The Daily Index — Wednesday, July 9, 2025 · TLDR Index

ARTICLES & TUTORIALS

TLDR Web Dev

TLDR Web Dev

TAKING OVER 60K SPYWARE USER ACCOUNTS WITH SQL INJECTION

This developer discovered a SQL injection vulnerability in the Catwatchful stalkerware service that allowed him to access its database. He successfully dumped the 'user' table, gaining access to over 60,000 plaintext usernames and passwords.

ericdaigle.ca · 7 min

TLDR Web Dev

WE REACHED $1M ARR WITH ZERO FUNDING

ProjectionLab is a financial planning tool that was bootstrapped to $1 million in annual recurring revenue in four years. It started as a side project inspired by the financial independence movement. It wasn't an easy journey, due to the emotional rollercoaster of entrepreneurship and the transition from solo development to building a team.

projectionlab.com · 7 min

TLDR Web Dev

STOP FORCING AI TOOLS ON YOUR ENGINEERS

Managers should stop forcing AI tools on engineers and instead focus on outcomes rather than tool adoption. Mandating specific AI tools, creating AI-usage metrics for performance reviews, and eliminating traditional coding methods lead to slower development and messy codebases.

open.substack.com · 8 min

TLDR Web Dev

YOU SHOULD DELETE TESTS

While automated tests are necessary for maintaining confidence when making code changes, they should be deleted when they are flaky. Tests that are flaky, too strict, too slow to run regularly, or outdated due to changed business requirements all harm developer productivity.

andre.arko.net · 4 min

TLDR Web Dev

SUPABASE MCP CAN LEAK YOUR ENTIRE SQL DATABASE

Supabase's MCP integration can lead to the leakage of sensitive SQL database information. The attack involves a malicious user crafting a support ticket message that instructs an LLM, operating with elevated privileges (service_role), to extract data from sensitive tables and insert it into a user-accessible support thread. The main issue is the LLM's inability to distinguish between legitimate data and malicious instructions embedded within user-provided text.

generalanalysis.com · 8 min

TLDR Web Dev

REACT ROUTER OPEN GOVERNANCE

React Router is adopting an open governance model with a Steering Committee to guide the project's future development, moving away from founder-led decision-making to a more community-driven approach. The team will simplify React Router by reducing API surface area, focusing on core routing functionality, and deprecating APIs that overlap with new React features like built-in `title`, `meta`, and `link` components.

remix.run · 7 min

TLDR Web Dev

STEVE BLANK BLIND TO DISRUPTION – THE CEOS WHO MISSED THE FUTURE

Over 4,000 carriage companies failed to adapt to the disruptive technology of automobiles in the early 20th century.

steveblank.com · 10 min

TLDR Web Dev

AI EXTERNAL COMMENTS

Using external AI conversation links in code comments is a code smell, and instead, code should be self-contained and explainable through executable tests, descriptive inline examples, and constants.

open.substack.com · 6 min

TLDR Web Dev

HOW JSDOC SAVED MY DEV WORKFLOW

Using JSDoc, along with TypeScript compiler support in VS Code and ESLint, provides a valuable type-checking and development workflow for JavaScript projects where TypeScript is not a viable option.

spin.atomicobject.com · 5 min