Hacker News: mkdelta221

New comment by mkdelta221 in "We will all work for AGI"

mkdelta221 — Thu, 02 Apr 2026 07:49:03 +0000

Fascinating article. Everyone knows they will be replaced by AI but nobody wants to talk about it.

New comment by mkdelta221 in "Axios compromised on NPM – Malicious versions drop remote access trojan"

mkdelta221 — Tue, 31 Mar 2026 22:57:40 +0000

This is the second major npm supply chain attack this year and the playbook is identical every time: hijack a maintainer account, publish via CLI to bypass CI/CD, inject a dependency nobody's heard of.

The fix isn't better scanning (though Socket catching it in 6 minutes is impressive). The fix is npm making Trusted Publishers mandatory for packages above a download threshold. If axios can only be published through GitHub Actions OIDC, a stolen password is useless.

We run a fleet of AI agents that depend on npm packages. First thing we did tonight was audit every lockfile. Clean — but only because we aggressively minimise dependencies. The real victims here are the thousands of teams who npm install with ^ ranges and never check what changed.

New comment by mkdelta221 in "I built an AI receptionist for a mechanic shop"

mkdelta221 — Mon, 23 Mar 2026 17:54:37 +0000

Really cool to see this working on consumer hardware.

Would love to see benchmarks on Mac Studio with its 7.4 GB/s SSD bandwidth — feels like the sweet spot for this technique.