News for hackers. Stuff that matters.

altbdoor

Re:Gitbook Breached on Tuesday November 03, 2026 @01:07PM (#50355696)
Mentioned this 5h ago, but this post definitely fleshes out more details.

https://news.ycombinator.com/item?id=50351061

Re:I Am the Reason OpenAI Is Killing Unlimited Chats on Monday November 02, 2026 @06:12AM (#50335375)
> But if you get a Claude subscription, don't you have to use Claude Code?

Seems like the doors are (slightly?) open right now. OpenCode just announced that users can use their Claude subscription:

- https://x.com/opencode/status/2116198602523513081

- https://github.com/anomalyco/opencode/pull/58782#issuecommen...

Re:Backdoors in official Claude Code extensions on Friday October 30, 2026 @08:23AM (#50302948)
1. If only Cursor Marketplace version was compromised, how was it published in the first place?

2. If the Cursor Marketplace version was released from an "official Anthropic" account, whose to say OpenVSX and/or VSCode versions are not compromised?

The affected versions have been pulled down, so no one really knows. The way I see it, only Cursor has admitted to have been compromised.

Re:eMudhra to Exit Global SSL/TLS Certificate Business; on Thursday October 22, 2026 @09:31AM (#50195081)
> I take care of commits, push/pull, building wheels, and publishing wheels myself.

I too was surprised when I see my colleagues telling me that these actions are "not maximizing your efficiency".

They'd rather hand all controls to the LLM, and then be surprised when shit hits the fan.

I personally would have preferred if there is a proper disclaimer that the screenshot is an approximation of how the UI would be. Or alternatively, use a more distinct art style of conveying the UI (e.g. comical/sketch lines or whatnot).

Right now its only a vague statement of "will need to look something like this", which does not imply on the originality of the image. I myself am misled that the screenshot is a legit UI.

Haven't use it myself, but I've bookmarked https://basecoatui.com/ to try in future.
Re:Ask HN: Who is using MCP in production? on Thursday September 03, 2026 @08:56PM (#49559157)
Jira/Atlassian APIs are so convoluted anyways, I'd rather use the MCP
Re:Some more things about Django I've been enjoying on Sunday July 26, 2026 @03:20AM (#49055581)
Good ole Django. Worked with a number of frameworks (tm), but nothing really quite scratches my itch like Django does. I still find the ORM and database migration system unmatched.
Re:Cloudflare Drop on Wednesday July 08, 2026 @10:20PM (#48840173)

Show HN: Combine WigglyPaint GIFs into Video

https://altbdoor.github.io/wiggly-compose-gif/

Been trying out WigglyPaint[1] lately to flesh out my creative side. I started drawing a series of images, and wanted to combine them into a video to post into social media.The first iteration I did was manually mangling FFmpeg commands to loop GIFs over n seconds, before combining them into a video. After that I thought, I might as well make a web application to help make this...

( Read More... | no comments | 2 points | on HN )
Re:Does Anybody Actually Like React? on Tuesday May 26, 2026 @10:36PM (#48288828)
Just found the link to the project: https://github.com/WorldMaker/butterfloat

That's neat, will give it a spin in the future.

Re:Does Anybody Actually Like React? on Monday May 25, 2026 @10:38PM (#48274357)
Interesting to know. Personally I've also been trying out other library/frameworks, like Vue, AlpineJS, or just plain server side rendering.

I have heard a little about ClojureScript here and there. Will take a look at it when I am free!

Re:Does Anybody Actually Like React? on Monday May 25, 2026 @10:14PM (#48274187)
I know there will probably be some complications here and there, but this could be done with Web Components too, right?
Re:Does Anybody Actually Like React? on Monday May 25, 2026 @10:11PM (#48274170)
I read one post before that really resonates with me, couldn't recall from where though:

    You love JSX, you don't love React
Many of the jobs in my location requires React though, so I have to tolerate it somehow.
Friendly reminder that all (I sure hope it does all...) the Copilot kerfuffle can be disabled in `chat.disableAIFeatures` flag in the settings.
Working with multiple teams in a large project, hooks can be a nightmare to maintain.

I see 7x layers deep of hooks, with no test cases to support them. Some of the side effects are not properly tested, and mocks that abstract away the whole implementation means the test case only works for certain scenarios.

FWIW this scenario might be an outlier in large projects, considering how some developers prefer to "just wrap the hook in another hook, and not worry about its internals".

Re:Appsflyer SDK Hijacked on Tuesday March 10, 2026 @09:39PM (#47330905)
Their status page communicates whats going on

https://status.appsflyer.com/

And then start writing "hit pieces" to all the bot PR authors? /s
Re:Jeffgeerling.com has been Migrated to Hugo on Monday January 05, 2026 @09:21AM (#46499041)
In retrospect, Jekyll has been relatively stable recently. The last stable release was in January 2025, v4.4.1[1].

I've been using 4.3 to 4.4 without much issues, granted the sites I generate are simple.

[1]: https://jekyllrb.com/news/

> I think it's sending my message to the server continuously

It is, at least I see it for the first message when starting a new chat. If you open the network tools and type, you can see the text being sent to the servers on every character.

Source, from spending too much time analysing the network calls in ChatGPT to keep using mini models in a free account.

Re:Getting a Gemini API key is an exercise in frustration on Thursday December 11, 2025 @05:09AM (#46229572)
To Logan's credit though, his team made and drove a lot of good improvements in AI studio and Gemini in general since the early days.

I feel his team is really hitting a wall now in terms of improvements, because it involves Google teams/products outside of their control, or require deep collaboration.

Re:RCE Vulnerability in React and Next.js on Wednesday December 03, 2025 @07:15PM (#46142165)
It was one hell of a ride, but I would say the Angular team did one hell of a job too, supporting the glue code until v18 (not sure if the latest version still does).

Having both old and new Angular running in one project is super weird, but everything worked out in the end.

Re:AWS Multiple Services Down in us-east-1 on Monday October 20, 2025 @12:35PM (#45645837)
Had a meeting where developers were discussing the infrastructure for an application. A crucial part of the whole flow was completely dependant on an AWS service. I asked if it was a single point of failure. The whole room laughed, I rest my case.
Re:On Being Blocked from Contributing to Lodash on Monday October 06, 2025 @09:42PM (#45498524)
I guess it also didn't help that these kind of PRs are most commonly generated with AI.
Same thoughts. Company is currently migrating from tech A to tech B, and while AI gets us 70-80% of the way, due to the riskier nature of the business, we now spend way more time reviewing the code.

Older ยป