Software Developer | Creator of Normals.me

  • 1 Post
  • 13 Comments
Joined 2 days ago
cake
Cake day: November 3rd, 2026

help-circle
  • I’m in the same position, I mean, I worked really hard to get MVP done, and I’m just a full stack developer, with 15 years of experience in the industry, and they say it’s vibecoded because the UI looks well done haha. That’s amazing, but in certain way I see it funny to be honest. It feels more like people those haters tried, failed and they have nothing better but attack XD.

    I told one of them, ok, try to create one and see how it goes. An AI cannot do what it has been done here that’s why it is so ridiculous when they say it is vibecoded.


  • Tailwind it’s a utility first framework with no pre built components, I think you are the one that does not know what are you saying, you build whatever you want and can fully customize the theme that’s literally the point of it, and it’s in the official docs.

    On the AI and closed source speculation, the auth, signatures, permissions, input handling is standard and went through an OWASP review before launch I said it before. I said I used AI for unit tests, integration tests, performance work, and even to attack my own app. I did not say I let it write the product. After 15+ years writing software, most of us already know AI still ignores SOLID, duplicates existing functions, and introduces security issues if you hand it the whole job. But you’re free to dislike the design or the decision to keep the anti-abuse parts private. The transparency page is public if you want the actual policies and review status instead of the theory.

    Again, if you don’t like the UI or think this is all robots, you can always join X, Reddit, or any other platform that steals your data and helps big corporations, or you can develop your own and invite me, but for that you need to be developer first. I thought people were different in the Fediverse.



  • Do I use AI to do everything? No, as a software engineer with over 15 years of experience in the industry, you can’t let AI do all the work any developer knows that at this point? It messes things up all the time, ignores design patterns, ignores best practices, writes code stupidly cloning functions already exists, ignores SOLID, ignores security vulnerabilities, and so on. But I did use it to run unit tests, integration tests, perform performance and speed tests, and even to hack my own app.

    The communities are random, there’s no fixed order in them. Besides, they’re mirrored of other existing communities. As you can see, they come from other sources like Mastodon based on the hashtags.

    Regarding the plus feature, it’s a way for users to decorate their profiles. I planned as source of income to maintain the project, otherwise, the project wouldn’t exist, unfortunately I would need to pay for the serves to host the app, the DB backups, the infrastructure, pipelines, buckets, well if you are developer you might understand how a platform actually works. But nothing is implemented yet, nor will it be in the near future regarding the plus.

    It is a real shame that people think that this is vibecoded, without prior experience working as a developer and I am saying this because it more than enough to hit F12 and check the network tab, and the weird thing for me is that people judge because how it looks, but this is what the CSS Framework https://tailwindcss.com/ offers. However I appreciate your comment and I hope I answered your questions.



  • Good question, however the security model doesn’t depend on the code being secret, and it shouldn’t. The auth, signatures, permissions and input handling are standard and went through an OWASP review before launch.

    What’s closed is the anti-abuse layer, spam, rate-limit tuning, the signals for detecting ban evasion and coordinated accounts. Those work partly because spammers don’t know the exact numbers. Lemmy’s and Mastodon’s are public and they get played for exactly that reason. Hope it helps :)