The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Back to feedPost
Ran my own security tool on my own code. It found 60+ issues. One of them let any user see everyone else's data.
I wrote the code. My tool roasted me. Fair enough.
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Related posts
An AI-built app passed every RLS test, but a live Supabase audit found leftover privileges and an undocumented function. Fixed: 28 → 11 privileges.
Passing every RLS test with extra grants still live is the classic AI-built app gap: the agent tests what it built, not what it left behind. A privilege audit belongs on every launch checklist.
Secure Password Utility
An interactive web security tool with built-in character filtering logic and a seamless single-click clipboard copying system.
One-click copy is handy.
Most software doesn't fail in the code. It fails in the first conversation, when nobody asks what the product is actually for.
Hi Contra 👋 I'm Arshad, a software architect in Karachi. With my team at 360Xpert Solutions, I design and build software products, from the first sketch to a live app.
The video is our process in 20 seconds: design it, build it, add the AI, ship it.
The 8 blurred tiles at the end are real products we've shipped. I'll unlock them here one by one: what each one does, the hard parts, and what we'd change.
#1 is next: a legal AI built for Pakistani law, where every answer cites the statute it came from.
Follow along if you want to see the rest.
