DEV Community: vyixor

Two weeks of trying to teach Google my site isn't a movie streaming platform

vyixor — Tue, 06 Oct 2026 13:53:09 +0000

The domain is soroflix.xyz.

I bought it about six months ago for a movie rating side project. Something like a personal TMDB with watch links and ratings. Built a bit of it, lost interest, moved on.

Then I started working on something completely different. A set of browser based file tools. PDF editor, EXIF remover, image editor, that kind of thing. Everything runs locally in the browser, nothing gets uploaded. When the tools were ready to ship, the movie idea was dead. So I renamed the project SORO File Tools and pointed it at the domain I already owned.

Which is how I ended up with a file tools site on a domain called soroflix.

Three weeks after launch, I opened Search Console for the first time. Around 22 impressions, 4 clicks. Fine for a brand new site. Then I looked at the Queries tab.

One query. "soro films."

Every impression. Every country. Every day. People searching for movie streaming, landing on a page about stripping GPS coordinates from photographs.

Google read "flix" and stopped there.

What I did about it
I spent the next two weeks trying to override the domain signal with content signals. Here is the actual list, in the order I tried things.

Rewrote every title
Before:

<title>SORO — Free file tools that never see your files</title>

After:

<title>SORO File Tools — Free browser-based PDF, image, text utilities</title>

The hypothesis was simple. Google builds an entity from repeated mentions of a name across pages. If every title says the same two word brand, the classifier has more material to work with. Ten pages, ten titles, all leading with the exact string.

Rewrote every meta description to include the full brand
Before:

<meta name="description" content="EXIF remover, PDF editor, image editor...">

After:

<meta name="description" content="SORO File Tools is a free suite of ten browser-based utilities...">

Same idea. Every meta description now contains the exact phrase. Combined with the titles, that is 20 mentions of the full brand name across the site before Google even parses the body content.

Changed the nav and footer logos
Every page used to say:

<a href="/" class="nav-logo">SORO</a>

Now it says:

<a href="/" class="nav-logo">SORO File Tools</a>

That sounds cosmetic. It is not. The nav logo appears on every single page, in the same position, at the top of the DOM. It is the single most repeated string on the entire site. Making it say the full brand name means every page reinforces the same entity ten times per page load.

Added alternateName to the WebSite schema
The original schema was minimal:

{
  "@context": "https://schema.org",
  "@type": "WebSite",
  "name": "SORO",
  "url": "https://soroflix.xyz"
}

Rewritten to include every variant:

{
  "@context": "https://schema.org",
  "@type": "WebSite",
  "name": "SORO File Tools",
  "alternateName": ["SORO", "Soroflix", "SORO File Utilities", "SORO Tools"],
  "url": "https://soroflix.xyz/",
  "publisher": {
    "@type": "Organization",
    "name": "SORO File Tools",
    "url": "https://soroflix.xyz/"
  }
}

The alternateName array tells Google that all four names point to the same entity. This is the piece I am most confident in, because it directly addresses the classifier problem. Google's entity model already knows what Soroflix is. The alternateName block is how you tell it what Soroflix actually means.

Added an ItemList schema to the homepage
This one is direct. It tells Google exactly what the site contains:

{
  "@context": "https://schema.org",
  "@type": "ItemList",
  "name": "SORO File Tools Catalog",
  "numberOfItems": 10,
  "itemListElement": [
    { "@type": "ListItem", "position": 1, "name": "EXIF Remover", "url": "..." },
    { "@type": "ListItem", "position": 2, "name": "EXIF Viewer", "url": "..." },
    // ... 8 more
  ]
}

Each tool gets its own ListItem with a name and a URL. Google can now read the site as "a catalog of file utilities" from the schema alone, without needing to parse the HTML.

