Hacker News Reader

Mentioned this 5h ago, but this post definitely fleshes out more details.

https://news.ycombinator.com/item?id=50351061

altbdooron I Am the Reason OpenAI Is Killing Unlimited Chats

> But if you get a Claude subscription, don't you have to use Claude Code?

Seems like the doors are (slightly?) open right now. OpenCode just announced that users can use their Claude subscription:

- https://x.com/opencode/status/2116198602523513081

- https://github.com/anomalyco/opencode/pull/58782#issuecommen...

altbdooron Backdoors in official Claude Code extensions

1. If only Cursor Marketplace version was compromised, how was it published in the first place?

2. If the Cursor Marketplace version was released from an "official Anthropic" account, whose to say OpenVSX and/or VSCode versions are not compromised?

The affected versions have been pulled down, so no one really knows. The way I see it, only Cursor has admitted to have been compromised.

altbdooron Backdoors in official Claude Code extensions

Cursor has released a security notice:

https://cursor.com/blog/claude-code-extension-security-notic...

altbdooron eMudhra to Exit Global SSL/TLS Certificate Business

https://news.ycombinator.com/item?id=50194909

altbdooron eMudhra to exit global SSL/TLS certificate business

There's a formal press release in here:

https://emudhra.com/en/press-release/emudhra-to-exit-global-...

altbdooron Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

> I take care of commits, push/pull, building wheels, and publishing wheels myself.

I too was surprised when I see my colleagues telling me that these actions are "not maximizing your efficiency".

They'd rather hand all controls to the LLM, and then be surprised when shit hits the fan.

altbdooron Git 3.0's upcoming SHA-256 default will be a costly mistake

I personally would have preferred if there is a proper disclaimer that the screenshot is an approximation of how the UI would be. Or alternatively, use a more distinct art style of conveying the UI (e.g. comical/sketch lines or whatnot).

Right now its only a vague statement of "will need to look something like this", which does not imply on the originality of the image. I myself am misled that the screenshot is a legit UI.

altbdooron Show HN: Neobrutalism.dev – Just added Base UI support and added new color theme

Haven't use it myself, but I've bookmarked https://basecoatui.com/ to try in future.

altbdooron Ask HN: Who is using MCP in production?

Jira/Atlassian APIs are so convoluted anyways, I'd rather use the MCP

altbdooron Some more things about Django I've been enjoying

Good ole Django. Worked with a number of frameworks (tm), but nothing really quite scratches my itch like Django does. I still find the ORM and database migration system unmatched.

altbdooron Cloudflare Drop

They had a short blog post about this:

https://developers.cloudflare.com/changelog/post/2026-07-08-...

altbdooron Meta’s chaotic AI strategy

https://archive.is/NndS8

altbdooron Does anybody like React?

Just found the link to the project: https://github.com/WorldMaker/butterfloat

That's neat, will give it a spin in the future.

altbdooron Does anybody like React?

Interesting to know. Personally I've also been trying out other library/frameworks, like Vue, AlpineJS, or just plain server side rendering.

I have heard a little about ClojureScript here and there. Will take a look at it when I am free!

altbdooron Does anybody like React?

I know there will probably be some complications here and there, but this could be done with Web Components too, right?

altbdooron Does anybody like React?

I read one post before that really resonates with me, couldn't recall from where though:

    You love JSX, you don't love React

Many of the jobs in my location requires React though, so I have to tolerate it somehow.

altbdooron Tell HN: VS Code v1.117.0 automatically adds GitHub Copilot as your co author

Friendly reminder that all (I sure hope it does all...) the Copilot kerfuffle can be disabled in `chat.disableAIFeatures` flag in the settings.

altbdooron Show HN: Tired of logic in useEffect, I built a class-based React state manager

Working with multiple teams in a large project, hooks can be a nightmare to maintain.

I see 7x layers deep of hooks, with no test cases to support them. Some of the side effects are not properly tested, and mocks that abstract away the whole implementation means the test case only works for certain scenarios.

FWIW this scenario might be an outlier in large projects, considering how some developers prefer to "just wrap the hook in another hook, and not worry about its internals".

altbdooron Appsflyer SDK Hijacked

Their status page communicates whats going on

https://status.appsflyer.com/

altbdooron I need AI that scans every PR and issue and de-dupes

And then start writing "hit pieces" to all the bot PR authors? /s

altbdooron Jeffgeerling.com has been migrated to Hugo

In retrospect, Jekyll has been relatively stable recently. The last stable release was in January 2025, v4.4.1[1].

I've been using 4.3 to 4.4 without much issues, granted the sites I generate are simple.

[1]: https://jekyllrb.com/news/

altbdooron If you care about security you might want to move the iPhone Camera app

> I think it's sending my message to the server continuously

It is, at least I see it for the first message when starting a new chat. If you open the network tools and type, you can see the text being sent to the servers on every character.

Source, from spending too much time analysing the network calls in ChatGPT to keep using mini models in a free account.

altbdooron Getting a Gemini API key is an exercise in frustration

To Logan's credit though, his team made and drove a lot of good improvements in AI studio and Gemini in general since the early days.

I feel his team is really hitting a wall now in terms of improvements, because it involves Google teams/products outside of their control, or require deep collaboration.

altbdooron RCE Vulnerability in React and Next.js

It was one hell of a ride, but I would say the Angular team did one hell of a job too, supporting the glue code until v18 (not sure if the latest version still does).

Having both old and new Angular running in one project is super weird, but everything worked out in the end.

altbdooron AWS multiple services outage in us-east-1

Had a meeting where developers were discussing the infrastructure for an application. A crucial part of the whole flow was completely dependant on an AWS service. I asked if it was a single point of failure. The whole room laughed, I rest my case.

altbdooron Being blocked from contributing to lodash

I guess it also didn't help that these kind of PRs are most commonly generated with AI.

altbdooron AI was supposed to help juniors shine. Why does it mostly make seniors stronger?

Same thoughts. Company is currently migrating from tech A to tech B, and while AI gets us 70-80% of the way, due to the riskier nature of the business, we now spend way more time reviewing the code.

altbdooron Kruci: Post-mortem of a UI library

Very interesting thought process, with lots of nitty gritty details. I recently had some idea around a repetitive process at work, and decided to try it in TUI. Oh what a ride it was!

Even armed with a library like charms or bubbletea in Golang, sometimes its just amazing how all the internals "clicked" together, to render layouts and widgets.

altbdooron Sometimes Software Is Done, or Why Hugo Why (2024)

I started with Jekyll, and tried out Hugo since there was all the hype.

I didn't had the same issues as OP, but Hugo docs are so confusing that I just gave up and switched back. Jekyll works OK for my simple needs, and still does.

For those interested, there was also a partial-Jekyll-Golang-port, https://github.com/osteele/gojekyll