Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Windows Tipps & SecurityNighthawk M7 Pro im Test: Flexibler, aber teurer 5G-Router(21.09.2026 um 10:30 Uhr)
Sichere ProgrammierungNeue Gmail-Funktion: So sparst du jetzt Zeit bei Einmalcodes(21.09.2026 um 10:00 Uhr)
Sichere ProgrammierungYour GIF exporter is fine — the container is the problem(21.09.2026 um 10:01 Uhr)
Sichere ProgrammierungCSS, Motion, or GSAP? I Choose by Who Owns the Animation(21.09.2026 um 10:12 Uhr)
Windows Tipps & SecurityNighthawk M7 Pro im Test: Flexibler, aber teurer 5G-Router(21.09.2026 um 10:30 Uhr)
Sichere ProgrammierungNeue Gmail-Funktion: So sparst du jetzt Zeit bei Einmalcodes(21.09.2026 um 10:00 Uhr)
Sichere ProgrammierungYour GIF exporter is fine — the container is the problem(21.09.2026 um 10:01 Uhr)
Sichere ProgrammierungCSS, Motion, or GSAP? I Choose by Who Owns the Animation(21.09.2026 um 10:12 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

I built a detention-pay calculator for truckers in a day — unglamourous niches beat another AI wrapper

Every "what should I build" thread on here is full of AI wrappers fighting over the same five SaaS founders. Meanwhile there's a guy sitting at a loading dock right now, doing arithmetic in his head, who is about to undercharge his broker…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Every "what should I build" thread on here is full of AI wrappers fighting over the same five SaaS founders. Meanwhile there's a guy sitting at a loading dock right now, doing arithmetic in his head, who is about to undercharge his broker by a few hundred bucks because nobody built him a 30-second tool.



I built that tool. It's a free detention-pay calculator for truck drivers. This is the build log — the niche-selection, the single-file stack, and two decisions (an SVG gauge and a no-mail-service auth scheme) that were more interesting than the app deserves.



I'm not a trucker. I build small free web tools for industries other may find unglamourous or not enticing enough. That honesty matters later.






The problem (worth $2–6k/yr to one user)



Truckers get a "free time" window at a dock — usually 2 hours. Past that, the broker owes detention pay (~$50–100/hr). Drivers leave an estimated $2,000–6,000/year of it unclaimed, mostly because the math + the paperwork is annoying enough to skip.



So the spec wrote itself:




  • In/out times + free hours + rate → dollars owed.

  • Export a dispute-ready PDF they can email the broker.

  • Work on a phone, no login, instant.






Validating before writing a line



The mistake I almost made: assume the niche is empty because I'd never heard of it. I checked. It is not empty — DockClaim ($49/mo, GPS tracking), Detention Buddy, a couple of $9.99/mo App Store apps, even a free email-gated web calculator or two.



That killed my first instinct ("be the only one") but clarified the real wedge: everything is a paid app download or email-gated. The opening was a genuinely free, no-signup, instant web version that also generates the claim PDF. Not "the only detention tool" — the one with the least friction. I'll say more on why I'm careful about that claim at the end.



Lesson: validate to find your angle, not just a go/no-go. "Crowded but all friction-heavy" is a fine market.






The stack: one HTML file



No framework. The whole app is a single self-contained .html — markup, CSS, vanilla JS, jsPDF from a CDN. It deploys as a static asset. Cold-loads instantly on a trucker's phone on dock wifi, which is the only performance budget that matters here.



The core math is anticlimactic, which is the point — including the one edge case people forget, the overnight dock wait:




function detentionOwed(arriveMin, leaveMin, freeHrs, rate) {
let wait = leaveMin - arriveMin;
if (wait < 0) wait += 24 * 60; // crossed midnight at the dock
const billable = Math.max(0, wait / 60 - freeHrs);
const charged = Math.ceil(billable); // brokers bill by the hour
return charged * rate;
}






The PDF is the actual product. jsPDF, a few doc.text() calls laying out a claim, and a footer line — "Generated free at quackbuilds.com…". That watermark is the entire distribution strategy: every claim a driver emails a broker carries the tool into a logistics company's inbox. The artifact does the marketing.