Added isPartOf to every tool page schema
Each tool already had a WebApplication schema. I added a back reference:

{
  "@type": "WebApplication",
  "name": "PDF Editor",
  "url": "https://soroflix.xyz/pdf-editor/",
  "isPartOf": {
    "@type": "WebSite",
    "name": "SORO File Tools",
    "url": "https://soroflix.xyz/"
  },
  "publisher": {
    "@type": "Organization",
    "name": "SORO File Tools",
    "url": "https://soroflix.xyz/"
  }
}

Now every tool page explicitly tells Google "I am part of SORO File Tools." Ten pages, ten back references. That is a lot of signal all pointing at the same parent entity.

Added a definition paragraph to the homepage
The single most direct thing on the site:

<p>
  SORO File Tools is a free collection of browser-based utilities 
  for PDFs, images, text files, and links. Every tool runs locally 
  on your device with no uploads and no accounts.
</p>

Plain text, right under the hero. Not hidden, not in the footer. Google reads page content, and this is the sentence that tells it, in human language, what the site is.

What actually happened
Two weeks later, Search Console still shows "soro films" as the only query.

Impressions have ticked up slightly. Around 40 now. Still zero organic clicks from outside Benin, where I live and where my friends are. The title changes have not shown up in the SERP yet either, which the Search Console documentation says can take one to three weeks for a fresh crawl.

Some things are moving. Ranked number two for "soro" on SaaSHub. AlternativeTo approved the listing. A few Dev.to posts are pulling visitors. But Google, which is the one that matters, has not updated its classification.

The honest answer is I do not know if this is going to work. The theory is sound. The execution is thorough. But Google's entity model is a black box and I have no way to know if I am on a two week timeline or a six month one.

What I learned about the entity model
A few things worth knowing if you ever end up in this situation.

Domain names carry more weight than I expected. The classifier runs before the content parser. If the domain has a strong enough prior, the content never gets a chance to override it in the initial pass.

Schema is a signal, not a command. Adding alternateName does not force Google to update its entity model. It gives Google more material to work with the next time it re-evaluates the entity, which happens on Google's schedule, not yours.

Every repeated string helps. Title, meta description, nav logo, footer, schema name fields, body copy. The classifier is looking for a consistent pattern. The more places the same phrase appears, the stronger the signal.

You can't test this locally. Unlike most web development, there is no way to see what Google sees. You submit, you wait, you check. Each cycle is days or weeks. It is the slowest feedback loop I have ever worked in.

The thing that is still broken
The sitemap has never been successfully fetched by Google. sitemap.xml returns a 200 in the browser, renders as valid XML, passes every validator I have tried. Search Console says "could not fetch" every single time.

It is hosted on Cloudflare Pages. I have tried removing it and resubmitting. I have tried submitting the full URL instead of the path. I have checked the content-type header, which is correct. I have disabled Bot Fight Mode in Cloudflare, which was the most common fix suggested.

Still could not fetch. If anyone has dealt with this specific problem on Cloudflare Pages, I would genuinely like to know what fixed it.

The open question
Has anyone else tried to fix a Google entity misclassification where the domain name was the primary signal. How long did it take for the entity to update. Did it stick, or did the classifier drift back to the domain signal after a while.

I am not looking for "buy a new domain." I know. I own this one and I want to make it work.

I am looking for the person who has actually walked through this and can tell me what the timeline looks like. Or the person who tried and failed, so I know when to give up and start over.

PDF is a terrible file format and every alternative is worse

vyixor — Thu, 01 Oct 2026 15:05:54 +0000

I've spent the last two months building a PDF editor that runs in the browser. Merge, split, rotate, sign, watermark, add text. The kind of thing people do every day without thinking about what's underneath.

Six weeks in, I understood something about PDFs that I wish I'd known before I started. The format isn't a document format. It's a page description format. And the difference matters for everything you try to do with it.

What a PDF actually is
A PDF isn't a document with paragraphs and headings and a reading order. It's a list of instructions for a printer.

When you open a PDF, what you're looking at is a set of drawing commands. "Move to this X, Y coordinate. Set the font to Helvetica. Draw the glyph at index 47. Advance 12 units. Draw the glyph at index 82." It's a script. The file tells a rendering engine how to paint pixels on a page, in the order they should be painted, at exact coordinates.

