<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: habinero</title><link>https://news.ycombinator.com/user?id=habinero</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 09 Apr 2026 09:19:35 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=habinero" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by habinero in "France pulls last gold held in US"]]></title><description><![CDATA[
<p>> Deflation is bad for the elites and politicians, and good for consumers.<p>Hahahaha no. Other way around. I assume you meant "consumers" as a short hand for "normal people" and not its actual meaning of "people who need to buy things on a regular basis" because you <i>do not want</i> to be a consumer in a deflationary market. You're constantly having to piddle your wealth away because you're forced to exchange money for goods and services. Like food and shelter.<p>Deflation means no access to modern lending because there's no incentive to do anything with money except hold it. That's fine if you're <i>already wealthy</i>, because either you have it on hand, have assets for collateral, or can call in a favor. If you're not wealthy, you're just fucked.<p>Having easy access to debt is, overall, a phenomenal thing for the non-wealthy. Can you abuse it? Yup. Can it be predatory? Sure. Does it mean the average person gets access to capital without access to generational wealth or decades of saving? Absolutely. The middle class kind of doesn't exist without it. See also: The Ability to File For Bankruptcy is Good, Actually.<p>> And if you spend like 5 minutes pondering the justification for why that is, you'll see it's mostly BS.<p>I'm always a fan of examining things, but there's a prerequisite. You need enough education, critical thinking skills, and maturity to understand why you start at the null hypothesis: any "Secret Knowledge They Don't Want You To Know" theory is conspiracy bullshit.<p>And enough cynicism to know when people start talking about "elites and politicians" like they're one homogenous lump of evil agenda, it's usually a shibboleth for other, ah, <i>less socially acceptable</i> beliefs.</p>
]]></description><pubDate>Wed, 08 Apr 2026 10:27:36 +0000</pubDate><link>https://news.ycombinator.com/item?id=47688142</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47688142</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47688142</guid></item><item><title><![CDATA[New comment by habinero in "Lunar Flyby"]]></title><description><![CDATA[
<p>There is none, they're automatically public domain.</p>
]]></description><pubDate>Wed, 08 Apr 2026 06:16:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=47686048</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47686048</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47686048</guid></item><item><title><![CDATA[New comment by habinero in "France pulls last gold held in US"]]></title><description><![CDATA[
<p>And you'd be wrong. It's not even difficult to understand why. Uncontrolled inflation <i>is</i> bad. Deflation is much, much worse. You do not want deflation. It rots your economy and nukes lend and spend. We trade a small amount of inflation to avoid the nuke that is deflation.<p>This is, like, one of the few things economists -- even most of the crazy ones -- agree on.</p>
]]></description><pubDate>Tue, 07 Apr 2026 00:06:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=47669057</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47669057</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47669057</guid></item><item><title><![CDATA[New comment by habinero in "France pulls last gold held in US"]]></title><description><![CDATA[
<p>>  that's why you can trade and barter random objects...imagine having an exchange currency that literally never inflated... that's GOOD. We have been hoodwinked into thinking that we need inflation to keep up with goods and services, literal stockholm syndrome<p>Gahhh. Stop taking your economics advice from bitcoin bros and goldbug weirdos. They don't know how anything works and don't want to learn. It's like taking legal advice from sovereign citizens. It's not even that difficult to understand why it's a terrible idea!<p>High inflation is bad, sure. Deflation is an economic nuke. You know those people who spent like a whole bitcoin buying pizza way back when? "If I'd just held onto it, I'd have $HUGE_NUMBER now".<p>Yeah. If your money goes up in value, you have a huge incentive to stockpile it and <i>not</i> buy pizza. It's not just Dominos that loses out. All of the people and suppliers that go into pizza do, too. You <i>need</i> people to spend and lend to have liquidity and money flow.<p>> we find more gold every day, so there is an easing already happening naturally<p>That's not how that works. You're tying your <i>entire country's economic growth</i> to the production output of a <i>single</i> mining industry. Gold is not distributed evenly across the globe, either.<p>And yeah, we did all that in the past, and it caused deflation, which caused numerous financial panics [0], broke the British economy [1] and after two world wars, the US ended up with like 70% of the world's gold [2].<p>[0] <a href="https://www.federalreservehistory.org/essays/banking-panics-of-the-gilded-age" rel="nofollow">https://www.federalreservehistory.org/essays/banking-panics-...</a><p>[1] <a href="https://en.wikipedia.org/wiki/Financial_crisis_of_1914" rel="nofollow">https://en.wikipedia.org/wiki/Financial_crisis_of_1914</a><p>[2] <a href="https://www.imf.org/external/np/exr/center/mm/eng/mm_dr_01.htm" rel="nofollow">https://www.imf.org/external/np/exr/center/mm/eng/mm_dr_01.h...</a><p>--<p>TL;DR: Tying your entire country's economic growth to the production output of a single mining industry is stupid and we don't do it for very good reasons. Everything is a conspiracy if you don't know how anything works.</p>
]]></description><pubDate>Mon, 06 Apr 2026 22:38:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=47668288</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47668288</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47668288</guid></item><item><title><![CDATA[New comment by habinero in "Subscription bombing and how to mitigate it"]]></title><description><![CDATA[
<p>Ok, and a lot of -- maybe most -- people  won't have their mailto handler set up correctly. I don't even know if <i>I</i> do on my current laptop and I have email old enough to vote<p>Mailto links are not that common these days.</p>
]]></description><pubDate>Thu, 02 Apr 2026 13:58:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47614598</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47614598</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47614598</guid></item><item><title><![CDATA[New comment by habinero in "Subscription bombing and how to mitigate it"]]></title><description><![CDATA[
<p>Oh god. Tell me you've never dealt with those in real life without telling me lol<p>Usually the very best you can do IRL is "probably fine" or "maybe not fine" and that's just not good enough to justify blocking customers. Email is an old tech and there's a <i>lot</i> of variation in the wild.</p>
