Hacker News: yunseo47

PyPI package with 1.1M monthly downloads hacked to push infostealer

yunseo47 — Tue, 28 Apr 2026 12:52:05 +0000

Article URL: https://www.bleepingcomputer.com/news/security/pypi-package-with-11m-monthly-downloads-hacked-to-push-infostealer/

Comments URL: https://news.ycombinator.com/item?id=47933863

Points: 4

# Comments: 0

Exposing Claude Code Fake YouTubers (No Hate) [video]

yunseo47 — Tue, 14 Apr 2026 16:57:41 +0000

Article URL: https://www.youtube.com/watch?v=eh2OUZVQWdk

Comments URL: https://news.ycombinator.com/item?id=47768183

Points: 1

# Comments: 0

New comment by yunseo47 in "Personal AI Agents Like OpenClaw Are a Security Nightmare"

yunseo47 — Fri, 13 Mar 2026 05:31:05 +0000

While it's now relatively well-known that downloading and executing arbitrary code is dangerous, many still fail to recognize the risk when it's wrapped in agent skills and Markdown. This context likely explains why companies like Cisco, 1Password, and Snyk emphasize the dangers of agent skills.

I entirely agree with what you said. As has been the case with all types of security vulnerabilities, this too requires the comprehensive application of principles such as least privilege, sandboxing, and defense in depth. Thank you for your insightful comment.

Personal AI Agents Like OpenClaw Are a Security Nightmare

yunseo47 — Thu, 12 Mar 2026 16:04:10 +0000

Article URL: https://blogs.cisco.com/ai/personal-ai-agents-like-openclaw-are-a-security-nightmare

Comments URL: https://news.ycombinator.com/item?id=47352859

Points: 4

# Comments: 1

New comment by yunseo47 in "I don't use LLMs for programming"

yunseo47 — Thu, 12 Mar 2026 10:53:25 +0000

The point I was trying to make is that whether you should use AI for coding depends on the scale and nature of the task. To continue the original analogy, even if it's not leisure, a bicycle is a practical choice for short-distance travel. Of course, a car doesn't perfectly replace a bicycle. But would that still be true for distances of tens or hundreds of kilometers? And this is just an analogy; if you don't like cars, an electric bike, a scooter, or something similar is fine.

New comment by yunseo47 in "I don't use LLMs for programming"

yunseo47 — Thu, 12 Mar 2026 10:42:37 +0000

Coding without AI will likely take on the nature of leisure activities like cycling, jogging, horseback riding, or swimming. The invention of cars, trains, and ships didn't eliminate them. It's clear the latter are overwhelmingly more efficient, while the former now remain in the realm of hobbies or exercise. I also deliberately avoid using AI for some small projects and code them myself, but I consider this purely a hobby now, not work.

As the original author pointed out, the advice to jog or ride a bike because driving all the time is bad for your health is sound, but the Red Flag Act has proven to be a foolish endeavor. I believe the same phenomenon will occur.

New comment by yunseo47 in "Making WebAssembly a first-class language on the Web"

yunseo47 — Thu, 12 Mar 2026 10:31:07 +0000

I agree with the direction, but it seems to miss the golden hour. This concept should have been on the roadmap at least several years ago. After all, in most use cases, execution speed is not the main issue with JavaScript.

I believe that the need for JavaScript glue code has significantly hindered the appeal and interest in WASM, as well as the resulting ecosystem growth.

New comment by yunseo47 in "Don't post generated/AI-edited comments. HN is for conversation between humans"

yunseo47 — Thu, 12 Mar 2026 09:47:09 +0000

I think a human-like piece with minor mistakes resonates more emotionally than a perfectly written piece that looks like it was written by AI. However, since there seems to be a grammar debate going on here, I'd like to add: Is it a bad thing for non-native speakers to use AI to correct grammar or awkward expressions? I think it definitely has positive aspects in terms of lowering language barriers.

New comment by yunseo47 in "Don't post generated/AI-edited comments. HN is for conversation between humans"

yunseo47 — Thu, 12 Mar 2026 09:41:16 +0000

Whether it’s code, general text, or university assignments, the core issue is taking responsibility for one's own work. While I share the concerns raised in this thread, I believe the focus on 'LLM usage' is a bit of a red herring. The fundamental principle of ownership hasn't changed with the advent of LLMs; the tool itself isn't the issue, but rather the abdication of responsibility by the author.

For instance, if a non-native speaker translates their own writing using machine translation or an AI, is that problematic—provided they personally review and vet the content before posting? I don't think the people calling out AI use on this board are taking issue with that. Ultimately, it’s not about the method; it’s about the author's attitude.

The reason LLMs are so disruptive now is that while "shitposts" used to be obvious, we're now seeing "plausible" low-effort content generated without any human oversight. Irresponsible people have always been around, but LLMs have given them the tools to scale that irresponsibility to an unprecedented level.