Recent submissions

Comment · 6 months ago
Looks great!
Comment · 7 months ago
Very useful, thanks
Comment · 7 months ago
Absolutely. If you ever did a npm install on a project using one of the affected axios versions, your entire system may be compromised.

> The malicious versions inject a new dependency, [email protected], which is never imported anywhere in the axios source code. Its sole purpose is to execute a postinstall script that acts as a cross platform remote access trojan (RAT) dropper, targeting macOS, Windows, and Linux. The dropper contacts a live command and control server and delivers platform specific second stage payloads. After execution, the malware deletes itself and replaces its own package.json with a clean version to evade forensic detection.

I strongly recommend you read the entire article.

Comment · 2 years ago
And… you’re doing something.
Comment · 2 years ago
Thank you. This is very different from my own experience and I find it fascinating.

My thoughts are mostly verbal. I do hear an inner voice all the time. I cannot easily catch the moment before words start to form. This excessive wordiness often leads me to a negative experience, it’s relatively easy to fall down on a spiral, worrying to much, going over and over about all the things that can go wrong. I just wish I had the ability to stop. I’m looking into meditation because of this.

Comment · 2 years ago
What a great comment.

Can you expand on why do you strive to be non-verbal?

Comment · 2 years ago
So what's the added value over Turso + Drizzle?
Comment · 2 years ago
I understood it as when it was his turn to play, his piece moved without him moving it
Comment · 3 years ago
I see what you did here :)
Comment · 3 years ago
I don’t want to sound harsh, but saying Javascript is a simpler version of Java just tells me you have never used Java seriously.

It’s like saying Korean is a simpler version of Spanish.

Yes, Java and Javascript are both programming languages, but they don’t even share the same paradigm.

You might be confusing the motivation that led to the creation of Javascript with the actual implementation.

Having said that, I have used Java professionally for more than 7 years, then I switched to mainly Javascript, and later to Typescript, and I’m never going back. I agree with your overall point.

Comment · 3 years ago
Same
Comment · 4 years ago
I've not gone through it myself, but believing someone's investigation on Twitter, it does narrow it down to one person.
Comment · 5 years ago
CodeCrafters looks great, I'm looking forward to use it.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton