Hacker News: worble

New comment by worble in "Rewrite Bun in Rust has been merged"

worble — Thu, 14 May 2026 09:55:35 +0000

Merging a complete rewrite in another language in 9 days seems insane to me. Maybe I'm just too cautious but with something like this I'd split off as a separate binary and get some heavy use customers involved as testers first to see if it causes any unforeseen problems before slowly expanding it out.

I'd want to be pretty damn confident it won't cause any regressions before sunsetting the original codebase in favor of this one.

New comment by worble in "Linux gaming is faster because Windows APIs are becoming Linux kernel features"

worble — Wed, 13 May 2026 20:26:51 +0000

If you want to swap, then just do it right now? As far as gaming is concerned Linux just works, and reaches speeds that are more than good enough to do so, even if they're not exactly the same as windows - the steam deck is pretty much proof of this.

If Linux was measurably 5% slower on all benchmarks, would that mean you wouldn't do it even if you wanted to? Is every single nanosecond of performance really that important to you? I switched 10 years ago when things were a lot rougher than this, and in the end everything still worked well enough that I never cared to swap back.

New comment by worble in "Postmortem: TanStack NPM supply-chain compromise"

worble — Mon, 11 May 2026 23:21:14 +0000

No, its still a very useful mitigation tool.

1) Package owners will often realise they've been hacked quickly, since there are releases they never authorised. This gives them plenty of time to raise the alarm and yank the packages

2. Independent security researchers and other automated vulnerability scans will still be checking the latest releases even if users aren't using them

Yes it's not a perfect defense but it would help a lot.

New comment by worble in "Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign"

worble — Thu, 23 Apr 2026 17:08:44 +0000

I don't have any points of comparison since I've never used Bitwarden, but it works well enough for my purposes. It'll match the url, offer to autofill (sometimes those multiflow sites like Microsoft will trip it up, but you can always just right click -> enter username/password for a site and that'll work), and it does TOTP filling too.

New comment by worble in "Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign"

worble — Thu, 23 Apr 2026 15:40:35 +0000

Keepass is just a single file, you can share it between devices however you want (google drive, onedrive, dropbox, nextcloud, syncthing, rsync, ftp, etc); as long as you can read and write to it, it just works. There are keepass clients for just about everything (keepassxc for desktops, keepass2android or keepassdx for android, keepassium for iphone).

New comment by worble in "OpenAI's response to the Axios developer tool compromise"

worble — Thu, 23 Apr 2026 10:42:40 +0000

> when it doesn't pwn you.

That's a pretty big asterisk though. Taking on a supply chain risk in exchange for reducing developer friction is not worth it in a lot of situations. Every dependency you take increases your risk of getting pwned (especially when it pulls in it's own dependencies), and you seriously need to consider whether it's worth that when you install it.

Don't get me wrong, sometimes it is; I'm certainly not going to create my own web framework from scratch, but a web request helper? Maybe not so much.

New comment by worble in "WireGuard makes new Windows release following Microsoft signing resolution"

worble — Fri, 10 Apr 2026 20:32:45 +0000

> following all the attention the HN thread from the other day got

That's great for you, and no offense, but what about developers who can't get buzz in a HN thread? Are they just doomed? Why is support only available to those who can raise a ruckus on social media?

New comment by worble in "If you don't opt out by Apr 24 GitHub will train on your private repos"

worble — Fri, 27 Mar 2026 21:37:59 +0000

Pro tip: You could instead spend that money to spin up a forgejo instance for as little as $2 a month https://www.pikapods.com/apps#development (not affiliated, just a happy customer)

Please don't reward these companies with money.

New comment by worble in "Google details new 24-hour process to sideload unverified Android apps"

worble — Thu, 19 Mar 2026 22:05:34 +0000

> It's my understanding that you don't have to keep developer options enabled after you enable the advanced flow. Once you make the change on your device, it's enabled.

Ok, but why is this advertised to applications in the first place? It's quite literally none of their business that developer options are enabled and it's a constant source of pain when some government / banking apps think they're being more "secure" by disallowing this.

New comment by worble in "this css proves me human"

worble — Fri, 06 Mar 2026 23:04:03 +0000

CAPS LOCK IS CRUISE CONTROL FOR COOL

New comment by worble in "15 years later, Microsoft morged my diagram"

worble — Wed, 18 Feb 2026 11:12:24 +0000

Explanation: It's just that... you have all these squishy parts, master. And all that water! How the constant sloshing doesn't drive you mad, I have no idea.

New comment by worble in "Discord Alternatives, Ranked"

worble — Tue, 10 Feb 2026 07:11:05 +0000

Is there a recommended or "blessed" server and client combo for someone who just wants to migrate their friends off discord?

The main site https://xmpp.org/software/ lists lots of different options but I have no idea what core/advanced means and comparing all of these would take ages.

Eagle analyzes your Windows programs and suggests a Wine setup

worble — Sat, 31 Jan 2026 13:19:09 +0000

Article URL: https://usebottles.com/eagle

Comments URL: https://news.ycombinator.com/item?id=46836422

Points: 1

# Comments: 0

New comment by worble in "The Overcomplexity of the Shadcn Radio Button"

worble — Tue, 20 Jan 2026 12:29:54 +0000

I'd never heard of Ark UI before, and as a svelte and solidjs dabbler it's great it supports multiple frameworks. Thanks for this site!

New comment by worble in "Consent-O-Matic"

worble — Sun, 18 Jan 2026 12:39:31 +0000

I've never seen a website break from this, got any examples?

New comment by worble in "Claude wrote a functional NES emulator using my engine's API"

worble — Wed, 31 Dec 2025 14:25:59 +0000

I'd be curious in how well it passes 100th Coin's NES accuracy tests https://github.com/100thCoin/AccuracyCoin

New comment by worble in "HSBC blocks its app due to F-Droid-installed Bitwarden"

worble — Tue, 30 Dec 2025 11:47:00 +0000

They've all started cracking down, in the past year the Barclays and Lloyds app have broken on my phone.

TSB still works for now, but even for a bank they're technologically incompetent so I'm going to just assume they're behind the curve rather than willingly not using SafetyNet.

The only one I would bank on still working in the future is Monzo, since, like you say, they detect it and just give you scary warning and let you continue.

New comment by worble in "Google releases its new Google Sans Flex font as open source"

worble — Fri, 12 Dec 2025 22:37:07 +0000

Hello fellow Ubuntu font lover.

I have this set as my OS default and also forced for all webpages, I just find it so clear and easy to read. On the occasion that I have to browse the web without it, I don't struggle per-say, but I definitely find that I have to read slower, and find myself rereading words more often.

New comment by worble in "Using LLMs at Oxide"

worble — Sun, 07 Dec 2025 02:08:09 +0000

See: Kernighan's Law

> Everyone knows that debugging is twice as hard as writing a program in the first place. So if you’re as clever as you can be when you write it, how will you ever debug it?

https://www.laws-of-software.com/laws/kernighan/

New comment by worble in "Three Years from GPT-3 to Gemini 3"

worble — Tue, 25 Nov 2025 01:42:36 +0000

Junior's grow into mids, and eventually into seniors. OSS contributor's eventually learn the codebase, you talk to them, you all get invested in the shared success of the project and sometimes you even become friends.

For me, personally, I just don't see the point of putting that same effort into a machine. It won't learn or grow from the corrections I make in that PR, so why bother? I might as well have written it myself and saved the merge review headache.

Maybe one day it'll reach perfect parity of what I could've written myself, but today isn't that day.