News for hackers. Stuff that matters.
Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential... by smolder on Thursday October 22, 2026 @06:18AM (#50193456)
There are not that many dependencies in Rust if you know how to write it. That's just what vibe coders end up with. It's a great language which is overtaken by people with no idea what they're doing that heard it was a great language.
Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential... by yturijea on Friday October 23, 2026 @04:12AM (#50205871)
most modern linux toolings have 200-300 dependencies.. and some of these are before the whole AI thing, so not just vibe coders. The problem with rust is that is doesn't ship with any basic functionality, like crypto, or json encoding, or similar. So you end up having to depend a lot, because what should be part of the standard library simply isn't there. Hence my reference to golang which has all those. Of course rust has other benefits, but that one is a huge issue, for the same reason we see so many issues with js and python related to security attacks through pipeline.
Re:Compromised LiteLLM 1.107.0 on PyPI Installs a Credential... by smolder on Tuesday October 27, 2026 @04:55AM (#50256266)
Linux is complex and those dependencies were arrived at thoughtfully by people who understand the structure of code and the trade between being very isolated and leveraging what's out there. Vibe coders don't have any idea of the implications of what they produce more often than not.