Hacker News: altbdoor

CVE-2026-23869: CVSS 7.5 in React Server Components lead to Denial of Service

altbdoor — Fri, 10 Apr 2026 07:45:46 +0000

Article URL: https://vercel.com/changelog/summary-of-cve-2026-23869

Comments URL: https://news.ycombinator.com/item?id=47714882

Points: 1

# Comments: 0

New comment by altbdoor in "Show HN: Tired of logic in useEffect, I built a class-based React state manager"

altbdoor — Thu, 09 Apr 2026 02:05:05 +0000

Working with multiple teams in a large project, hooks can be a nightmare to maintain.

I see 7x layers deep of hooks, with no test cases to support them. Some of the side effects are not properly tested, and mocks that abstract away the whole implementation means the test case only works for certain scenarios.

FWIW this scenario might be an outlier in large projects, considering how some developers prefer to "just wrap the hook in another hook, and not worry about its internals".

New comment by altbdoor in "Appsflyer SDK Hijacked"

altbdoor — Wed, 11 Mar 2026 01:39:01 +0000

Their status page communicates whats going on

https://status.appsflyer.com/

New comment by altbdoor in "I need AI that scans every PR and issue and de-dupes"

altbdoor — Mon, 16 Feb 2026 02:22:13 +0000

And then start writing "hit pieces" to all the bot PR authors? /s

New comment by altbdoor in "Jeffgeerling.com has been migrated to Hugo"

altbdoor — Mon, 05 Jan 2026 14:21:55 +0000

In retrospect, Jekyll has been relatively stable recently. The last stable release was in January 2025, v4.4.1[1].

I've been using 4.3 to 4.4 without much issues, granted the sites I generate are simple.

[1]: https://jekyllrb.com/news/

New comment by altbdoor in "If you care about security you might want to move the iPhone Camera app"

altbdoor — Sat, 03 Jan 2026 00:48:30 +0000

> I think it's sending my message to the server continuously

It is, at least I see it for the first message when starting a new chat. If you open the network tools and type, you can see the text being sent to the servers on every character.

Source, from spending too much time analysing the network calls in ChatGPT to keep using mini models in a free account.

New comment by altbdoor in "Getting a Gemini API key is an exercise in frustration"

altbdoor — Thu, 11 Dec 2025 10:09:54 +0000

To Logan's credit though, his team made and drove a lot of good improvements in AI studio and Gemini in general since the early days.

I feel his team is really hitting a wall now in terms of improvements, because it involves Google teams/products outside of their control, or require deep collaboration.

New comment by altbdoor in "RCE Vulnerability in React and Next.js"

altbdoor — Thu, 04 Dec 2025 00:15:50 +0000

It was one hell of a ride, but I would say the Angular team did one hell of a job too, supporting the glue code until v18 (not sure if the latest version still does).

Having both old and new Angular running in one project is super weird, but everything worked out in the end.

New comment by altbdoor in "AWS multiple services outage in us-east-1"

altbdoor — Mon, 20 Oct 2025 16:35:20 +0000

Had a meeting where developers were discussing the infrastructure for an application. A crucial part of the whole flow was completely dependant on an AWS service. I asked if it was a single point of failure. The whole room laughed, I rest my case.

New comment by altbdoor in "Being blocked from contributing to lodash"

altbdoor — Tue, 07 Oct 2025 01:42:12 +0000

I guess it also didn't help that these kind of PRs are most commonly generated with AI.

New comment by altbdoor in "AI was supposed to help juniors shine. Why does it mostly make seniors stronger?"

altbdoor — Sun, 21 Sep 2025 05:19:12 +0000

Same thoughts. Company is currently migrating from tech A to tech B, and while AI gets us 70-80% of the way, due to the riskier nature of the business, we now spend way more time reviewing the code.

New comment by altbdoor in "Kruci: Post-mortem of a UI library"

altbdoor — Thu, 04 Sep 2025 18:08:34 +0000

Very interesting thought process, with lots of nitty gritty details. I recently had some idea around a repetitive process at work, and decided to try it in TUI. Oh what a ride it was!

Even armed with a library like charms or bubbletea in Golang, sometimes its just amazing how all the internals "clicked" together, to render layouts and widgets.

New comment by altbdoor in "Sometimes Software Is Done, or Why Hugo Why (2024)"

altbdoor — Sun, 31 Aug 2025 11:34:55 +0000

I started with Jekyll, and tried out Hugo since there was all the hype.

I didn't had the same issues as OP, but Hugo docs are so confusing that I just gave up and switched back. Jekyll works OK for my simple needs, and still does.

For those interested, there was also a partial-Jekyll-Golang-port, https://github.com/osteele/gojekyll

Show HN: VR Cardboard Profile Generator

altbdoor — Sat, 30 Aug 2025 16:07:55 +0000

Late to the whole Google Cardboard party, but just got a cheap knockoff Cardboard myself. The seller didn't know the specific configurations, so I just went to check around.

I found the Viewer Profile Generator[1], but it was completely non-functional, generating blanks instead of valid QRs. A StackOverflow post[2] explains how the website generates them, but I found it tedious to replicate.

Hence, I built a site in Vue to both practice, and iterate the profile generation faster.

[1]: https://wwgc.firebaseapp.com/

[2]: https://stackoverflow.com/a/77317690

Comments URL: https://news.ycombinator.com/item?id=45075759

Points: 2

# Comments: 0

New comment by altbdoor in "We're making GPT-5 warmer and friendlier based on feedback that it felt formal"

altbdoor — Sat, 16 Aug 2025 00:48:52 +0000

> What happened with GPT-5 is that the product changed abruptly and significantly.

And also the blazing fast deprecation of all other models in ChatGPT when 5 was announced.

New comment by altbdoor in "Show HN: Tsbro – TypeScript for the browser, no build step"

altbdoor — Fri, 25 Jul 2025 07:31:48 +0000

I've tried this before, with a service worker[1] that intercepts TS/X-ish requests, and directing them over to sucrase[2] to compile to JS, before being loaded by the browser. Unfortunately sucrase seems to be no longer maintained.

[1]: https://github.com/altbdoor/sucrase-build-iife

[2]: https://github.com/alangpierce/sucrase

New comment by altbdoor in "Show HN: Tinder but it's only pictures of my wife and I can only swipe right"

altbdoor — Thu, 24 Jul 2025 00:09:26 +0000

Throw in a timer too, which will be reported as stats to wife :-D

New comment by altbdoor in "Grok 4 Launch [video]"

altbdoor — Thu, 10 Jul 2025 11:09:08 +0000

It's important to note that pricing for Gemini has been increasing too.

https://news.ycombinator.com/item?id=44457371

New comment by altbdoor in "Fun with uv and PEP 723"

altbdoor — Wed, 25 Jun 2025 13:26:46 +0000

One can use uv to add into the dependencies list

    $ touch foo.py

    $ uv add --script foo.py requests
    Updated `foo.py`

    $ cat foo.py
    # /// script
    # requires-python = ">=3.13"
    # dependencies = [
    #     "requests",
    # ]
    # ///

New comment by altbdoor in "Python can run Mojo now"

altbdoor — Mon, 23 Jun 2025 10:34:44 +0000

https://i.imgur.com/0NaxFGB.png