<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: pagecalm</title><link>https://news.ycombinator.com/user?id=pagecalm</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Sun, 26 Apr 2026 10:23:40 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=pagecalm" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by pagecalm in "Subscription bombing and how to mitigate it"]]></title><description><![CDATA[
<p>Honestly just don't send anything past the verification email until the address is confirmed. A lot of the other fixes here are working around what's really just auth libraries trusting the address on signup. Feels like that's the thing worth fixing first.</p>
]]></description><pubDate>Thu, 02 Apr 2026 15:45:26 +0000</pubDate><link>https://news.ycombinator.com/item?id=47616023</link><dc:creator>pagecalm</dc:creator><comments>https://news.ycombinator.com/item?id=47616023</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47616023</guid></item><item><title><![CDATA[New comment by pagecalm in "Any good 2026 April Fools Pranks"]]></title><description><![CDATA[
<p>FFmpeg is moving to rust!
<a href="https://x.com/FFmpeg/status/2039115531744334180?s=20" rel="nofollow">https://x.com/FFmpeg/status/2039115531744334180?s=20</a></p>
]]></description><pubDate>Wed, 01 Apr 2026 18:01:20 +0000</pubDate><link>https://news.ycombinator.com/item?id=47604291</link><dc:creator>pagecalm</dc:creator><comments>https://news.ycombinator.com/item?id=47604291</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47604291</guid></item><item><title><![CDATA[New comment by pagecalm in "Claude Code users hitting usage limits 'way faster than expected'"]]></title><description><![CDATA[
<p>Hit this myself recently, along with a bunch of overloaded errors. I think it's growing pains for where we are with AI right now.<p>As the tooling matures I think we'll see better support for mixing models — local and cloud, picking the right one for the task. Run the cheap stuff locally, use the expensive cloud models only when you actually need them. That would go a long way toward managing costs.<p>There's also the dependency risk people aren't talking about enough. These providers can change pricing whenever they want. A tool you've built your entire workflow around can become inaccessible overnight just because the economics shifted. It's the vendor lock-in problem all over again but with less predictability.</p>
]]></description><pubDate>Tue, 31 Mar 2026 18:27:32 +0000</pubDate><link>https://news.ycombinator.com/item?id=47591501</link><dc:creator>pagecalm</dc:creator><comments>https://news.ycombinator.com/item?id=47591501</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47591501</guid></item><item><title><![CDATA[New comment by pagecalm in "Axios compromised on NPM – Malicious versions drop remote access trojan"]]></title><description><![CDATA[
<p>This is the part that's tough — we push everyone to keep dependencies updated and automate it with Renovate or Dependabot, but that's exactly the pipeline that would have pulled this in before anyone noticed. Lockfiles and pinning help slow it down, but most teams pair those with automated update PRs which kind of negates the point. You can reduce your dependency surface area to lower the odds but one compromised maintainer on a top-10 package and none of that matters.</p>
]]></description><pubDate>Tue, 31 Mar 2026 18:16:39 +0000</pubDate><link>https://news.ycombinator.com/item?id=47591374</link><dc:creator>pagecalm</dc:creator><comments>https://news.ycombinator.com/item?id=47591374</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47591374</guid></item><item><title><![CDATA[New comment by pagecalm in "Slop is not necessarily the future"]]></title><description><![CDATA[
<p>Agreed on the economics side. Clean code saves you time and money whether a human or AI wrote it. That part doesn't change.<p>But I don't think the models are going to get there on their own. AI will generate a working mess all day long if you let it. The pressure to write good code has to come from the developer actually reviewing what comes out and pushing back. The incentive is there but it only matters if someone acts on it.</p>
]]></description><pubDate>Tue, 31 Mar 2026 18:06:07 +0000</pubDate><link>https://news.ycombinator.com/item?id=47591246</link><dc:creator>pagecalm</dc:creator><comments>https://news.ycombinator.com/item?id=47591246</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47591246</guid></item></channel></rss>