Hacker News: Chyzwar

New comment by Chyzwar in "OpenAI's response to the Axios developer tool compromise"

Chyzwar — Thu, 23 Apr 2026 10:11:42 +0000

Because your fetch most likely mishandle errors, lack retries, fail on redirects and is unnecessary verbose for both people and agents.

New comment by Chyzwar in "Ask HN: Building a solo business is impossible?"

Chyzwar — Mon, 20 Apr 2026 13:41:11 +0000

At lot of advice for solo founders is from people with survivalship bias, vocal sales biz dev and people that had right connections. I think tech solo founder path is different and in today market is very difficult. I can give advice on things that I did wrong so far. Avoid direct stripe integration and complex subscriptions models this would be time sink, use merchant of record and as simple as possible subscription model. Ignore everything non essential for product like usage charts, account management etc. Get decent designer but limit his scope to product features say NO to design system and custom components, use off the shelf UI toolkit with minimal customisation. If you want to raise wait for more traction and avoid startup conferences, better to go for your industry conference instead.

New comment by Chyzwar in "What is RISC-V and why it matters to Canonical"

Chyzwar — Sat, 11 Apr 2026 12:10:37 +0000

Exactly without billions in investments this would yet another experimental ISA.

New comment by Chyzwar in "GPT 5.4 in practice – Stinks?"

Chyzwar — Wed, 08 Apr 2026 07:17:06 +0000

I recently tested Claude code, opencode, codex on same frontend feature and codex with 5.4 with high effort was the best but most expensive. For me in Europe, Claude Code with 90$ max subscription is the best value for money.

My thinking is:

  codex - best harness
  opencode - best ux/dx
  claude - best value for money

New comment by Chyzwar in "Post Mortem: axios NPM supply chain compromise"

Chyzwar — Sat, 04 Apr 2026 08:07:54 +0000

This could be controlled by npm. Client ask for available versions anyway. If package is security fix then it can be made available instantly. But this delay gives time for security scanners and time to notify maintainers that package was published.

New comment by Chyzwar in "Post Mortem: axios NPM supply chain compromise"

Chyzwar — Sat, 04 Apr 2026 07:53:34 +0000

NPM should fix this mess.

Adding postinstall should require approval from NPM. NPM clients should not install freshly published packages. NPM packages should be scanned after publishing. High profile packages should verify upstream git hash signature. NPM install should run in sandbox and detect any attempt to install outside project directory.

But npm being part of multi trillion company cannot be bothered to fix any of these. Instead they push for tighter integration with GitHub with UX that suck.

New comment by Chyzwar in "DRAM pricing is killing the hobbyist SBC market"

Chyzwar — Wed, 01 Apr 2026 23:12:19 +0000

Main producers actually reduced dram output in 2026. When you have few players with very high capital cost you will end up with cartels like light bulb cartel.

New comment by Chyzwar in "Axios compromised on NPM – Malicious versions drop remote access trojan"

Chyzwar — Wed, 01 Apr 2026 21:41:34 +0000

Because native fetch lack retries, error handling is verbose, search and body serialization create ton of boilerplate. I use KY http client, small lib on top of fetch with great UX and trusted maintainer.

New comment by Chyzwar in "OpenAI closes funding round at an $852B valuation"

Chyzwar — Wed, 01 Apr 2026 07:26:53 +0000

This leak and looking into source code gave me an impulse to try OpenCode with codex models. I am very impressed with how well it works, and the UI is beautiful.

New comment by Chyzwar in "404 Deno CEO not found"

Chyzwar — Sat, 21 Mar 2026 18:02:53 +0000

No, they made many wrong architecture decisions that made it fringe project rather than mainstream. You could glimpse on how things could played out by looking into bun.js adoption.

New comment by Chyzwar in "Iran war energy shock sparks global push to reduce fossil fuel dependence"

Chyzwar — Thu, 19 Mar 2026 21:39:06 +0000

Russia and Kazakhstan control almost 50% of global production and enrichment of uranium. Even today 17% EU supply come from Russia.

Uranium mining is not pretty, read about "in situ leaching" mining.

New comment by Chyzwar in "Iran war energy shock sparks global push to reduce fossil fuel dependence"

Chyzwar — Thu, 19 Mar 2026 12:57:06 +0000

Levelized Cost of Energy for solar is 30-60$ and 100-200$ for nuclear. In the case of Spain, it is cheaper to build more energy lines with Morocco and battery storage than to use nuclear. Spain already has some of the cheapest energy in Europe thanks to renewables.

In the case of Germany, nuclear makes sense, but it is not clear where you would buy fuel for it, It might still be a supply chain risk since Russia and Kazakhstan are the main players there.

