HNHacker News
TopNewBestAskShowJobs

vinnymac

787 karma · joined December 5, 2012

submissionscomments
vinnymac··on NPM packages from Red Hat have been compromised
In case others are unaware, you just have to set https://yarnpkg.com/configuration/yarnrc#npmMinimalAgeGate to the value you want. It defaults to 1 day.
vinnymac··on NPM packages from Red Hat have been compromised
It’s on by default in yarn 4 too now, but pnpm was the first to market that default minimum gate.

https://github.com/yarnpkg/berry/pull/7135

vinnymac··on Show HN: AISlop, a CLI for catching AI generated code smells
I tried it but see a lot of false positives.

One funny thing I see it doing is deleting seemingly random comments lines, for example if a file has a comment that spans multiple lines but doesn’t use a multi line comment syntax. It just chooses one at random transforming the once useful comment into slop.

vinnymac··on Dynamic Workflows in Claude Code
The problem is that we have an ever growing and large number of constraints, and not following even a single one means the result is sloppy.

I don’t see them fixing this any time soon, and thus human in the loop is a requirement to use these tools effectively. That is unless you love your slot machine dopamine rush enough to ignore quality gates and respect for your peers time.

vinnymac··on Incident with Pull Requests, Issues, Git Operations and API Requests
It’s still early days, but I already have it in a useable state so I could share more such as early screencaps.

I plan on focusing primarily on these areas:

- mobile experience is first class, even on old/slow devices

- diff viewer is fast even on extremely large pull requests

- stacked pull request support

- user interface is modern, accessible, and theme-able with a light touch of whimsy

- search is accessible from anywhere

- opinionated keyboard shortcuts and commandk palette from day one

Many other longer term goals that I’m not mentioning here for now while the roadmap is forming.

vinnymac··on Incident with Pull Requests, Issues, Git Operations and API Requests
I moved most of my projects off GitHub to Forgejo and will be using Tangled too for public repositories. I don’t think people realize that if you self host Forgejo, you get 99% of the functionality of GitHub with zero of the limitations. Especially if you have the hardware to spare for CI runners. And if self hosting isn’t your thing you can always just use Codeberg and Tangled directly.

I’m working on an open source Forgejo browser called Joui. It’s coming along nicely, and is so much snappier than GitHub in every single way.

vinnymac··on Incident with Pull Requests, Issues, Git Operations and API Requests
I’m actively working on an alternative Frontend for Forgejo at the moment, completely self hostable, free, and open source.

Moving everything from GitHub to Forgejo and Tangled for now. These outages haven’t effected me for the past month because of this.

vinnymac··on - -dangerously-skip-reading-code
I left a similar comment elsewhere in this thread. I still remember when so many people hallucinated that we would suddenly have flying cars by 2002 at the latest. If we achieve several more major improvements on current technology, these thoughts are interesting to consider. But not before that occurs.

We need the pragmatic engineer more than ever.

vinnymac··on -​-dangerously-skip-reading-code
I appreciate your insights in a sea of psychosis comments. I find it strange how many people think we have achieved the likes of Y2K flying cars 20 years ago, or the dream of having every car on the road be an electric fully self driving car by now (a promise made at least over a decade ago by several of these types).

The point I’m making is that we give the spotlight to people who are making absurd claims. We have not achieved the ability to remove the human from the loop and continually produce value-able outputs. Until we do, I don’t see how any of the claims made in this article are even close to anything more than simply gate-keeping slop.

vinnymac··on Rewrite Bun in Rust has been merged
Not to mention how trigger happy LLMs can be when it comes to being overly verbose and adding unnecessary bits even with explicit direction not to do so.
vinnymac··on Show HN: How LLMs Work – Interactive visual guide based on Karpathy's lecture
This made it impossible for me to read, and Safari Reader was unavailable, further cementing my press of the back button.
vinnymac··on Claude wrote a full FreeBSD remote kernel RCE with root shell
When doing this remove write permissions on the test file, it will do a much better job of staying the course over long periods. I've been doing this for over a year now.
vinnymac··on Be intentional about how AI changes your codebase
Well said. I have to review PRs of non-software developers nowadays.

