indigane

TL;DR: I ended up yak shaving a tool for conducting a card sorting online, and wanted to share it because I couldn't find one myself. Also I don't have to maintain or host it so it should stay up for a long time, hopefully.

https://github.com/indigane/cardsort

The long version of why:

I wanted to conduct a quick, one-off card sorting for a side project, but after spending hours looking at the available commercial and open source solutions, I couldn't find one that worked for me.

The commercial ones either had too restrictive free tier with only 20 cards or so, or they lacked basic features such as open sorting vs. closed sorting, or they would have cost me upwards of $100/month.

The open source ones would have required me to self-host them, which I wasn't too excited about, and after trying docker-compose up on one of them and hitting errors after errors, I was even less excited so I gave up on that. I also looked for demos of open source projects that could have worked for the one-off use I needed, but no luck there.

I wanted to avoid spending time developing my own solution, as I already had the side project I was supposed to be working on. I also especially wanted to avoid spending time on maintaining and hosting. If I could get away with a static site, no database, thus no need for me to host it, and get it done without spending too much time on it, it might be worth it, and maybe someone else could benefit from it too. And the result was this.

The lack of a backend has some obvious trade-offs, but the benefit is that it is fire and forget, and I can hopefully come back years later and use it again for some other one-off thing.

Google is constantly pushing to move from authenticator codes to Google prompt, due to it being more secure according to them. I can not find any explanation on the security of authenticator vs prompt. With my limited knowledge, I believe both are susceptiple to phishing, so what's the security benefit?