HNHacker News
TopNewBestAskShowJobs

garbagepatch

117 karma · joined December 25, 2023

submissionscomments
garbagepatch··on Upcoming critical PHP security release (CVE-2026-109618 / -109619)
Writers/editors really, really like Wordpress for some reason, which is like 40% of the Internet, add to that all the other Php stuff. At $DAY_JOB we have a Wordpress instance behind our VPN and use the json API to send the articles to a front-end server written in something else. Forces us to duplicate some of the front-end plugin code (and we try to not use many) but we get peace of mind in exchange.
garbagepatch··on F-Droid 2.0
Google getting sued again and losing again and drag their feet to unlock it again while devising a new way to go against the court order again.
garbagepatch··on Automattic's board forces CEO Matt Mullenweg into leave of absence
Matt, you shouldn't have picked a FLOSS license if you didn't intend for the software to be FLOSS in the first place.
garbagepatch··on Automattic's board forces CEO Matt Mullenweg into leave of absence
Here is the whole saga until May 2025: https://gist.github.com/adrienne/aea9dd7ca19c8985157d9c42f7f...
garbagepatch··on How Bluesky draws its logo on screenshots
Same here. Luckily you can show two apps at the same time in Android so I just put the password manager above the bank's app.
garbagepatch··on You won't believe the stupid shit the Pentagon puts in diplomats' system prompts
I was expecting to see some cool spy stuff in government's PS1 env vars not slop induced schizophrenia.
garbagepatch··on Show HN: YouTube Guitar Tab Parser
The people making the video are already making the information public, you are just making it more convenient. This strikes me as similar to downloading public court documents from a government site to make them available outside of their for-profit service.
garbagepatch··on Interview with Mitchell Hashimoto about Ghostty and Zig
When was this? I've only seen this "anti-rust" vibe in the past few weeks, guess triggered by the Bun rewrite. Zig people usually will tell you to use the right tool for the job over shilling the language or that you don't need to use it yet (if you want a stable language/documentation) the language will be there if you want to check it in a few years.
garbagepatch··on When do you guys think Zig will release 1.0?
5 years.

The language itself will probably stabilize in maybe 3 years. The last things they'll do is work on the std lib, documentation, spec. That will take time but the language will be ready before then.

garbagepatch··on Upcoming breaking changes for npm v12
Most users don't need it. Having it on by default is a feature for malware writers not users.

But to your point, Node has had permission flags for a while[0] but allows everything by default. Npm could use them to increase security even more. I just hope it doesn't take them another 10 years to change the default.

[0] https://nodejs.org/api/permissions.html

garbagepatch··on Show HN: Gitdot – A better GitHub. Open-source, written in Rust
I like the terminal aesthetics but please, for accessibility's sake, make input boxes look more like input boxes and buttons look like buttons.
garbagepatch··on Show HN: Gitdot – a better GitHub. Open-source, anti-AI, and written in Rust
Removes a barrier of entry if you can look at it from a browser instead of installing a CLI/TUI.

Don't try to make me install a random program if I can view it in my sandboxed browser safely.

Also, browsers have greasemonkey to help me personalize websites easily. TUIs don't.

garbagepatch··on Deno 2.8
I guess Bun had the better marketing then. I liked how every new feature came with a benchmark against the previous version and node. See this for example: https://xcancel.com/bunjavascript/status/2048228152397459590

I'd love to see a site comparing the 3 of them in a similar way.

garbagepatch··on Bun support is now limited and deprecated
To me it feels more like the old "this site only supports IE6". Instead of checking which JS engine the user has, check for specific api support and fail gracefully.
garbagepatch··on Bun support is now limited and deprecated
According to the bun team, it was already vibecoded for months before the Anthropic acquisition.
garbagepatch··on Claude Code Opus 4.7 keeps checking on malware
Does it use your tokens when it does this check for malware? or is that part covered by anthropic?
garbagepatch··on Show HN: A 24/7 live stream where AI writes a new song about the current time
I misread that as "current times" and thought it would sing the news.

It does need more streams for other timezones.

garbagepatch··on Show HN: I built a site that shows every world event you lived through
Drop the AI written story, take me straight to the "Explore Your Record" view. That's more interesting.
garbagepatch··on New 'Lord of the Rings' Movie from Stephen Colbert and His Son in Development
If they managed to make 3 full movies out of The Hobbit, they'll surely be able to make a movie or 2 out of 6 chapters of LotR.
garbagepatch··on Regular army and reserve components enlistment program: Summary of change
I'm sure plenty Americans are also laughing at this. No hypocrisy here.
garbagepatch··on Peter Thiel and Jeffrey Epstein Had a Yearslong Relationship
There's a bunch of steps before prison that do not work.
garbagepatch··on The Xkcd thing, now interactive
And it's all a meta commentary on 915.
garbagepatch··on Unredact the Epstein Files
All they left was the stopwords.
garbagepatch··on Why is Zig so cool?
Regarding runtime overhead, I'd assume you would still need an io implementation, it is just showing it to you explicitly instead of it being hidden behind the std lib.

For simple projects where you don't want to pass it around in function parameters, you can create a global object with one implementation and use it from everywhere.

garbagepatch··on React-Native-Godot
React Native is Javascript on top of the native toolkit of the platform. No HTML or CSS here.
garbagepatch··on Show HN: Zedis – A Redis clone I'm writing in Zig
What's the problem with the mascot? PostgreSQL has an elephant and MySQL a dolphin. Is the bug too detailed for database software?
garbagepatch··on What's New in C# 14: Null-Conditional Assignments
I wonder, does the important_value function get called and the value discarded or never called at all? Looks like a footgun if it has side-effects.
garbagepatch··on The "most hated" CSS feature: cos() and sin()
That's already the present. The result is just cached.
garbagepatch··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
Upvotes won't fix the problem. Build the future you want, then people will come.
garbagepatch··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
As little code as possible to get the job done without enormous dependencies. Avoiding js and using css and html as much as possible.
Page 1 of 3Next →