That's it. Everything else we think a document has, we're inferring.

There is no concept of a paragraph in a PDF. There is no concept of a sentence, a word, a heading, a line break, or a link between text and what it represents. Text isn't stored as text in the traditional sense. It's stored as positioned glyphs with a font reference. If you wanted to extract the sentence "hello world" from a PDF, you don't read it from a string. You find every glyph, get its position, sort by position, group by proximity, and hope the author didn't do anything weird with kerning or line spacing.

This is why PDF text extraction is so unreliable. This is why copying from a PDF sometimes gives you letters in the wrong order. This is why two-column layouts break every parser. The information is technically there, but not in the form you want.

The heritage problem
PDF comes from PostScript, which comes from the 1980s, which comes from a world where the goal was to describe how a printer should physically lay ink on paper. The whole format is built around that purpose. Long before "documents" and "content" and "accessibility" were things anyone cared about.

PostScript was designed in 1982 at Adobe, mostly to solve one problem: how do you tell a printer to render a page precisely, with the same output every time, regardless of the hardware? The answer was a stack-based programming language that draws things. PDF is that language, plus a container format and some compression.

Every quirk in PDF comes from this inheritance. Text isn't text, it's glyph positioning. Fonts aren't references, they're embedded subsets. Images aren't images, they're streams of pixels with specific encoding. Layout isn't layout, it's coordinates.

And here's the thing. It works. It works incredibly well. Twenty-five years later, PDF is the only format that reliably renders the same on every device, every printer, every screen. That's exactly what it was built for, and it still does that job better than anything else.

What this means when you try to edit
You cannot "edit" a PDF in any real sense. What you can do is draw new things on top of the existing drawing instructions.

When a tool says it can edit the text in a PDF, it's lying in a specific way. It's locating the glyphs of the text you want to change, removing those glyphs from the instruction list, and drawing new glyphs in the same coordinates. The result looks correct. The underlying file has no idea what happened. If someone opens it in a different renderer with different font handling, the new text may sit slightly off from where the old text was.

For anything else in the file, it's the same story. Move an image and you're really copying the image's drawing command to a new position. Delete a page and you're removing that page's instructions from the tree. Rotate a page and you're changing the viewport orientation.

There is no semantic model. There is no "this is a heading" or "this is a signature block." Everything is coordinates. Every edit is a manipulation of the instruction stream.

Once you understand this, three things become obvious:

Text reflow is impossible. When you delete text from a Word document, the rest of the paragraph moves to fill the gap. When you delete text from a PDF, you create a hole. The other text doesn't know it exists. It sits at its coordinates, exactly where it was drawn.

Editing breaks layout in subtle ways. Change a font size and the text may overlap what's next to it. The PDF doesn't know to reposition anything. It just draws what you told it to draw.

Text search is a heuristic. When you search a PDF, the renderer is guessing where words start and end based on proximity and spacing. It's right most of the time. When it's wrong, you get the mess we've all seen.

The alternatives
Here's where it gets frustrating. Every alternative to PDF has a fatal flaw that's worse than PDF's flaws.

DOCX. The obvious one. Real document structure, real text, real editability. But: proprietary format owned by Microsoft, changes behavior between Word versions, renders differently in LibreOffice, and requires a specific application to open. People send PDFs because PDFs look the same everywhere. DOCX files look slightly different on every machine.

ODT. The open-source answer. Same structural benefits, same open standard problem: it's a standard that almost nobody uses outside of LibreOffice. Compatibility with Word is imperfect. Nobody wants to receive a .odt file.

HTML. Can carry real structure, real text, real semantics. But: it doesn't print correctly, it doesn't paginate, it renders differently in every browser, and you can't email someone an HTML file and expect them to open it as a document. HTML is a delivery mechanism, not a document format.

PostScript. The ancestor of PDF. Same underlying model, worse container format, more verbose, less common. Strictly worse than PDF for everything.

