Hacker News: tisc

New comment by tisc in "Axios compromised on NPM – Malicious versions drop remote access trojan"

tisc — Tue, 31 Mar 2026 08:47:27 +0000

It does not _need_ it, that’s the thing. It has become a custom to import a dependency for a lot of things. Especially for JavaScript.

New comment by tisc in "Replacing JavaScript with Just HTML"

tisc — Sun, 28 Dec 2025 07:47:09 +0000

Why would you build a switch instead of relying on the user’s system settings? The only reason I can imagine is that your dark/light mode is not usable/readable so it forces the user to switch

New comment by tisc in "Customizable HTML Select"

tisc — Thu, 20 Feb 2025 20:00:40 +0000

Imo it’s not html, it’s browser vendors. There’s a decent specification for the `autocomplete` attribute: https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes...

New comment by tisc in "OpenAI says it has evidence DeepSeek used its model to train competitor"

tisc — Thu, 30 Jan 2025 07:36:57 +0000

Maybe they use AI to monitor traffic, but it is still learning :)

New comment by tisc in "Dependency management fatigue, or why I ditched React for Go+HTMX+Templ"

tisc — Wed, 04 Dec 2024 12:10:15 +0000

Because everytime I perform NPM operations I'm slapped in the face with `This version is no longer supported.`.

New comment by tisc in "Dependency management fatigue, or why I ditched React for Go+HTMX+Templ"

tisc — Tue, 03 Dec 2024 16:56:52 +0000

Eslint version 9 has been causing some headaches, as it broke all existing plugins.

New comment by tisc in "Everyone has JavaScript, right?"

tisc — Sun, 21 Apr 2024 10:47:47 +0000

> Have they switched of JavaScript? Because people still do.

As an experiment I tend to disable JavaScript periodically. It is amazing how fast and responsive applications become. The amount of cruft that is downloaded is insane! Typically my experiments end after a month or so, because a lot of website don’t work _at all_ with JavaScript disabled.

New comment by tisc in "Serverless Horrors"

tisc — Wed, 28 Feb 2024 07:12:22 +0000

Costing money is one thing, but not throttling a queue consuming serverless function and effectively DDOSsing yourself is the true horror story working with serverless :)

New comment by tisc in "Tailwind CSS marketing and misinformation engine"

tisc — Mon, 19 Feb 2024 06:36:11 +0000

I am curious what you - and with you more proponents of Tailwind in this thread - mean with “component” and “component framework”? I’m also Zen-garden age and with my very limited React experience this does sound like you are meaning a component framework like React, correct?

If so; what would be the motivation for using JavaScript to style a button? Call me old - my coworkers do -, but that feels counterintuitive.

Please note that I haven’t really formed an opinion on Tailwind yet. This is an honest question.

New comment by tisc in "ChatGPT does Advent of Code 2023"

tisc — Mon, 15 Jan 2024 11:17:47 +0000

What strikes me about ChatGPT is the blatantly wrong answers it can give. I asked ChatGPT to solve a augmented matrix using gaussian elimination, and it failed in this straightforward task spectacularly.

New comment by tisc in "Google Introduces Passkey Authentication"

tisc — Fri, 05 May 2023 06:01:21 +0000

> […] and is an issue with OAUTH

This issue is not caused by OAuth, but by offering authentication via a third party. If you allow visitors to authenticate via a third party, you implicitly trust that third party. If that third party decides to revoke your account, then the logical consequence is that you can no longer authenticate. There’s no solution for this problem imo, other than not allowing authentication via a third party.

It is the same as airlines; They want you to identify using a passport. If your country decides to revoke your passport, you cannot check-in. That’s not an issue, but a logical consequence of choices made.

New comment by tisc in "Incidents caused by unappreciated OSS maintainers or underfunded OSS projects"

tisc — Sat, 29 Oct 2022 15:48:25 +0000

I have been wondering about this, whether this is not simply a shift of the problem? Let’s assume we get into a world where we pay for open source. Who would we pay? The maintainer I guess. What about the contributors? When the maintainer(s) receive financial rewarding for the code, will contributors receive a part of this as well? And how would that be divided?

New comment by tisc in "I still love PHP and JavaScript"

tisc — Wed, 03 Aug 2022 08:07:10 +0000

I've used Python, C#, Java, JavaScript and PHP, and in my experience Python is the most unpredictable of these languages. Just to name a few: - mutable default arguments - late binding closures - typings that are purely documentation instead of being enforced

Labeling these things as "gotchas" doesn't make them predictable imo.

New comment by tisc in "When hiring developers, have the candidate read existing code"

tisc — Sat, 16 Apr 2022 06:30:04 +0000

I like to combine those:

    const RESEND_DELAY_MS = ONE_HOUR_IN_MS;

Having the unit in the name saved me more than once and having non-contextual constants for sizes increases readability imo.