New comment by Chyzwar in "A GitHub Issue Title Compromised 4k Developer Machines"

Chyzwar — Fri, 06 Mar 2026 16:00:19 +0000

Both pnpm and yarn implemented npmMinimalAgeGate: 1440 enableScripts: false

These mostly solve the issue of adding postinstall scripts and packages being compromised.

New comment by Chyzwar in "Croatia declared free of landmines after 31 years"

Chyzwar — Sat, 28 Feb 2026 09:21:25 +0000

In conflict between equals, landmines are the only practical way to restrict the mobility of the enemy. That's why 20% of Ukraine is contaminated by mines. If you were official and your choices would be losing and more people dying or placing more landmines that can be cleared over 20 years, what would you do?

New comment by Chyzwar in "JavaScript-heavy approaches are not compatible with long-term performance goals"

Chyzwar — Mon, 16 Feb 2026 11:32:16 +0000

As someone that spend many days on performance I will tell you that bundle size have minimal impact on performance. In most cases backend dominate any performance discussion.

Apps are slow because caching is missing, naive pagination, poorly written API calls waterfall, missing db indexes, bad data model, database choice or slow serverless environment. Extra 1MB of bundle add maybe 100ms to one time initial load of app that can mitigated trivially with code splitting.

New comment by Chyzwar in "OpenAI's cash burn will be one of the big bubble questions of 2026"

Chyzwar — Wed, 31 Dec 2025 08:03:45 +0000

Anthropic is building moat around theirs models with claude code, Agent SDK, containers, programmatic tool use, tool search, skills and more. Once you fully integrate you will not switch. Also being capital intensive is a form of moat.

I think we will end up with market similar to cloud computing. Few big players with great margins creating cartel.

New comment by Chyzwar in "How common is it for employers to lay off employees for non-performance reasons"

Chyzwar — Fri, 19 Sep 2025 16:11:36 +0000

If you are CEO of a large company, and you see a huge uptick of ecommerce during covid, you could:

  - Expand aggressively and compete for top talent
  - Wait and possibly miss opportunity if trend continue

Most CEOs decided to expand. For example meta hired around 30k people from 2020 to 2022.

If you see end of ZIRP, slowdown and inflation and you actually overhired as CEO what you should do?

  - Keep employees locked in roles that are not needed?
  - Let go people that are not needed and hire for what is needed.

Meta let go most e-commerce positions and support and now is aggressively hiring AI specialists.

If you are hiring, and you see someone that cannot hold a job for more than 6 months, it is red flag. In capitalist system, employees are just to provide labor in exchange for wages. Nothing more, nothing less. Problem in US is that both retirement and healthcare is often provided by employer, creating this weird illusions of long term caring relationship.

New comment by Chyzwar in "Modern Node.js Patterns"

Chyzwar — Mon, 04 Aug 2025 11:32:16 +0000

Node.js made many decisions that have massive impact on ESM adoption. From forcing extensions and dropping index.js to loaders and complicated package.json "exports". In addition to node.js steamrolling everyone, tc39 keep making are idiotic changes to spec like `deffered import` and `with` syntax changes.

New comment by Chyzwar in "Why I left my tech job to work on chronic pain"

Chyzwar — Fri, 04 Jul 2025 18:26:27 +0000

For me intermittent fasting after 6pm and small diet changes fixed my acid reflux. PPI were not helping and making things worse. I actually took Betaine HCI supplements to fix digestive issues after PPIs.

New comment by Chyzwar in "Why email startups fail"

Chyzwar — Fri, 04 Jul 2025 07:46:34 +0000

> There are no issues with POP and multiple clients whatsoever.

POP3 in standard only have "Leave a copy on the server" but lack synchronisation mechanism.

> I suggest you to educate yourself on DKIM, DMARC, SPF and SMTP before making those statements.

You cannot use SMTP in real world without these protocols. Your messages would automatically land in spam folders of big providers. For example, if you want to send email to Gmail, you need SPF and DKIM [1]. Any half decent implementation of SMTP need to support all these protocols [2].

[1] https://support.google.com/a/answer/81126?hl=en

[2] https://github.com/stalwartlabs/stalwart

> It DOES have delivery tracking. Spam filtering is not a protocol feature and it shouldn't be. I suggest you again to educate yourself.

SMTP have extension for DSNs (Delivery Status Notifications) but crucially it does not provide information if/why email was classified as spam. This is a reason why many website registration form have “check spam folder”. SMTP deliverability is a hard problem both on protocol level and infrastructure on spam filtering[3].

[3] https://blog.paranoidpenguin.net/2020/02/self-hosting-email-...

> If you don't know how to build something doesn't mean it's left out to "hardcore graybeards". You got to admit you just don't know how and either learn or surrender to companies who know, offering the same for a buck. It's pretty simple.

I spend a significant amount of time investigating feasibility of building an email product and build some libraries for email protocols. It is not just my opinion but other HNs users including OP. Search HN for "self hosting email" for others people experience.