HNHacker News
TopNewBestAskShowJobs

dfreire

28 karma · joined April 28, 2010

submissionscomments
dfreire··on Should I run plain Docker Compose in production in 2026?
Looks great!
dfreire··on Axios compromised on NPM – Malicious versions drop remote access trojan
Very useful, thanks
dfreire··on Axios compromised on NPM – Malicious versions drop remote access trojan
Absolutely. If you ever did a npm install on a project using one of the affected axios versions, your entire system may be compromised.

> The malicious versions inject a new dependency, plain-crypto-js@4.2.1, which is never imported anywhere in the axios source code. Its sole purpose is to execute a postinstall script that acts as a cross platform remote access trojan (RAT) dropper, targeting macOS, Windows, and Linux. The dropper contacts a live command and control server and delivers platform specific second stage payloads. After execution, the malware deletes itself and replaces its own package.json with a clean version to evade forensic detection.

I strongly recommend you read the entire article.

dfreire··on Nothing: Simply Do Nothing
And… you’re doing something.
dfreire··on How to think in writing
Thank you. This is very different from my own experience and I find it fascinating.

My thoughts are mostly verbal. I do hear an inner voice all the time. I cannot easily catch the moment before words start to form. This excessive wordiness often leads me to a negative experience, it’s relatively easy to fall down on a spiral, worrying to much, going over and over about all the things that can go wrong. I just wish I had the ability to stop. I’m looking into meditation because of this.

dfreire··on How to think in writing
What a great comment.

Can you expand on why do you strive to be non-verbal?

dfreire··on Astro DB
So what's the added value over Turso + Drizzle?
dfreire··on Rook to XSS: How I hacked chess.com with a rookie exploit
I understood it as when it was his turn to play, his piece moved without him moving it
dfreire··on A blog post is a long and complex search query to find people (2022)
I see what you did here :)
dfreire··on Ask HN: Is TypeScript worth it?
I don’t want to sound harsh, but saying Javascript is a simpler version of Java just tells me you have never used Java seriously.

It’s like saying Korean is a simpler version of Spanish.

Yes, Java and Javascript are both programming languages, but they don’t even share the same paradigm.

You might be confusing the motivation that led to the creation of Javascript with the actual implementation.

Having said that, I have used Java professionally for more than 7 years, then I switched to mainly Javascript, and later to Typescript, and I’m never going back. I agree with your overall point.

dfreire··on React Native is not the future
Same
dfreire··on The Full Chess Cheating Report of Hans Neiman
I've not gone through it myself, but believing someone's investigation on Twitter, it does narrow it down to one person.
dfreire··on How to Learn Stuff Quickly
CodeCrafters looks great, I'm looking forward to use it.
dfreire··on You Don’t Need Permission
Wow, is the rest of the book as good as this?
dfreire··on No Cookie for You
You can probably find some at https://github.com/onurakpolat/awesome-analytics
dfreire··on Teddit: a free and open-source Reddit front end focused on privacy
1GB how? I see 112MB in the App Store...
dfreire··on Nano ID: A tiny, secure URL-friendly unique string ID generator for JavaScript
You're absolutely right, and this is huge...
dfreire··on Nano ID: A tiny, secure URL-friendly unique string ID generator for JavaScript
You can also check https://github.com/dylang/shortid
dfreire··on Carlsen–Karjakin World Championship
If anyone was disrespectful in that occasion, it was Magnus. He refused to talk in the flash interview, went immediately to the press conference, and had to wait 90 seconds or so before deciding to leave because Karjakin was still in the flash interview Magnus had refused.
dfreire··on Ask HN: How to decided what to do with life. When you want to do lots?
Don't try to do everything at once.
dfreire··on Ask HN: Freelancer? Seeking freelancer? (March 2015)
SEEKING FREELANCER

I'm looking for programmers interested in working in part time.

If you are interested, please contact me by filling the form at: https://docs.google.com/forms/d/1RPmLS9IqQPrwEGOTLT_AZBGmBij...

Your experience and particular skills will not be decisive (although we will be working with javascript, nodejs and go), there will be a mentoring period and probably a test project before doing any real work, but I do value attention to detail, intelligence, ability to learn, and ability to get things done.

In the beginning, I want to start slowly but steadily, pair programming sessions of about one hour each day, almost every day.

If you want to get ahead of the pack, send me a description of your background, motivation, expectations (financial or other), and samples of your work (links, screenshots, code samples, etc.)

dfreire··on Ask HN: What can you ask freelance programmers to find out how good they are?
A guided tour of a project they did, looking at code samples.
dfreire··on Dart: Web Fragmentation vs. Web Development Fragmentation
Exactly. It is not acceptable to buy into a large Javascript framework, but it is acceptable to buy into a whole different language? I fail to see the validity of this argument...

So what if one needs to use a Javascript library? Does one wait for the community to implement the wrapper around it? Does one implement the wrapper oneself?

Typescript on the other hand, seems to be more in line with the author's purposes, with one additional - and imo crucial - benefit: Javascript is valid Typescript (i.e. no need to change existing code, or wrap around libraries).

dfreire··on Getting Things Done For Hackers
Would you care to elaborate on this a bit? In your example the daily outcome is:

Help people communicate more quickly -> Launch beta of FaceSpace -> Call Jason for programmer recommendations

But the actual outcome (task) for that day would be "Call Jason for programmer recommendations", right? I mean the "Launch beta of FaceSpace" seems more of a long term or strategic goal, and the "Help people communicate more quickly" more of a purpose, or like they say nowadays, a mantra.

So if you repeat this every day, isn't this overwhelming?

And there are a lot of intermediate steps between the "Call Jason" and the "Launch website", so how do you keep track of these?

Finally, how do you see this as a substitute for GTD? (Since GTD is a practical approach to keep track of everyday's bits of todos, that appear from everywhere.)

dfreire··on Kendo UI - a framework for modern HTML UI
... and SmartClient.