Hacker News: tomashertus

New comment by tomashertus in "Ask HN: What is the job market like?"

tomashertus — Thu, 18 Jun 2026 18:52:39 +0000

Just guessing, Czechia? The Central European software engineering market seems to be softening as well, likely due to second-order effects from the U.S. tech layoffs and decreased demand for remote roles from SV companies.

New comment by tomashertus in "Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot"

tomashertus — Sat, 06 Jun 2026 23:20:54 +0000

Move fast and break things.

New comment by tomashertus in "Claude Design"

tomashertus — Fri, 17 Apr 2026 17:31:32 +0000

Are they, though? My thinking is that their roadmap is heavily focused on the SDLC and solving problems related to software development, so their model will be optimized for that domain. That leaves room in the market for models that are specialized in other areas of expertise.

New comment by tomashertus in "We Left the Cloud (2023)"

tomashertus — Wed, 15 Apr 2026 22:12:19 +0000

These decisions always depend on the lifecycle of the product. I assume that at Basecamp’s level of maturity, where it has reached a certain saturation point and growth and usage are fairly predictable, it makes perfect sense to make a strategic decision like this and commit to a long-term bet.

Regardless, kudos to DHH and team for being so vocal about it, it's a great case study for product teams in similar lifecycle.

New comment by tomashertus in "Messenger.com is no longer available for messaging"

tomashertus — Tue, 17 Feb 2026 20:12:47 +0000

This is a bit of a puzzling "announcement". Does anyone have more details on what’s actually changing?

I don’t really use Facebook itself anymore, I’ve mostly kept Messenger for messaging. Curious whether this is an attempt to push users back toward the main feed experience.

Messenger.com is no longer available for messaging

tomashertus — Tue, 17 Feb 2026 20:10:24 +0000

Article URL: https://www.facebook.com/help/messenger-app/804132271957789

Comments URL: https://news.ycombinator.com/item?id=47052594

Points: 6

# Comments: 3

New comment by tomashertus in "Self hosting my media library with Jellyfin and Wireguard on Hetzner"

tomashertus — Tue, 06 Jan 2026 20:37:16 +0000

The article is surprisingly missing the most important part: a cost comparison. I understand and share the frustration with rising prices and ads creeping into paid plans, but for people who value optionality and broad access, streaming is still meaningfully cheaper than owning content.

In many cases, the price of a single movie is comparable to an entire month of a streaming service, which gives access to thousands of titles. Ownership can make sense if you repeatedly watch a small, fixed catalog over many years, but for most casual or exploratory viewing, the economics still favor streaming.

New comment by tomashertus in "[dead]"

tomashertus — Fri, 28 Nov 2025 20:50:33 +0000

Can we remove this? While this war is a horrible tragedy, I’m of that opinion that we should not discuss geopolitics on this site unless it’s directly impacting the core topics we are all here for.

Poland's president signs zero income tax law for parents with two children

tomashertus — Mon, 20 Oct 2025 18:37:34 +0000

Article URL: https://www.euronews.com/2025/10/16/polands-president-signs-off-on-new-zero-income-tax-law-for-parents-with-two-children

Comments URL: https://news.ycombinator.com/item?id=45647488

Points: 10

# Comments: 5

New comment by tomashertus in "Ask HN: What are you working on? (October 2025)"

tomashertus — Sun, 12 Oct 2025 22:30:08 +0000

Mind sharing a link? That sounds really interesting!

Using Markdown as a programming language when building with AI

tomashertus — Wed, 01 Oct 2025 16:55:47 +0000

Article URL: https://github.blog/ai-and-ml/generative-ai/spec-driven-development-using-markdown-as-a-programming-language-when-building-with-ai/

Comments URL: https://news.ycombinator.com/item?id=45440052

Points: 2

# Comments: 0

New comment by tomashertus in "Trump to Add New $100k Fee for H-1B Visas in Latest Crackdown"

tomashertus — Fri, 19 Sep 2025 19:11:26 +0000

It’s too soon to know, but this could make 3-year H-1B renewals hugely problematic. That would be a major blow to the program. I was fortunate to get mine in 2014 without a single problem. There’s no way I’d expect someone to get through this process today. And realistically, most companies aren’t going to pay such a large premium just for a typical software engineer.

Trump to impose new $100k fee for H-1B visas

tomashertus — Fri, 19 Sep 2025 19:08:49 +0000

Article URL: https://economictimes.indiatimes.com/markets/bonds/corporate-bonds-vs-government-bonds-finding-the-right-balance-for-indian-investors/articleshow/123501156.cms?from=mdr

Comments URL: https://news.ycombinator.com/item?id=45305239

Points: 9

# Comments: 1

Netskope Has Filed for an IPO

tomashertus — Fri, 22 Aug 2025 18:10:26 +0000

Article URL: https://www.sec.gov/Archives/edgar/data/2063196/000095017025110855/ck0002063196-20250822.htm

Comments URL: https://news.ycombinator.com/item?id=44987729

Points: 4

# Comments: 0

Palo Alto Networks closing on over $20B acquisition of CyberArk

tomashertus — Tue, 29 Jul 2025 20:26:00 +0000

Article URL: https://www.calcalistech.com/ctechnews/article/hksugkiwxe

Comments URL: https://news.ycombinator.com/item?id=44727871

Points: 13

# Comments: 3

New comment by tomashertus in "Malware-Laced GitHub Repos Found Masquerading as Developer Tools"

tomashertus — Fri, 20 Jun 2025 16:03:09 +0000

It’s ultimately a numbers game. The more malicious seeds are planted, the higher the likelihood that one of them will be pulled into a real-world build pipeline. Platforms like GitHub, NPM, and other open repositories are ideal staging grounds because very few engineering organizations are willing to block traffic from them. That makes them near-perfect hiding spots for malicious content.

And the asymmetry is stark: attackers only need to succeed once. It takes just a single developer installing a compromised package to trigger a breach with potentially massive downstream consequences. So while I agree that quantifying impact is critical, dismissing large-scale seeding campaigns because “no one might have downloaded it” ignores the risk.

New comment by tomashertus in "Malware-Laced GitHub Repos Found Masquerading as Developer Tools"

tomashertus — Fri, 20 Jun 2025 15:45:26 +0000

This is a surprisingly common issue. In my day-to-day work, we analyze millions to look for malware, and it’s well-known in the security community that attackers frequently leverage “trusted” websites to host and deliver malware as an evasion tactic.

The technique is so pervasive that I did an extensive research on it. In fact, there are several well-funded and widely used applications, some generating millions in revenue, that unknowingly host malware on their infrastructure. In more concerning cases, these platforms are even repurposed as command-and-control servers for data exfiltration. We're increasingly seeing enterprises take the proactive step of blocking traffic to these high-risk domains entirely to strengthen their security posture (e.g. it's completely common to block all traffic from network to Dropbox or other file hosting services).

New comment by tomashertus in "Next.js version 15.2.3 has been released to address a security vulnerability"

tomashertus — Tue, 01 Apr 2025 21:16:46 +0000

Time flies... Thanks for the correction, buddy.

New comment by tomashertus in "OpenAI closes $40B funding round, startup now valued at $300B"

tomashertus — Mon, 31 Mar 2025 23:22:47 +0000

But can you Ghibli? I guess NOT! /s

New comment by tomashertus in "Next.js version 15.2.3 has been released to address a security vulnerability"

tomashertus — Wed, 26 Mar 2025 21:12:30 +0000

For a decade, since the intro of NodeJS