The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
I created this technical writing sample to explain Broken Object Level Authorization (BOLA) in a simple and beginner-friendly way. The article uses an everyday analogy, API request examples, vulnerable vs. safe Python code, prevention techniques, and a quick self-check to explain how BOLA vulnerabilities occur and how developers can prevent them.
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
A watch movement lifted from one photograph into 3D. HEXANOX is an independent horology institute. We certify mechanical movements by measurement, amplitude, beat error, positional variance, to tolerances your eye cannot see.
I built this project to test A watch movement lifted from one photograph into 3D. HEXANOX is an independent horology institute. We certify mechanical movements by measurement, amplitude, beat error, positional variance, to tolerances your eye cannot see. The core engineering challenge was sustaining uncompromised 60 FPS rendering using Three.js (GLB 3D) while handling continuous user interaction without framework overhead.
WHAT I WAS TESTING:
I focused on two core engineering benchmarks:
Precision implementation of image → GLB under continuous interactive user input
Sustained 60 FPS render performance and zero-dependency browser execution
THE TECHNICAL SIDE:
Engineered directly in the browser with Three.js (GLB 3D), WebGL / GLSL Shaders, Canvas2D, Image → GLB. The application runs without third-party frameworks or build-step dependencies, using hardware-accelerated rendering and custom event loops to achieve zero-latency response.
Everything executes in the browser using Three.js (GLB 3D), WebGL / GLSL Shaders, Canvas2D, Image → GLB. No third-party frameworks, no heavy runtime bundles, and zero external tracking.
WHAT I LEARNED:
Balancing the mathematical rigors of image → GLB with tactile browser interaction required tuning event throttling and memory allocation to eliminate all garbage collection stutters.
Finding the sweet spot between mathematical precision and frame budget took careful profiling, but the result runs at a steady 60 FPS even on modest hardware.
TRY IT YOURSELF:
The live build is deployed on Netlify. Open it in your browser, test the controls, and observe the render response times.
If you are building high-performance 3D, physics, or creative web systems and want to collaborate, reach out here on Contra.
An interlocking gear-train workbench with true ratios and brass-blueprint charm.
I built this project to test An interlocking gear-train workbench with true ratios and brass-blueprint charm. The core engineering challenge was sustaining uncompromised 60 FPS rendering using Canvas2D while handling continuous user interaction without framework overhead.
WHAT I WAS TESTING:
I focused on two core engineering benchmarks:
Real-time gear mesh torque transfer and escapement tick mechanics
Interactive placement of interlocking brass gears with variable ratios
THE TECHNICAL SIDE:
Implements true involute tooth profiles computed via parametric equations. Rotational speeds are propagated through an adjacency graph of connected gear nodes.
Everything executes in the browser using Canvas2D, Mechanical Gear Physics, Involute Gear Tooth Profiles. No third-party frameworks, no heavy runtime bundles, and zero external tracking.
WHAT I LEARNED:
Floating-point precision drift caused gear teeth to gradually overlap after several minutes. Clamping phase angles to gear pitch intervals solved the drift.
Finding the sweet spot between mathematical precision and frame budget took careful profiling, but the result runs at a steady 60 FPS even on modest hardware.
TRY IT YOURSELF:
The live build is deployed on Netlify. Open it in your browser, test the controls, and observe the render response times.
If you are building high-performance 3D, physics, or creative web systems and want to collaborate, reach out here on Contra.
Built by Samin Sami | Developer & 3D Experimentation
Steampunk vibe👍
A three-card tarot spread where every face is unique procedural sigil-art, woven into one reading.
I built this project to test a three-card tarot spread where every face is unique procedural sigil-art, woven into one reading. The goal was simple: push interactive browser rendering using HTML5 Canvas and see how smoothly the system responds to direct user interaction.
WHAT I WAS TESTING:
I wanted to focus on two core engineering aspects:
Procedural generation of unique runic card sigils from mathematical formulas
Dynamic typography and card flipping choreography without heavy 3D frameworks
THE TECHNICAL SIDE:
The card faces render directly onto an HTML5 Canvas using polar coordinate trigonometric curves and procedural geometry. Every draw call is computed dynamically without image textures or external SVGs.
Everything runs in the browser using HTML5 Canvas, Procedural Sigil Geometry, Seeded Randomness. No plugins, no heavy dependencies, and no external tracking.
WHAT I LEARNED:
Balancing procedural symmetry with organic irregularity was the main hurdle. Pure mathematical curves looked too synthetic, so adding minor pseudo-random offsets gave the sigils their handcrafted appearance.
Finding the sweet spot between mathematical precision and tactile visual feedback took several iterations, but the end result runs consistently at 60 FPS.
TRY IT YOURSELF:
The live experiment is deployed on Netlify. You can open it in any modern browser, interact with the controls, and test the response times.
If you are working on similar 3D, physics, or creative web projects and want to collaborate, message me here on Contra.
cinematic💯 . Nice work😍