Markdown and LaTeX. Both produce documents from structured source. Markdown is too limited for anything with real layout. LaTeX is powerful but the barrier to entry is enormous and the output is still PDF at the end.

Plain text. No layout, no fonts, no images. Perfect for programs, useless for contracts.

Every single one of these fails at the specific thing PDF succeeds at: rendering identically everywhere. That's the whole reason PDF won in the first place.

Why PDF won anyway
Because the actual problem people needed solved wasn't editability. It was "I need this document to look the same on your screen as it does on mine, and if you print it, it should print the same way."

Contracts, invoices, tickets, tax forms, boarding passes, university transcripts, medical records. None of these need to be editable by the recipient. They need to be final. They need to render correctly on any device, print identically on any printer, and preserve their visual appearance for years.

PDF does that. It does it better than any other format that has ever existed. That's why every alternative fails. They all solve a different problem and hope you didn't notice.

The tradeoff is that a PDF isn't really a document. It's a picture of a document, with some text embedded in the pixels for accessibility. When you accept that, everything else makes sense.

What I do about it
I built the PDF editor to work with the format instead of against it. The tools do things PDFs are good at:

Merge (combine instruction streams)
Split (divide instruction streams)
Rotate (change viewport)
Reorder (rearrange page tree)
Delete pages (remove from tree)
Compress (recompress object streams)
Watermark (draw over the existing content)
Sign (draw an image at specified coordinates)
Add text (draw new text at specified coordinates)

None of these are "editing the document." They're all operating on the file as what it actually is: a container of instructions.

That's the honest version of what a PDF editor does. It doesn't edit the document because there is no document. It edits the instruction stream. The result looks correct because the instructions produce the right output. But if you look under the hood, it's just drawings on top of drawings.

The open question
Is there a format that could replace PDF if someone actually tried?

Something with the universality of PDF plus real document structure. Fixed layout for print, live text for editing, standard fonts, deterministic rendering.

I don't think it exists. Every attempt I've seen either sacrifices the deterministic rendering for editability (Word) or sacrifices editability for deterministic rendering (PDF). Nobody's built the one that does both, and I'm not sure anyone can.

But I'd like to be wrong. If you've seen a format that threads the needle, tell me what it is.

check out my pdf editor here. [SORO pdf editor]

the senior developer who can't get hired

vyixor — Thu, 01 Oct 2026 12:13:24 +0000

I had lunch with a friend last week who has been writing software professionally for eleven years. Staff-level at his last two companies. Has shipped systems that handle millions of requests a day. Can read an unfamiliar codebase and know where the bodies are buried within an afternoon.

He's been out of work for five months.

Not because he got laid off in a mass event. He wasn't. His company didn't do anything dramatic. He left on his own, in March, thinking he'd take six weeks off and then pick something up. He's had four onsites. All rejected.

I asked him what happened in the interviews. He said the same thing each time in different words: the conversations didn't go where he expected them to.

He's spent years learning how to explain complex systems. How to reason about tradeoffs. How to look at a piece of infrastructure and say "this will fall over in six months when traffic triples, here's why, here's what to change." That used to be the whole interview. You'd get asked to design something, you'd talk through the options, you'd land somewhere reasonable, done.

Now the first round is a screen with an AI copilot enabled. The question is some variation of "build this feature." The candidate who finishes fastest wins. The candidate who uses the tool fluently wins. My friend, who spent a decade earning the right to write code slowly and carefully, was slower than a mid-level developer who'd never worked on anything serious but knew every keyboard shortcut in Cursor.

He said it plainly: I've been doing this for eleven years and I couldn't keep up.

I've been thinking about that sentence all week.

What actually changed
The easy answer is that AI tools got good. Everyone knows that. The harder question is which skills got devalued, specifically, because that's what nobody wants to say out loud.

Ten years ago the value of a senior developer was concentrated in three things:

Deep debugging. The ability to look at a production incident and reason from symptoms to cause without needing to read code. This is a skill that takes years to build and it's the reason companies pay seniors a premium.