Decision 1: an SVG instrument gauge instead of a progress bar



The audience reads dashboards all day, so the result is a round gauge — a dim "free-clock" arc that hands off to a glowing amber "billable" arc, with a seven-segment LED readout (DSEG font) in the center.



The trick is splitting one dial into two arcs with stroke-dasharray + stroke-dashoffset. A 270° sweep, the free segment first, the billable segment offset to start exactly where free ends:




const R = 84, C = 2 * Math.PI * R, ARC = 0.75 * C; // 270° of the circle

const freeLen = (Math.min(freeMin, wait) / wait) * ARC;
const billLen = (Math.max(0, wait - freeMin) / wait) * ARC;

gaugeFree.setAttribute("stroke-dasharray", `${freeLen} ${C}`);
gaugeBill.setAttribute("stroke-dasharray", `${billLen} ${C}`);
gaugeBill.setAttribute("stroke-dashoffset", `${-freeLen}`); // negative = start later






Both <circle>s are transform="rotate(135 100 100)" so the gap sits at the bottom. CSS transition on the dash properties animates the fill for free. No charting lib.






Decision 2: cross-device sync with no email service



Users wanted their saved loads to survive across phone → laptop. That needs identity. The repo's other apps use crypto wallet connect — great, except truckers are roughly the least crypto-native audience alive. And there was no mail service wired up, so magic-links were off the table without adding (and paying for) one.



So: email + a recovery code. On first backup the server mints a high-entropy code, returns it once, and stores only an HMAC of it. Restore = email + code. Cheap, no mail provider, and the code is the secret so it's not guessable like a bare email would be.




const hash = (email: string, code: string) =>
createHmac("sha256", PEPPER)
.update(`${email.toLowerCase()}:${code.toUpperCase()}`)
.digest("hex");

// store `hash` only; on restore compare with timingSafeEqual()






Wallet connect is still there as a second option for the few who want it. Everyone else types an email and copies a code.






The gotcha that almost shipped



The repo's shared Supabase client uses the anon key. Convenient — and it means any table that client touches is reachable through public PostgREST. Fine for public data; not fine for a table of user logs. Someone could enumerate rows with the anon key that ships in the browser bundle.



Fix was two lines: route the API through the service-role client, and in the migration alter table … enable row level security; with no policies. No policies = anon/authenticated denied entirely; the service role bypasses RLS. The table becomes reachable only through the server route that mediates the code check. Easy to forget, easy to verify — I had the API smoke-tested for bad_code, not_found, and the happy path before trusting it.






Why "unglamourous" is the moat



Three things fall out of picking an unglamorous niche:





  1. The spec is knowable. I'm not guessing what a "better AI assistant" means. Detention pay has rules. You build to them and you're done.


  2. Distribution is built in. The PDF goes where the buyers are (brokers/logistics ops) without me running ads to them.


  3. Nobody's bored-industry-pilling the competition. The incumbents are sleepy paid apps. Friction is the whole opening.



It shipped in about a day as a single file plus one API route and one migration.






The honesty footnote (it's a feature)



When I drafted the launch post I wrote "the only free no-signup web version." Then I checked, found a couple of free web calculators, and cut the claim. If you're going to build in public, the fastest way to torch your credibility is a superlative someone disproves in a reply. "Mostly paid apps or email-gated, so I made a free no-login one that also generates the claim PDF" is true and still sells. Ship the true version of the pitch. Only reason for your email or crypto wallet address is strictly for persistence across browser closes or swapping devices (Other than those two use cases) it is not needed at all.






If you want to poke at it: detention-pay calculator — type 08:00 → 12:30 and watch the gauge.



What's the most unglamourous-but-real niche you've shipped for? I'm collecting them. They very well may be my next tool to hit my page!



www.QuackBuilds.com - Built by @itsevilduck

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I built a detention-pay calculator for truckers in a day — unglamourous niches beat another AI wrapper

Thematisch verwandte Begriffe: built, detentionpay, calculator, truckers · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-94030 | A security vulnerability has been detected in SerenityOS up to 3d83e4509…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick