HNHacker News
TopNewBestAskShowJobs

mubou

322 karma · joined December 1, 2024

submissionscomments
mubou··on PackagePhobia – Find the cost of adding a new dev dependency to your project
I like how the graph shows the change in size per version.

"Publish size" is a little misleading though. I thought that meant the size that would be included in my bundle when I publish my app, and was wondering how you were calculating that. Maybe "w/ deps" "w/o deps"?

I'd appreciate you not hiding information below the fold. Really hate that design trend. Remove the `min-height: 100vh` and see how much better it looks (with a bit of padding). At least make it 90vh.

mubou··on Dark Mode Support for Built-In Nginx Error Pages – Like or Dislike
For such a simple page, implementing dark mode only takes adding `color-scheme: light dark;`.

That's literally it.

And you'd be doing a huge favor for people with certain eyesight issues.

mubou··on US appeals court rules AI generated art cannot be copyrighted
I'd be awesome if there was a phone meant for photographers (who can't be arsed to carry a DSLR all the time). Like, take the sensor off a compact point-and-shoot and slap it on a smartphone. Because honestly it feels silly that point-and-shoots still exist in 2025; you'd think they'd have gone the way of the mp3 player.
mubou··on US appeals court rules AI generated art cannot be copyrighted
Wow, that last "photo" is especially damning.

I hate how impossible it is nowadays to buy a phone with a camera that just takes photos without 'shopping them somehow. Even Pixels apply unnatural filters. It just ruins photos, which you often can't ever go back and retake...

(I know you can shoot in RAW, but I don't have time to develop every photo I take and I really shouldn't have to. Some phones' RAWs are actually post-filtering, too, and not actually "raw".)

mubou··on Why are people "vibe coding" games with threejs instead of using Unity or Unreal
Even more simple: if you're not willing to learn how to program, you're probably also not willing to learn Unity (and vice versa).
mubou··on Tell HN: Browsers accept SSH:// protocol links
For me on Windows it just prompts to open WinSCP, which registered itself under `HKEY_CLASSES_ROOT\ssh`, the same as Chrome does for any other unknown protocol.
mubou··on Manifest: A 1-file micro-back end
I'd love to see a frontend for this. Most CMSs are either tailored specifically for blogs or are complicated to set up. I've often wanted something like I guess Access or Filemaker Pro (if anyone remembers that) but with a modern UI and database.

Not for production use, mind you, just like, say I have a library of books or blu-rays and want to create a catalogue of them (with images, so a spreadsheet is a no-go). Being able to just bang out a single-file config and have an impromptu CRUD admin would be awesome.

mubou··on VibeCodeFixers – Expert Developer Network
Alright, now that's pretty funny
mubou··on Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf (2022)
> I want to support content creators, so to be fair, after a few months of blocking YouTube ads, I am now paying for YouTube Premium; Just because I can break something, doesn’t mean I need to.

Does paying for YouTube Premium support creators? (If so, how much, compared to say Patreon?)

mubou··on Software is increasingly being built by AI – it's vital we can trust it
I can't speak for you, but personally, a company that would consider replacing its engineers with AI is a company I would not want to work for in the first place.

Maybe once LLMs gain actual intelligence I'll begin to worry.

mubou··on So, How Fast Is Rust Anyway
> my eyes are immediately drawn to this weird bullshit

Gave me a good chuckle there :)

Appreciate this write up; I'd even say your comment deserves its own article, tbh. Reading your thought process and how you addressed the issues was interesting. A lot of people don't know how to identify or investigate weird bullshit like this.

mubou··on Show HN: Standard vs. Commercial Internet Speed Tester Extension
I really think the Show HN rules should have a rule about reposting the same link over and over...
mubou··on City simulator I made in Scratch
Found a bug (on Chrome, reality mode): if you open and close the achievements/settings screen enough times, eventually things start to disappear and you can no longer place buildings.
mubou··on City simulator I made in Scratch
This looks really cool. Kindof a random question, but how did you come up with the biome names? Are they inspired by something or just totally random? I like the world-building touch, either way.
mubou··on Styling an HTML dialog modal to take the full height of the viewport
That's how <b> tags are made bold etc. There's a css file that's basically loaded before everything else to apply those default styles. Here's WebKit/Safari's for example:

https://github.com/WebKit/WebKit/blob/main/Source/WebCore/cs...

Try turning on user agent styles & user agent shadow dom in your dev tools settings.

mubou··on Popular GitHub Action tj-actions/changed-files is compromised
Someone else in the thread mentioned that this is coming! https://github.com/features/preview/immutable-actions
mubou··on Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
Yeesh. Found an article for anyone interested: https://snyk.io/blog/peacenotwar-malicious-npm-node-ipc-pack...

I like this comment from u/mailto_devnull (https://www.reddit.com/r/node/comments/tg451e/do_not_use_nod...):

  Where do I stand on the war? I stand with Ukraine.
  Where do I stand on software supply chain issues? I stand with not fucking around with the software supply chain.
mubou··on Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
Used to live near San Francisco, and had a lot of coworkers say they intentionally leave their windows down when parking in SF so that burglars don't break the glass to steal something!
mubou··on Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
This is why I fork the extensions I use, with the exception of uBlock. Basically just copy the extension folder, if I can't find it on GitHub. That way I can audit the code and not have to worry about an auto-update sneaking in something nefarious. I've had two extensions in the past suddenly start asking for permissions they definitely did not need, and I suspect this is why.

Btw, here's a site where you can inspect an extension's source code before you install it: https://robwu.nl/crxviewer/

mubou··on Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
In recent years, it's started to feel like you can't trust third-party dependencies and extensions at all anymore. I no longer install npm packages that have more than a few transitive dependencies, and I've started to refrain from installing vscode or chrome extensions altogether.

Time and time again, they either get hijacked and malicious code added, or the dev themselves suddenly decides to betray everyone's trust and inject malicious code (see: Moq), or they sell out to some company that changes the license to one where you have to pay hundreds of dollars to keep using it (e.g. the recent FluentAssertions debacle), or one of those happens to any of the packages' hundreds of dependencies.

Just take a look at eslint's dependency tree: https://npmgraph.js.org/?q=eslint

Can you really say you trust all of these?

mubou··on Fair-code is not a software license
Odd that they consider the Server Side Public License "fair code" but not the AGPL, considering that those two are essentially the same license: https://webassets.mongodb.com/_com_assets/legal/SSPL-compare...
mubou··on IECore: IE's core library for Linux, Windows and macOS based applications
I was thinking the same thing. Especially with Microsoft's penchant for naming things "Core" (lol)
mubou··on Modern Image Formats at Discord: Supporting WebP and AVIF
Hopefully GitHub is next. AVIFs still show "View raw" instead of the image. It's not even like they need to update some pipeline like Discord did, either; just add .avif to the list of image formats...
mubou··on uBlock Origin is no longer available on the Chrome Store
For the unaware: https://old.reddit.com/r/browsers/comments/1j1pq7b/list_of_b...
mubou··on A Hollywood Star with a Secret That Could Have Ended Her Career
Clickbait title. HN isn't a tabloid.
mubou··on DemandJS – Should this be the next W3C reccomendation
https://developer.mozilla.org/en-US/docs/Web/Performance/Gui...
mubou··on Rewriting essential Linux packages in Rust
Wrong erd! https://github.com/solidiquis/erdtree

This looks really cool, though. I might try using this as an `ls` replacement, too, just because of how it shows the recursive directory size like `du`. I've always wished windows explorer did that (do any linux gui file managers?)

mubou··on Rewriting essential Linux packages in Rust
You've never heard that GPL can hinder adoption? Most codebases simply cannot use GPL code because if they do, they'd be forced to relicense under GPL (obviously). Not everyone wants to do that, even setting companies aside.

Even people who nominally agree with the concept of Free Software might not want to be forced to use GPL. The freedom to choose how to license one's work is also an important freedom, after all. GPL can be confusing, so you can't fault anyone from not wanting to use it even if they agree with the spirit of the license.

(For the record, I use GPL on some of my projects. I don't hate it, but I also like to use MIT on some projects, too.)

mubou··on AbsurdSQL – IndexedDB as a persistent back end for SQLite
Anyone know how IDB would compare to OPFS for using SQLite in the browser? Would be interested in seeing some benchmarks.
mubou··on Ask HN: Blocking "Login with Google"?
Some sites include a JS "log in with google" that does the same thing. You can tell by whether you can select it with the element inspector. Use ublock to block the js version. Also, the login prompt appearing has nothing to do with Google tracking you or using fingerprinting. It's just the site author added google sign-in. That's all. Block google domains in your dns if you're paranoid.
← PreviousPage 5 of 6Next →