Systems thinking. The ability to look at a product and know how it should be structured, where the boundaries should be, which decisions are reversible and which are one-way doors. This is the thing that separates someone who can build a feature from someone who can build a product.

Pattern recall. Knowing the language, the framework, the libraries, the idioms. Being able to write a Redux reducer from memory, knowing the correct way to structure a reducer or a saga. The long tail of syntax and convention you accumulate.

The first two skills are still valuable. Deep debugging and systems thinking are genuinely better when a person has been through ten years of production incidents. AI doesn't replace the judgment that comes from having been on call for a payment system at 3am.

The third one is gone.

Not gone gone. But heavily devalued. Pattern recall was never the interesting part of being a senior, but it was the part that made you fast, and speed is what the current market rewards. A junior with good AI tooling can now scaffold a feature in the time a senior used to spend opening files. The senior still understands the feature better. But the feature exists in both timelines, and the one that exists faster is the one that gets shipped.

Why this is uncomfortable to talk about
Because the older developers don't want to admit that a skill they spent a decade on is now worth less than it was. And because everyone who points this out gets accused of being doom-merchant. And because the people doing the hiring have convinced themselves that "using AI well" is a skill, and it is, but it's a different skill than the one they used to hire for.

There's a version of this where the whole thing is fine. The senior adapts, learns the new tools, and leverages their judgment to get twice the output of a junior. That's the version everyone tells in public. And for a lot of seniors, that's what's happening.

But there's another version where the senior gets caught in a trap. Too senior to take a junior role. Too slow to compete for the senior role. Too expensive to justify against two mid-level developers using AI. That version exists too and nobody talks about it.

I've heard from three people in the last month who are in some version of that trap. All of them are between eight and fifteen years into their careers. None of them are bad developers. All of them are having a harder time getting hired than they expected to.

What the market actually wants now
I've been trying to figure this out honestly and I don't have a clean answer. But here's what I've observed.

Companies are hiring for three things right now, in this order:

Speed to ship. Someone who can take a feature description and turn it into working code. Fast. The fewer meetings, the better. The AI-assisted developer who finishes the ticket in an afternoon is worth more to the business than the careful senior who finishes it in three days and does it more correctly.

Breadth. A developer who can move across the stack because the AI can help them in whatever language they're working in that day. Language expertise is less important than the ability to pick up a new one in an afternoon with Claude as a co-pilot.

Judgment. Knowing what to build and what not to build. This is still the senior's edge, but it's the last thing interviewed for. Nobody asks the "should we build this at all" question until you're four rounds deep, and by then you've already been filtered out for not finishing the coding screen fast enough.

The order matters.
Speed first, breadth second, judgment third. It used to be the opposite. The senior developer's edge was in the third category, and everything about their career was optimized to prove it.

The honest part
Some of this is adaptation anxiety and some of it is real. Let me try to separate them.

Adaptation anxiety: The market is going through a shift and the people most affected by it are the ones who built their careers around the old shape of the work. Every generation goes through this. Cobol programmers went through it. Front-end developers went through it when jQuery died. This is what it feels like from inside a transition, and it's uncomfortable but it isn't new.

Real: The specific thing that made a mid-career developer valuable in the past. deep framework knowledge, pattern recall, the ability to write fluent code in your head is genuinely worth less today than it was two years ago. Not worthless. Worth less. And the loss of value is permanent, not cyclical. This isn't a bad market that will recover. This is the market finding a new equilibrium.

Both of those things are true and I think we need to hold both.

The thing I don't want to say
The developers who are struggling the most right now are the ones who've been coding the longest without needing to adapt. Not because they were lazy. Because they didn't have to. The market rewarded them for what they already knew, for ten or fifteen years, and now it doesn't reward the same thing anymore.

I know how that sounds. I know it reads as "the seniors were coasting." That's not what I mean. Deep expertise in a specific stack is a real thing, and it took years to build, and the fact that the market doesn't value it as much today doesn't mean it was wasted. It means the market changed.

