Hacker News Reader

khromovon CVEs affecting the Svelte ecosystem

Not from my reading. DoS are irrelevant, remote functions exploits don't apply and from my reading neither does the "XSS via hydratable" since a prerequisite is hydratable() which is a Remote Functions feature.

khromovon Serverless Horrors

CapRover is another good alternative, and also much more lightweight than Coolify, easily runs on even a 512MB server: https://caprover.com/

khromovon Show HN: I built an LLM benchmark for Svelte 5

I haven't posted about the methodology yet but intend to. If you're interested in my initial impressions I made a video about it: https://youtu.be/SIwKKgkjlbU

khromovon Claude's Max Plan

Made a video comparing Gemini 2.5 Pro to Claude Sonnet 3.7 recently: https://www.youtube.com/watch?v=AVdVJ_hD_vo

khromovon Svelte 5 is going to be radical

There's about a 99% chance you can update from Svelte 3 to 4 without any code changes. Some code changes are performed automatically by the migration script: https://svelte.dev/docs/v4-migration-guide

khromovon Expo – Open-source platform for making universal apps for Android, iOS, and web

I've used the same codebase for a PWA, iOS and Android app, but using Capacitor instead of Expo. Here is a blog post about the architecture: https://khromov.se/how-i-published-a-gratitude-journaling-ap...

khromovon Why even let users set their own passwords?

Great post, I came to much the same conclusion when building my app - a secure token is generated on account creation and users are encouraged to save it in case the need to restore their account. I blogged about the implementation below together with how the UI looks (under the "Authentication" heading): https://khromov.se/building-a-privacy-friendly-self-hosted-a...

khromovon WordPress Playground: A WordPress that runs entirely in the browser

WordPress is very fast out of the box considering all its capabilities, it's not hard to get in the range of 100ms TTFB out of the box on dirt cheap VPS servers, which is pretty good in my book. The problem is that people add very heavy themes and plugins that push them well above acceptable TTFB numbers.

Full Site Editing with the new Gutenberg editor have amended a lot of that, it's very performant out of the box. Just as an example, I have a site averaging about 200ms for uncached requests, it has an FSE theme and 20 installed plugins, including heavy ones like ACF.

This is all out of the box without cache, but by adding a simple static page cache (either a plugin or something like Fastly, Varnish etc.) you can make it so that the p95 latency drops by 80-90% because most people will see cached page views any way.

khromovon Ask HN: Could you share your personal blog here?

https://khromov.se/

Personal blog / portfolio. Like most developers, I have a hard time publishing more than a post or two per year.

khromovon Svelte 4

You would be hard pressed to find a functional difference between a SvelteKit project compiled with adapter-static and a "Create React App" app. If you have any concrete differences, do share them. They're functionally equivalent (except a SvelteKit project is a lot lighter in JS due to the compiler architecture).

There are unfortunately a lot of misunderstandings around SvelteKit because it is SSR-centric. SvelteKit has probably the best interactive docs of any framework at https://learn.svelte.dev/ and I do encourage everyone to go through them to get the full picture!

khromovon Svelte 4

It sounds like you have a misunderstanding about SvelteKit. It does have a client side router and you can use SvelteKit as a pure SPA today very easily, all you need is to set `export const ssr = false;` and `export const prerender = false;` in `src/routes/+layout.ts`. Then export with `adapter-static` and you're done.

Swing by the official Svelte Discord, we're happy to discuss your questions! https://discord.com/invite/svelte

khromovon Svelte 4

Super happy Svelte user. Have recently published an iOS + Android app using SvelteKit and blogged about the process for those interested: https://khromov.se/how-i-published-a-gratitude-journaling-ap...

I tested the beta version of Svelte 4 on my app and it worked without requiring any changes other than running the migration script. Excellent work from the team!

khromovon Ask HN: What has your personal website/blog done for you?

Years ago I started a personal blog but like many others, I found myself struggling to write more than a couple of posts per year. The barrier of quality felt too large. So I decided to create a separate shortform blog where I would share small code snippets that solved problems for me.

It turned out to be quite popular and since I started the blog in 2013 it's gotten well over 1.5 million visitors and still attracts hundreds every day, exculsively from search traffic.

While I can't say that it changed my life in any way, it did bring me a lot of satisfaction that it helped many people. It also taught me about the concept of "long tail keywords" on Google!

You can find it here if you are interested: https://snippets.khromov.se/

khromovon Self hosting in 2023

You can also check out CapRover, similar self-hosted PaaS like Coolify but simpler to set up and manage in my opinion: https://caprover.com/

khromovon The cameras worked fine, but their maker said they had reached their end of life

While we wait for better legislation, all we can do is vote with our wallets. That's why I started the review site Unwanted Cloud to review how well devices work without "cloud" connectivity: https://unwanted.cloud/

khromovon Show HN: Dropbox public folder replacement

Dropbox are removing their support for public folders on September 1,2017. I made this script to be able to easily swap out my old links.

More info: https://www.dropbox.com/help/files-folders/public-folder

khromovon No comment

This is very neat. Good job!

khromovon We are currently taking a DDoS attack and are working to mitigate

This needs an answer.

khromovon Blocked Sites is discontinued

Agree with this. Not everything on there is right, but there's a lot of useful snippets.

khromovon Show HN: Heap is a new approach to analytics. Just capture everything

In the same boat as this guy. High anonymous visitor count, but would like to graph it, but pricing is not gonna make it possible.

khromovon Show HN: Heap is a new approach to analytics. Just capture everything