preetigagarwal

6 ms·

1.
by preetigagarwal 5mo ago
REST APIs are deceptively simple on the surface but notoriously inconsistent in practice — different teams implement auth, pagination, and error handling completely differently. AI tools struggle because there's no single 'correct
2.
by preetigagarwal 5mo ago
API security is the most common blind spot. Vibe coding tools generate endpoints fast but almost never think about broken authentication, excessive data exposure, or injection flaws. A solo dev can ship a beautiful frontend with completely
3.
by preetigagarwal 5mo ago
Congratulations! 5k users is a real milestone — especially for open source where you rarely hear from most of your users. The ones who take time to register are your most valuable early adopters. Would be curious what your biggest growth ch
4.
by preetigagarwal 5mo ago
Security skills are becoming more valuable not less. As AI writes more code, the attack surface grows faster than ever. Someone still needs to find and fix the vulnerabilities that AI introduces. Knowing how to think like an attacker — not
5.
by preetigagarwal 5mo ago
The AI fatigue is real. The problem is most AI products are just wrappers that add a chat interface to existing tools and call it AI. The ones that actually stick are the ones where AI is doing something that was genuinely impossible or imp
6.
by preetigagarwal 5mo ago
Cold start is the hardest problem in any marketplace. What worked for us was focusing on one side first — get the supply side locked in before worrying about demand. Also doing things manually at the start that don't scale. Personal ou
7.
by preetigagarwal 5mo ago
Referrals from the first 2-3 clients were everything. But to get those first clients — LinkedIn outreach with a very specific message about their problem worked better than anything else. Generic 'I am available for work' messages
8.
by preetigagarwal 5mo ago
These groups typically exploit unpatched vulnerabilities and exposed credentials. Most companies don't discover they're vulnerable until after a breach. Regular security audits are the only real defense.