The senior developer's job right now is the same as everyone else's: figure out what's still valuable and lean into it. Systems thinking, judgment, the ability to look at a design and know whether it's going to work. Those things haven't lost value. They might have actually gained value, in a world where anyone can produce code and few people can tell which code is worth keeping.

But the interview doesn't test for any of that yet. That's the trap. The skills that matter most are the last ones the interview process asks about.

What I'd want to ask
If you're a senior developer who's recently been through a hiring process, what was the actual gap? Was it that the interview tested the wrong things, or was it that you didn't have the new skills the interview was testing for?

even legit coders are being forced to vibe code

vyixor — Tue, 29 Sep 2026 10:07:05 +0000

Something shifted in the last year and I don't think we've named it properly yet.

I know a lot of developers. Not Twitter developers, real ones. People who've been writing code for a decade, who read source code for fun, who can debug a memory leak by staring at a heap dump. Serious people.

Eighteen months ago they laughed at Copilot. Twelve months ago they tolerated it. Six months ago they started using it quietly. Today some of them are shipping features they don't fully understand, generated by tools they don't fully trust, into codebases they're responsible for, because if they don't, the person next to them will.

Nobody says this out loud. Not in standups, not in performance reviews. But it's happening.

The pressure isn't coming from managers saying "use AI or else." It's subtler. It's the junior who joined six months ago shipping features at a rate that doesn't make sense. It's the team down the hall that went from four engineers to three and is somehow shipping faster. It's the recruiter who asks in the screening call whether you're "comfortable with modern AI tooling" and everyone knows what that means.

The market decided something before any of us had time to have an opinion about it.

Here's the honest part. I've been writing code for years. I trust my instincts. I can read a stack trace and know what's wrong before I open the file. That's a skill that took a long time to build and I'm proud of it.

And yet. In the last six months there have been moments where I opened Cursor, described what I wanted, and got a working implementation before I would've finished typing the first function signature by hand.

Not always. Not for anything subtle. But for the boring 70 percent of code that is CRUD and glue and boilerplate and wiring, yes. Every time.

So I use it. I use it reluctantly, and I use it while feeling like I'm cheating at something that used to be a fair game, and I use it while knowing that the thing it's good at is exactly the thing that pays my bills.

The phrase "vibe coding" bothered me when I first heard it. It sounds unserious. It sounds like somebody describing playing with a toy. Then I watched a friend of mine, a senior engineer at a large company, describe a feature to Claude, paste the result into his editor, tweak two lines, and commit. He didn't read most of it. He didn't need to. It worked.

He's not a bad developer. He's a very good one. He just figured out that reading every line of generated code is the same as reading every line of a library you installed. Nobody does that. You trust it or you don't.

The line I keep hearing, and I've started repeating, is: AI won't take your job. Someone who uses AI better will.

I resisted that line for a while. It felt like cope. It felt like something middle managers say to make the transition sound less brutal than it is. But I've started believing it because I've watched the mechanics play out.

The developers who are thriving right now aren't the ones who are best at writing code. They're the ones who are best at deciding what code should exist, describing it clearly, and then evaluating whether the result is correct. That's a different skill set. It's not lesser. It's just different from the one the industry spent twenty years rewarding.

The people getting squeezed are the ones who were paid for typing speed and pattern recall. The ones who could write a Redux reducer from memory or scaffold a React component in their sleep. That knowledge is worth less today than it was eighteen months ago. Not worthless. Less.

The people doing well are the ones who were already thinking in systems, who care about architecture more than syntax, who can look at a spec and know whether it's going to work before anyone writes a line. Those people are faster now. Much faster. They're not writing code they don't understand. They're just not writing the boring parts.

I don't have a clean conclusion here. I don't think there is one.

The uncomfortable truth is that the tool is real, the productivity gain is real, and the disruption is real. Anyone who tells you to just ignore it and keep coding by hand is giving you bad advice, and anyone who tells you to trust the output blindly is giving you worse advice.

