Weekly Coding • 2025-03-24

Hello everyone. It's time to write a report on my adventures in code.

⚠️ But first: a significant security vulnerability has been discovered in Next.js . Unlike most vulnerabilities I read about but don't understand how they can be exploited 🤔💭... this one is straightforward: by setting "Skip Authentication" in the Header, it skips authentication 🫡👌. Next.js is a popular library, and many use it. The stats are on the screenshot below. Those using Next.js urgently need to update.

Last week, I spent 18 hours on various software projects during my free time

• 14 hours 🌐 on my personal website, which I wrote about in a previous post. Development took longer than I initially anticipated. I'm trying to take it slow. In my personal website, I'm currently setting up SQLite for data storage. It's progressing slowly. To be honest, I'm not sure if SQLite is truly necessary here. But since I've set my mind on it, I need to finish it 🐞.
• 2 hours 🍊 setting up an Orange Pi. Again, the ext4 file system broke down after a power outage in my apartment. I need to get the system to automatically repair files after such incidents, but I'm unsure how to do that. Previous attempts at auto-correction didn't work out. This time, I tried a different approach and hope it's successful - we'll see after the next power outage 💭
• 2 hours 🔙 studying backup tools. The ones I explored are called rclone and rustic . Both are written in Go and seemed complex and strange to me. Rclone struggles with proper synchronization between NTFS and exFAT, while rustic saves the full file path each time. What if I move my files to another folder? 🤔💭😔 It's unclear.