]]></description><pubDate>Thu, 02 Apr 2026 13:55:53 +0000</pubDate><link>https://news.ycombinator.com/item?id=47614553</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47614553</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47614553</guid></item><item><title><![CDATA[New comment by habinero in "Mercor says it was hit by cyberattack tied to compromise LiteLLM"]]></title><description><![CDATA[
<p>Those aren't the only options, my dude.</p>
]]></description><pubDate>Thu, 02 Apr 2026 09:55:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=47612220</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47612220</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47612220</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Literally every package manager already does this.</p>
]]></description><pubDate>Tue, 31 Mar 2026 21:22:28 +0000</pubDate><link>https://news.ycombinator.com/item?id=47593630</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47593630</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47593630</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Why is it baffling? It's like saying "why do we still have outages". Well, yes.</p>
]]></description><pubDate>Tue, 31 Mar 2026 21:21:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=47593623</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47593623</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47593623</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>The flip side of that is now you're running old software and CVEs get published all the time. Threat actors actively scan the internet looking for software that's vulnerable to new CVEs.</p>
]]></description><pubDate>Tue, 31 Mar 2026 21:16:33 +0000</pubDate><link>https://news.ycombinator.com/item?id=47593572</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47593572</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47593572</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Yup. As someone who's been on both the eng and security side, you cannot improve security by blocking the product bus. You're just going to get run over. Your job is to find ways of managing risk that work with the realities of software development.<p>And before anyone gets upset about that, every engineering discipline has these kind of risk tradeoffs. You can't build a bridge that'll last 5,000 years and costs half of our GDP, even though that's "safer". You build a bridge that balances usage, the environment, and good stewardship of taxpayer money.</p>
]]></description><pubDate>Tue, 31 Mar 2026 21:11:24 +0000</pubDate><link>https://news.ycombinator.com/item?id=47593518</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47593518</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47593518</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Like requests and pytest and ruff and so on, yes.<p>Rewriting the world to protect against a specific kind of threat is insane.</p>
]]></description><pubDate>Tue, 31 Mar 2026 20:58:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=47593397</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47593397</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47593397</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>A lot of libraries are maintained by a single person.</p>
]]></description><pubDate>Tue, 31 Mar 2026 17:07:10 +0000</pubDate><link>https://news.ycombinator.com/item?id=47590397</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47590397</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47590397</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>This is why Artifactory and similar exist and they do this better. You ~never want to vendor libraries.</p>
]]></description><pubDate>Tue, 31 Mar 2026 17:02:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=47590332</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47590332</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47590332</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>Ok? So you don't code in that language?<p>You still have multiple programming languages preinstalled on your OS, no matter which one it is.</p>
]]></description><pubDate>Tue, 31 Mar 2026 16:57:52 +0000</pubDate><link>https://news.ycombinator.com/item?id=47590262</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47590262</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47590262</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>> Smaller algorithms can be shared with gists and blog articles<p>You just invented a worse Stack Overflow.<p>Using libraries is good, actually.</p>
]]></description><pubDate>Tue, 31 Mar 2026 16:55:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=47590239</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47590239</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47590239</guid></item><item><title><![CDATA[New comment by habinero in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>> trusted input (game assets)<p>Gamedev is its own weird thing, and isn't a model you want to generalize to other industries. It has to optimize for things a lot of software does not, and that skews development.<p>Vendoring libraries is almost always a terrible idea because it immediately starts to bitrot and become a footgun.<p>Sometimes it's <i>necessary</i>, but it's not <i>desirable</i>, and you almost always just want to pin your dependencies instead.</p>
]]></description><pubDate>Tue, 31 Mar 2026 16:52:55 +0000</pubDate><link>https://news.ycombinator.com/item?id=47590199</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47590199</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47590199</guid></item><item><title><![CDATA[New comment by habinero in "Vulnerability research is cooked"]]></title><description><![CDATA[
<p>Testing exists.<p>> formal verification<p>Outside of limited specific circumstances, formal verification gives you nothing that tests don't give you, and it makes development slow and iteration a chore. People know about it, and it's not used for lot of reasons.</p>
]]></description><pubDate>Tue, 31 Mar 2026 00:36:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=47581425</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47581425</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47581425</guid></item><item><title><![CDATA[New comment by habinero in "I decompiled the White House's new app"]]></title><description><![CDATA[
<p>They have not. CDNs are specifically meant for demo/non-critical usage, to make it easy for amateurs to try out the library.<p>You don't do this in any non-trivial system.</p>
]]></description><pubDate>Sun, 29 Mar 2026 03:55:50 +0000</pubDate><link>https://news.ycombinator.com/item?id=47560274</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47560274</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47560274</guid></item><item><title><![CDATA[New comment by habinero in "Desk for people who work at home with a cat"]]></title><description><![CDATA[
<p>Mine take turns getting The Good Spots, so I wonder if they think it's their turn</p>
]]></description><pubDate>Sat, 28 Mar 2026 08:04:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=47552547</link><dc:creator>habinero</dc:creator><comments>https://news.ycombinator.com/item?id=47552547</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47552547</guid></item></channel></rss>