The middle path is harder than either. Use the tools, but don't stop understanding the code. Ship faster, but don't ship what you can't debug. Be willing to be the person who reads the generated diff line by line and rejects it, and also be willing to be the person who accepts it when it's genuinely fine.

That's a narrow window to work in and I don't know anyone who's gotten the balance perfect yet.

What I do know is that every developer I respect has quietly moved to the middle of that window in the last six months, regardless of what they post publicly.

I'd like to hear from people who are resisting. What's the argument that keeps you writing everything by hand? Is it principle, is it craft, is it distrust, or is it just that the current tools aren't good enough for what you build?

I'm genuinely curious. Every answer I've gotten so far has been more interesting than the takes I see on Twitter.

I stripped metadata from AI images to see if YouTube would still flag them

vyixor — Mon, 28 Sep 2026 11:01:30 +0000

I've been curious about this for a while. Every AI image generator I've tried writes metadata into the output files. Sometimes a full C2PA manifest, sometimes just a "made with X" tag, sometimes a pixel-level watermark buried in the image. The point is that platforms know what they're looking at.

YouTube started relying on this in a serious way this year. If a video or thumbnail has AI metadata attached, YouTube shows a disclosure under it. That's fine for people who want to be transparent. But the way YouTube determines whether content is AI is largely by reading the metadata on the file.

So I ran a test. I generated a batch of images with a common AI tool, ran them through SORO's EXIF remover (a tool I built for a completely different reason), and uploaded the cleaned files to a few platforms to see what happened.

Round one

The flags never appeared. Files with empty EXIF were treated as normal uploads. YouTube, X, and Instagram all missed them. The metadata was the only signal being used, and without it, the systems had nothing to work with.

That held for about six weeks.

Round two

Then things shifted. Same batch of files, same cleaning process, but now they were getting flagged again. Not every time, but often enough that it was obvious something had changed. The platforms had added a second layer that doesn't rely on metadata.

That second layer does something else entirely. It looks at the image itself:

Frequency domain analysis. AI-generated images have statistical quirks in high-frequency detail that natural photos don't have.

Pixel watermarks. Some generators embed invisible marks that survive re-encoding.

Heuristic detection. Compression artifacts, sharpness patterns, the way the model handles faces and text.

None of these are perfect. All of them have false positive rates. But they exist, and they're getting better fast.

The interesting part

Metadata being strippable isn't news. Anyone who works with image files knows it. What's interesting is what this reveals about how these detection systems are built.

Metadata is a soft signal. It's easy to remove, easy to forge, easy to lose by re-saving a file. Any detection that depends on it is one canvas re-encode away from being useless. The C2PA spec, which is the standard everyone is adopting right now, acknowledges this openly. Metadata can be removed, and once it is, the provenance is gone.

The platforms know. Which is why they're shifting to image-based detection. Which is creating its own problems.

Here's the tension nobody wants to name. The same tool that removes metadata for privacy also removes metadata for detection. There's no version of this where those two use cases can be separated.

I strip metadata from photos I post. Not to hide anything. My phone writes GPS coordinates into every image I take, and I'd rather not publish where I live. That's a normal privacy practice. Every security guide says to do it.

But when I strip metadata from an AI image, it defeats the detection too. Same tool, same action, opposite intent. Both uses are legitimate. Both uses are covered by the same button.

Which brings me to the actual point

AI content isn't inherently harmful. I keep seeing that framing pushed and it's wrong. An AI-generated illustration for a personal project, a language model draft of a contract clause, a synthetic voiceover for a video essay. None of these things are bad. Some of them are genuinely useful and would take a human days to produce.

The problem is volume. The internet is drowning. Reddit is a quarter AI slop, YouTube is worse in some categories, Google results are getting harder to read every month. The issue isn't that AI exists. It's that there's no cheap way to tell the good from the noise.

