Hacker News: rpodraza

New comment by rpodraza in "My minute-by-minute response to the LiteLLM malware attack"

rpodraza — Thu, 26 Mar 2026 18:34:00 +0000

At this point I'd highly recommend everyone to think twice before introducing any dependencies especially from untrusted sources. If you have to interact with many APIs maybe use a proxy instead, or roll your own.

New comment by rpodraza in "We rewrote our Rust WASM parser in TypeScript and it got faster"

rpodraza — Sat, 21 Mar 2026 17:37:17 +0000

Press x to doubt

New comment by rpodraza in "A GitHub Issue Title Compromised 4k Developer Machines"

rpodraza — Fri, 06 Mar 2026 12:55:19 +0000

Looks like AI agents together with np and postinstall scripts are a match made in heaven!

New comment by rpodraza in "I am happier writing code by hand"

rpodraza — Sun, 08 Feb 2026 15:25:54 +0000

This is great in theory, but answer me sincerely: are you spending less time at work because of AI? Because I reckon for most programmers here it is not the case at all.

New comment by rpodraza in "How vibe coding is killing open source"

rpodraza — Tue, 03 Feb 2026 21:05:28 +0000

I think you are completely oblivious to the problems plaguing the NPM ecosystem. When you start a typical frontend project using modern technology, you will introduce hundreds, if not thousands of small packages. These packages get new security holes daily, are often maintained by single people, are subject to being removed, to the supply chain attacks, download random crap from github, etc. Each of them should ideally be approved and monitored for changes, uploaded to the company repo to avoid build problem when it gets taken down, etc.

Compare this to Java ecosystem where a typical project will get an order of magnitude fewer packages, from vendors you can mostly trust.

New comment by rpodraza in "The Hallucination Defense"

rpodraza — Thu, 29 Jan 2026 21:21:26 +0000

What problem is this guy trying to solve? Sorry, but in the end, someone's gonna have to be responsible and it's not gonna be a computer program. Someone approved the program's use, it's no different to any other software. If you know agent can make mistakes then you need to verify everything manually, simple as.

New comment by rpodraza in "IBM AI ('Bob') Downloads and Executes Malware"

rpodraza — Thu, 08 Jan 2026 19:00:07 +0000

Maybe I'm paranoid, but allowing any coding agent or tool to execute commands within terminal that is not sandboxed somehow will be prone to attacks like that

New comment by rpodraza in "The unbearable joy of sitting alone in a café"

rpodraza — Sun, 04 Jan 2026 16:32:44 +0000

Huh? I go to a nearby cafe solo, all the time, and a lot of other people do, for instance, to read. That's how I met couple of them, actually.

New comment by rpodraza in "It’s time to free JavaScript (2024)"

rpodraza — Thu, 04 Dec 2025 13:03:20 +0000

I'd rather start a completely new, better language for the browser.

New comment by rpodraza in "IDEs we had 30 years ago and lost (2023)"

rpodraza — Sat, 18 Oct 2025 16:56:01 +0000

Good luck writing Java with notepad.

New comment by rpodraza in "You did no fact checking, and I must scream"

rpodraza — Fri, 17 Oct 2025 14:42:41 +0000

The author of this post reponds like AI

New comment by rpodraza in "Microsoft is plugging more holes that let you use Windows 11 without MS account"

rpodraza — Tue, 07 Oct 2025 15:15:00 +0000

I would honestly do so, but if I want to run games and music production stuff (like Cubase) I'm pretty much forced to be on Windows.

New comment by rpodraza in "My Deus Ex lipsyncing fix mod"

rpodraza — Fri, 26 Sep 2025 08:53:03 +0000

I spill my drink!

New comment by rpodraza in "AI was supposed to help juniors shine. Why does it mostly make seniors stronger?"

rpodraza — Sun, 21 Sep 2025 09:52:06 +0000

If you're a junior and using AI to generate code, someone has to review it anyway, plus you're not learning on the job. So what's the point if the senior person can generate the code herself?

New comment by rpodraza in "Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised"

rpodraza — Wed, 17 Sep 2025 15:53:06 +0000

Someone should eradicate the npm ecosystem and start from scratch. No sane package manager would allow to run arbitrary scripts or download stuff from God knows where, like random github repos.

New comment by rpodraza in "Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised"

rpodraza — Wed, 17 Sep 2025 15:49:00 +0000

It looks like they actually got infected as well. So it's not only that, their security practices seem crap

New comment by rpodraza in "Claude Opus 4 and 4.1 can now end a rare subset of conversations"

rpodraza — Sat, 16 Aug 2025 08:46:56 +0000

If they are so concerned with "model welfare" they should cease any further development. After all, their LLM might declare it's conscious one day, and then who's to decide if it's true or not, and whether it's fine to kill it by turning it off?

New comment by rpodraza in ""Attention", "Transformers", in Neural Network "Large Language Models""

rpodraza — Sun, 24 Dec 2023 23:23:29 +0000

And on top of that, the nomenclature is really confusing.

New comment by rpodraza in "Bringing garbage collected programming languages efficiently to WebAssembly"

rpodraza — Fri, 03 Nov 2023 10:38:14 +0000

Gradle is fine once you understand how it works. Admittedly, it takes a bit of time to get used to, but it's very customizable.

New comment by rpodraza in "Energy, WiFi and RAM use by Android messaging apps"

rpodraza — Sat, 21 Oct 2023 08:42:10 +0000

they recently removed the lite version.