Error Event Metadata: Attach User-Safe Release, Environment, and Request Context
TL;DR: Attach release, environment, service, route, request ID, and a stable correlation ID to an error event. For a scheduled B2B import, also corr…
Testing & QA
⚑ Сообщить о проблемеПоследние новости Testing & QA от Tech News
Все темы
agents
ai
api
architecture
automation
backend
beginners
career
claude
cybersecurity
devchallenge
devops
discuss
javascript
llm
machinelearning
mcp
node
opensource
performance
productivity
programming
python
security
showdev
softwareengineering
testing
tutorial
typescript
webdev
PureHub v1.0.0‑beta.59 – Security‑first Android utilities
PureHub v1.0.0‑beta.59 – Security‑first Android utilities PureHub continues its mission of providing 26 free, no‑ads, privacy‑first, open‑source uti…
Email Verification Logs Need a Privacy Contract
Email verification is usually discussed as a delivery problem: did the message arrive, did the link work, and did the user finish signup? In product…
Privacy Budgets for Test Email in Web Apps
Email is often treated as harmless test plumbing. In a web application, it is closer to a small data store: messages can contain personal-looking ad…
Your screenshot tool is the leak — doing redaction entirely client-side
The most common way people redact a screenshot is still this: Take the screenshot. Search "blur image online". Upload it to the first result. Blur t…
OAuth Test Tenants Need Email Trust Boundaries
OAuth tests often stop at the redirect. That misses an important part of the trust story: what happens when a user must prove control of an email ad…
Two ways to stop trusting your AI provider on faith
Disclosure: I use both, and the links below are referral links — I may earn a reward if you sign up. Call a hosted model and you trust two things yo…
Classify the Payload Before It Leaves
You should treat every hosted coding model as a guest that can read only the crates you deliberately load. A free price does not shrink that guest's…
Privacy Policy for a Small App: What Google Play Requires
A lot of solo developers find out about the privacy policy requirement at the worst moment: the app is built, the closed test is about to start, and…
[Tailscale] Complete Guide to VPN Connection to Home LAN with Subnet Router
Accessing Your Home LAN from Outside with Tailscale Subnet Router I want to access my home NAS or server while away from home. But VPN setup is diff…
Gate the Context Pack Before It Leaves
You should refuse a hosted model call until a local gate marks the context pack clean. A free server is still a machine you do not administer, so th…
Advanced Privacy: A Practical Defense-in-Depth Guide
Privacy is not a product you install. It is a system of boundaries that prevents one disclosure from becoming a complete map of your life. No setup…
Email Test Data Needs a Privacy Budget
Email fixtures are easy to treat as disposable. Create a temporary email address, trigger a signup or password reset, inspect the message, and move…
Real-Estate Discovery Retrieval: Hosted vs Self-Managed Privacy Controls (Choose Hosted)
Short answer: use a staged retrieval design with explicit collections, bounded queries, and traceable source context; choose a hosted API when your…
How to Test a Shopify Store Across Accept, Reject, and GPC States
A practical workflow for testing Shopify pixels, cookies, app-injected tracking, consent behavior, GPC, and accessibility across real browser sessio…
Email Test Fixtures Need a Trust Boundary Map
Email verification tests are often treated as a small automation detail: create an address, wait for a message, click a link, and delete the fixture…
I Built a Browser-Local PDF Redaction Tool Because a Black Rectangle Isn't Redaction
A black rectangle can hide text on screen without removing the text stored inside a PDF. Someone may still be able to select, copy, search, or recov…
Redacted Email Debugging for Safer Account Flows
Email verification failures are hard to investigate. A user says the message never arrived, support sees a failed attempt, and an engineer opens log…
A Small Test Fixture for Browser Redaction Before Screen Sharing
A green extension badge is not a test result. Before sharing a browser, use a small fixture that exercises the places where redaction commonly fails…
Browser Email Tests Need a Retention Boundary
Browser-based account flows often treat email as an external dependency. The browser submits a form, the application sends a message, and the test w…
BitMessage: What If Communication Could Become a Source of Decentralized Participation?
BitMessage is an experimental protocol proposal built around Proof-of-Presence-and-Meaning (PoPM), a participation mechanism designed to connect eve…
Self-Hosting Supabase for Health Data under GDPR: Lessons From Running a Telemedicine Platform
We run Docto24 , a German telemedicine platform: patients book online consultations, licensed physicians review medical questionnaires and issue e-p…
Encrypted at rest unless it cannot be, and the file itself says which
Notifio's auto-reply feature works by watching you reply to one listing by hand, and then replaying that on future listings. The recording it keeps…
Hash the email. Do not hash the IP. Both mistakes still return 200.
A Purchase reaches the Meta Conversions API with a 64-character hex string in every user_data field. Test Events shows the event. Match quality on t…
Mullvad Public DNS Shuts Down Nov 2: 5 Checks I Ran First
On September 3, Mullvad announced it is shutting down the public encrypted DNS servers it has run since 2022 and sponsoring Quad9 instead. If you ne…
Tenant Incident Reconstruction with Next.js Server Action API Route Logging
The decisive trade-off is fidelity versus exposure: log enough stable context to reconstruct which tenant cohort saw which experiment behavior, but…
Node.js Fintech Crops — Strip Image Metadata or Retain Attribution
TL;DR: Strip embedded metadata from every public smart-cropped derivative. If photographer attribution has a legitimate product purpose, store a rev…
Metadata to Attach to Error Events for PII-Safe User Incident Tracking
TL;DR: Attach release, environment, service, route template, request ID, and a stable pseudonymous correlation value to an error event. Keep raw use…
2026 Node.js Scheduled Deletion for Identity Verification Photos: Retention Controls
Short answer: schedule deletion from a durable record of each identity verification photo's expiry time, then make the worker idempotent and observa…
OAuth Callback Logs Need a Redaction Boundary
OAuth callback handlers are usually reviewed for the right reasons: state validation, PKCE, redirect URI checks, and token exchange errors. Logging…