The “what is this trying to do?” has never been harder to answer than before. It creates scenarios where 99% is correct, but the most important area is subtly broken. I prefer it to be human, where 60-80% will be correct, and the problematic areas begin to smell more and more gradually.

In my experience LLMs, at times, may hide the truth from you in a haystack made of needles.

vinnymac··on Node.js needs a virtual file system
I carefully review far more than 14k LoC a week… I’m sure many here do. Certainly the language you write in will greatly bloat those numbers though, and Node in particular can be fairly boilerplate heavy.
vinnymac··on Get Shit Done: A meta-prompting, context engineering and spec-driven dev system
I tried this for a week and gave up. Required far too much back and forth. Ate too many tokens, and required too much human in the loop.

For this reason I don’t think it’s actually a good name. It should be called planning-shit instead. Since that’s seemingly 80%+ of what I did while interacting with this tool. And when it came to getting things done, I didn’t need this at all, and the plans were just alright.

vinnymac··on What years of production-grade concurrency teaches us about building AI agents
Been using Elixir with agents for over a year. Seemed like an obvious choice to me.

Node is great, but scaling Elixir threads is more so.

vinnymac··on NPMX – a fast, modern browser for the NPM registry
“NPM registry directory” sounds terribly confusing in my opinion, reads like a grammatical mishap
vinnymac··on The Performance Revolution in JavaScript Tooling
Especially because they mention unmaintained software (volta) in the same breadth as maintained software (fnm/mise)
vinnymac··on My role as a founder-CTO: year 8
Same, I am looking forward to starting my own company in the next year or two, and exploring the CTO role, especially after so many years as a Staff+ operating as an arm of CTOs and learning the ropes.
vinnymac··on RCE Vulnerability in React and Next.js
You wouldn't use it in an offline-first application. But you can use it an offline-first application, and it isn't even very difficult.

I have built electron apps for fun that utilize React Server Components entirely offline.

vinnymac··on RCE Vulnerability in React and Next.js
The official blog post disagrees.

> Even if your app does not implement any React Server Function endpoints it may still be vulnerable if your app supports React Server Components.

vinnymac··on Copyparty, the FOSS file server [video]
Most repositories try to create a poor man’s wiki inside of their README. It’s better this way until that problem is solved.

The other style I like is a single sentence with a single link to the actual wiki.

vinnymac··on AWS is 10x slower than a dedicated server for the same price [video]
The last 18 years of tech companies I’ve worked for used AWS EC2, every single one.
vinnymac··on Hi, it's me, Wikipedia, and I am ready for your apology
Ah, a teacher telling a student to get in line, or else. A tale as told as time.

Since we defunded education in my area, my wife left teaching behind. She says the LLMs will let students ask whatever questions they want, but they make poor educators.

vinnymac··on JetKVM – Control any computer remotely
The difference is that the masses don’t buy these devices, only us nerds do. We are much more likely to disconnect a device as soon as they’re found being malicious. While the masses won’t even react after being told the well is poisoned. Large slow targets are more lucrative and long lasting.
vinnymac··on JetKVM – Control any computer remotely
Ever since I started using Wayland I’ve had this problem, even when I’m not using KVMs. I have to do a power reset of my monitor to get it to negotiate the correct resolution and refresh rate. Meanwhile Windows and macOS use the monitor without issue. I suspect the issue isn’t solely with the KVM.
vinnymac··on JetKVM – Control any computer remotely
The JetKVMs I have all came with a mini HDMI to HDMI cable, so this hasn’t been an issue for me.
vinnymac··on Show HN: OnlyJPG – Client-Side PNG/HEIC/AVIF/PDF/etc to JPG
Great work

Have you seen vert.sh? It does on-device conversion of audio, images, and documents and is open source too.

vinnymac··on Why it took 4 years to get a lock files specification
A governance model where “time-based decision thresholds” directly damaged veto power as time passes could be used to harness this sort of BDFL-only power in a consensus culture.
vinnymac··on How I influence tech company politics as a staff software engineer
I used to run my own business when I was a child, and made a lot of money from it. Paid my way through school with my earnings. There was no sales or marketing, and all I did was product and engineering, and at no point was I politicking. So no, it's possible (albeit difficult) to not be part of the meat grinder, I have done it.
← PreviousPage 2 of 10Next →