Detection systems are trying to solve that. But they're solving it with a signal that's easy to remove and easy to defeat, and the same tools people use to protect their privacy are the same tools that defeat it. Which means the problem isn't technical. It's structural, and it's not going away.

I don't have a solution. I have a test, a set of results, and a bunch of thoughts that don't fit anywhere else. If you're building in this space, I'd like to hear what you're seeing, especially if you have real numbers on detection accuracy.

I built a PDF editor that can't see your files

vyixor — Fri, 25 Sep 2026 15:08:00 +0000

For the last two months I've been building a set of file tools that run entirely in the browser. The PDF editor is the one I use most, so that's what this post is about.

The problem ->

Every online PDF tool I tried did the same thing. You upload the file, they process it on a server, they send it back. Smallpdf, iLovePDF, Adobe's free tools, all of them. That's fine for a random utility bill, but it's a problem when the PDF is a contract, a medical form, or anything with personal info on it.

The other option is a desktop app. LibreOffice Draw works, but it's heavy, and it doesn't handle signing well. So I had this gap where nothing fit: something light, browser-based, that didn't require handing my documents to a stranger.

What I did about it

I built the tool so it can't upload your files. Not "we promise not to" but "the architecture doesn't allow it."

It's a static HTML page. There's no backend, no API, no database. The whole thing is JavaScript running in your browser tab. When you drop a PDF in, the File API reads it into memory, and pdf-lib processes it right there. When you download the result, your browser writes the file back out. At no point does anything leave your machine.

You can verify this. Open DevTools, go to the Network tab, and use any tool. Zero outbound requests related to your file.

What the editor actually does

The main operations people seem to want:

Merge multiple PDFs into one

Split by range, or every N pages, or extract individual pages

Rotate pages (the amount of sideways scans in the world is staggering)

Reorder pages by dragging thumbnails

Delete pages

Compress with three quality levels

Add a text watermark, rotated and semi-transparent

Draw a signature with a pen pad, then place and resize it on the page

Add text anywhere on a page, move it around until it sits right

The reader mode was the part I spent the most time on. You open a page, click to place an element, then drag it, resize it with handles, rotate it, delete it, undo and redo. It behaves like a lightweight editor rather than a form filler, which is what most free tools feel like.

The stack, briefly

Plain HTML, CSS, and JavaScript. No framework, no bundler, no build step.

pdf-lib for PDF manipulation

pdf.js for rendering page thumbnails and the reader view

Canvas API for the signature pad

Cloudflare Pages for hosting. It's a static site so there's nothing to scale.

The whole thing is around 2,500 lines of JavaScript in the PDF editor alone, most of which is the overlay element system for the reader. The rest of the site is a handful of smaller tools that share the same pattern.

What I learned along the way

The hardest part wasn't the PDF manipulation. It was the browser quirks. Mobile touch handling for drag and resize on elements that live on top of a canvas. Text input focus on iOS. Making sure that opening DevTools didn't break drag interactions. The libraries handle the file format stuff well; the interaction layer is where you spend all your time.

The honest limitations

It won't open password-protected PDFs. If you know the password, you have to decrypt it elsewhere first.

It can't OCR scanned pages. That would need Tesseract.js, which is a much bigger dependency and slower to load.

It can't edit the existing text in a PDF. PDFs aren't structured documents, they're a series of drawing instructions. Inserting new text is easy, changing existing text is a research project.

It's also browser-memory-bound. On a phone with 4GB of RAM, a 200 MB PDF is going to struggle. On desktop it handles everything I've thrown at it.

Why I'm posting this

Partly to show the approach, since "just do it in the browser" solves a category of problems that don't need a server at all. Partly because I want to know what other people are doing for the same task. LibreOffice Draw, PDFgear, and some browser extensions all handle parts of this, and I'd like to know what I'm missing.

The full editor is at soroflix.xyz/pdf-editor/ if you want to try it. No account, no signup, no limits. It's free.

Happy to answer questions about the implementation, the libraries, or why the overlay system was the hardest part.