Island traced fake ChatGPT, Gemini, Claude and Perplexity ad tools to a phishing operation whose Telegram channel took hundreds of victim submissions. Its targets are agency buyers and admins, whose one login can spend several advertisers' balances.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+15
- Incentives40
- Confidence60
buildOne report1 publisher Two of WebRTC's three ICE candidate types depend on servers you operate
The spec's three JavaScript APIs handle codecs, encoding and transport once two peers have found each other. Finding them takes a signaling service, STUN and TURN, and all three are yours to run and budget for.
Reality
- Evidence62
- Adoption25
- Hype gap+12
- Incentives20
- Confidence58
buildOne report1 publisher Origin validation ships off by default in four of five dominant WebSocket frameworks
The upgrade request is an HTTP GET that carries session cookies cross-origin with no preflight, so CORS never sees it, and the frameworks that could check the Origin header for you mostly hand that job to your route code.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+18
- Incentives30
- Confidence52
buildOne report1 publisher The 300-monitor wall is real, and sharding Uptime Kuma is a bill you keep paying
A new Go project says it survives 5,000 checks by splitting control plane from probes. The more useful part is its accounting of what running nine Kumas actually costs.
Reality
- Evidence24
- Adoption10
- Hype gap+28
- Incentives82
- Confidence30
buildOne report1 publisher Two Next.js apps instead of one, because isAdmin is a privilege escalation waiting to happen
A dev.to build log splits storefront from admin on authentication grounds, not bundle grounds. The stronger version of the argument is about which database records are allowed to be shared.
Reality
- Evidence24
- Adoption9
- Hype gap+26
- Incentives42
- Confidence41