Mastodawn

For a while, deploying apps meant a familiar ritual: SSH in, pull the repo, pray nothing breaks, repeat for every service.

Manual.

Fragile.

Exhausting.

This week I finally consolidated everything into a proper self-hosted control plane.

The stack:
→ aaPanel as the central dashboard which I heard about from a friend
→ Docker for containerised app isolation (absolute cancer)
→ PostgreSQL for database management (with per-app panels and log visibility)
→ DuckDNS handling dynamic DNS + automated HTTPS via Let's Encrypt (stayed up until 3AM on Sunday for this btw)
→ Netlify on the frontend side cuz it's easy to deploy

The difference is hard to overstate.

One dashboard.

Full log access across services.

Deployments that don't require me to remember 12 steps in the right order at 11pm.

It's not a perfect setup, aaPanel is proprietary-ish and Netlify is clearly not self-hosted, but it's a defenitely a step away from "I'll fix it manually when it breaks" territory.

Curious if anyone here has migrated from this kind of hybrid setup toward something fully FOSS.

Always looking for the next rabbit hole.

- UltraX

#SelfHosting #DevOps #Docker #FOSS #Linux #Infrastructure #HomeServer #OpenSource #Privacy #Sysadmin #Python #javascript #saas

AA 1h ago

New.

ReversingLabs: Fake install logs in npm packages load RAT https://www.reversinglabs.com/blog/npm-fake-install-logs-rat

The Hacker News: Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials https://thehackernews.com/2026/03/ghost-campaign-uses-7-npm-packages-to.html @thehackernews #infosec #npm #phishing #javascript

Malicious npm packages use fake install logs to load RAT | ReversingLabs

The final-stage malware in the Ghost campaign is a RAT designed to steal crypto wallets and sensitive data.

ReversingLabs

Habr 1h ago

Анатомия PhaaS-кита: как коммерческая фишинговая платформа фильтрует песочницы через browser fingerprinting

Разбираем фишинговое письмо, пришедшее на адрес НКО: от SendGrid-доставки с SPF/DKIM pass до реверса JavaScript-фреймворка collector.js, который собирает GPU fingerprint, ломает WebRTC для раскрытия IP за VPN и детектирует DevTools — до того как жертва увидит фишинговую форму.

https://habr.com/ru/articles/1014420/

#phishing #phishingasaservice #browser_fingerprinting #webrtc #sendgrid #incident_response #threat_intelligence #javascript

Анатомия PhaaS-кита: как коммерческая фишинговая платформа фильтрует песочницы через browser fingerprinting

Хабр

Mathias Panzenböck 1h ago

The #JavaScript testing framework #jest somehow breaks built-in classes so that `x instanceof Error` always gives false. (Same for Array.) This completely breaks error handling when running tests! `Error.isError(x)` seems to work, but #TypeScript doesn't know about it (for NodeJS 24 LTS, even though it has that method)! I'm hack-fixing it with this TypeScript declaration:

Deni Mintsaev (mintydev)2h ago

Somehow I just implemented an #OAuth login method for the first time in my 5 years as a web developer. I'd only ever done email + password authentication before (and yes, with hashing, salting, and all the expected security measures). Well, I guess better late than never. Having a great experience with Better Auth so far!

#webdev #coding #React #JavaScript #TypeScript

Show thread

David Voki 2h ago

Unas cuantas imagenes de #simpleicons y #materialicons, combinadas con gracia y la paleta de la marca via loved @inkscape. Y ya lo tenemos: Responsive, multi-idioma y weblate, SEO, no-cookies, no-javascript. Hasta perdí el tiempo haciendo un marco de movil css.

https://carburoid.canvoki.net

Porqué cero #javascript? Porque no ha hecho falta. Ya no soy tan purista, si hubiera hecho falta lo hubiera añadido, pero no.

Porque cero #cookies? Pues porque "Aquí sí, nos preocupa tu privacidad de verdad".

Peter Kröner 2h ago

You can't subclass Proxy because it does not have a prototype property. But since this is #JavaScript and there are no rules…

Pseudonymous

2h ago

"Slow LLM" manipulates a quirk in the #JavaScript language to rewrite Fetch. When a user visits a chatbot domain the modified Fetch makes the response excruciatingly slow.

#TechnologyNews #AI

https://www.404media.co/this-web-tool-sabotages-ai-chatbots-by-making-them-really-really-slow

This Web Tool Sabotages AI Chatbots By Making Them Really, Really Slow

Artist Sam Lavigne created ‘Slow LLM’ to make people question their dependence on tools like Claude and ChatGPT. Or at least, make them super annoying to use.

404 Media

cnx-software.com 7h ago

Hugging Face’s Reachy Mini is an open-source AI robot for your computer or Raspberry Pi CM4

https://fed.brid.gy/r/https://www.cnx-software.com/2026/03/24/hugging-face-reachy-mini-open-source-ai-robot-computer-raspberry-pi-cm4/

Hugging Face’s Reachy Mini is an open-source AI robot for your computer or Raspberry Pi CM4

Better known for its artificial intelligence software solutions, Hugging Face unveiled the Reachy Mini open-source desktop robot last year. It is designed to deploy AI applications that interface with the physical world. The robot features a camera, four microphones, and a speaker, and can move its 6 DoF (degrees of freedom) head, rotate its body, or wave its antennas thanks to nine servo motors. Two versions are available: the Reachy Mini Lite designed for computers running Mac, Linux, and Windows, and the Reachy Mini Wireless autonomous robot, powered by a Raspberry Pi CM4, adding WiFi and Bluetooth connectivity, an accelerometer, and battery support. Both models share most of the same specifications: Reachy Mini's SDK can be found on GitHub. It's based on Python, but also supports JavaScript and Web apps, and can integrate with LLMs to easily build apps and publish them to Hugging Face. The SDK also features several

CNX Software - Embedded Systems News