo has them. Strava …
Community Docker Images: keeping the operator open without a vendor registry lock-in
PostgreSQL community images address a real gap in how a Kubernetes database operator earns your trust. Running a database operator on Kubernetes means…
PostgreSQL vs MongoDB vs Cassandra: Multi-Node and How to Choose
Everything in Posts 2 through 5 - the B+Tree structure, the LSM write path, the compaction effect, the secondary index cost, happens on a single machi…
A Better Way to Store PostgreSQL Schemas in Git
Stop Committing 50,000-Line PostgreSQL Schema Files to Git If you've ever version-controlled a PostgreSQL database, you've probably run into the same …
Let Aurora Sleep: Multi-Tenant SaaS Cost, Reconsidered with AI IaC
For most multi-tenant SaaS, the default still rhymes: PostgreSQL on Aurora, behind an API, in a private subnet. Stable, well-understood, the shape you…
The AI Workflow Shift: Why Your Next Sprint Needs Better Execution Contracts
The Hook: the bottleneck moved, and most teams missed it The fastest way to ship with AI right now is not model shopping, it's workflow engineering. T…
$lookup join strategies: understanding the trade-offs with flexible documents
In a previous post , I explored how MongoDB chooses between nested loop, indexed loop, and hash join strategies for $lookup . Here, I examine what occ…
I extracted a government's entire budget from a 625-page PDF in 4 seconds
Liberia's national budget is public. By law, it has to be. Every year the Ministry of Finance publishes it as a PDF on their website, hundreds of page…
Your Postgres will die at 50 concurrent users, not 50,000. Here is the connection pooling guide nobody handed you.
Disclosure: I am a senior backend tech lead in Paris and I run HostingGuru, a small European PaaS for solo founders and small teams. This article ment…
I turned the psql commands I keep forgetting into buttons
You know the command exists. You've run it a dozen times. But every single time you need to see what's actually running on your database, you end up t…
The Deep Mechanics of Online Bulk Deletion in PostgreSQL
MVCC, WAL, vacuum, and replication slots under sustained delete load - and how to delete billions of rows without your database noticing Most "how to …
"Confluence Docs Lie. Tie Your Documentation to Code Instead."
Every team has that Confluence page. The one that was carefully written to explain what the service does, what the API looks like, what each DB column…
The Multi-Tenant Fortress: Bank-Grade Data Isolation in PostgreSQL
In a multi-tenant B2B platform, data leakage is an extinction-level event. If Property A logs into your dashboard and accidentally sees the guest data…
Advice Needed: Best Way to Build a Hospital Medicine Tracking App as a Beginner
Hi Dev Community! I am a CS graduate. I want to build an industry-standard full-stack app for my portfolio on my own. Recently, I have learned the bas…
ParadeDB NPM Package Seeks Feedback on Simplifying Postgres Integration with JavaScript via Drizzle ORM
Introduction: Bridging the Gap Between Postgres and JavaScript with ParadeDB The ParadeDB NPM package emerges as a targeted solution to a growing pain…
I got tired of writing the same history table boilerplate, so I built a Postgres extension
There's this problem I kept running into - first during my internship, then again on a freelance project I picked up afterward. Both of them used Post…
APScheduler's Advisory Lock Failure: My Solo VM's Scheduler Died Permanently
APScheduler's Advisory Lock Failure: My Solo VM's Scheduler Died Permanently It started with a user report: "Content engine auto-publishing should put…
Less boilerplate than raw SQL, less magic than ORM: generating PostgreSQL queries from Go structs
I like writing SQL manually in Go. Especially with pgx or database/sql, it gives you explicit control over what happens: no hidden queries, no entity …
I built DBeast: a PostgreSQL MCP server that gives AI assistants DBA-level tools
AI assistants can write SQL. But writing SQL is only a small part of working with a real database. Most database work is investigation: What tables ex…
Three SQL Injection Patterns That Still Ship in Node.js — And the ESLint Rule That Catches Them
TypeScript passed it clean. The code reviewer approved it. It shipped to production. Three months later, a penetration tester sent a report. The vulne…