altbdoor
altbdoor on Hacker News
1. If only Cursor Marketplace version was compromised, how was it published in the first place?
2. If the Cursor Marketplace version was released from an "official Anthropic" account, whose to say OpenVSX and/or VSCode versions are not compromised?
The affected versions have been pulled down, so no one really knows. The way I see it, only Cursor has admitted to have been compromised.
> I take care of commits, push/pull, building wheels, and publishing wheels myself.
I too was surprised when I see my colleagues telling me that these actions are "not maximizing your efficiency".
They'd rather hand all controls to the LLM, and then be surprised when shit hits the fan.
I personally would have preferred if there is a proper disclaimer that the screenshot is an approximation of how the UI would be. Or alternatively, use a more distinct art style of conveying the UI (e.g. comical/sketch lines or whatnot).
Right now its only a vague statement of "will need to look something like this", which does not imply on the originality of the image. I myself am misled that the screenshot is a legit UI.
Jira/Atlassian APIs are so convoluted anyways, I'd rather use the MCP
Good ole Django. Worked with a number of frameworks (tm), but nothing really quite scratches my itch like Django does. I still find the ORM and database migration system unmatched.
Posted by
altbdoor on Monday June 01, 2026 @01:49AM
from the show-hn dept.
https://altbdoor.github.io/wiggly-compose-gif/
Been trying out WigglyPaint[1] lately to flesh out my creative side. I started drawing a series of images, and wanted to combine them into a video to post into social media.The first iteration I did was manually mangling FFmpeg commands to loop GIFs over n seconds, before combining them into a video. After that I thought, I might as well make a web application to help make this...
Interesting to know. Personally I've also been trying out other library/frameworks, like Vue, AlpineJS, or just plain server side rendering.
I have heard a little about ClojureScript here and there. Will take a look at it when I am free!
I know there will probably be some complications here and there, but this could be done with Web Components too, right?
I read one post before that really resonates with me, couldn't recall from where though:
You love JSX, you don't love React
Many of the jobs in my location requires React though, so I have to tolerate it somehow.
Friendly reminder that all (I sure hope it does all...) the Copilot kerfuffle can be disabled in `chat.disableAIFeatures` flag in the settings.
Posted by
altbdoor on Friday April 10, 2026 @03:45AM
from the vercel.com dept.
Working with multiple teams in a large project, hooks can be a nightmare to maintain.
I see 7x layers deep of hooks, with no test cases to support them. Some of the side effects are not properly tested, and mocks that abstract away the whole implementation means the test case only works for certain scenarios.
FWIW this scenario might be an outlier in large projects, considering how some developers prefer to "just wrap the hook in another hook, and not worry about its internals".
And then start writing "hit pieces" to all the bot PR authors? /s
In retrospect, Jekyll has been relatively stable recently. The last stable release was in January 2025, v4.4.1[1].
I've been using 4.3 to 4.4 without much issues, granted the sites I generate are simple.
[1]: https://jekyllrb.com/news/
> I think it's sending my message to the server continuously
It is, at least I see it for the first message when starting a new chat. If you open the network tools and type, you can see the text being sent to the servers on every character.
Source, from spending too much time analysing the network calls in ChatGPT to keep using mini models in a free account.
To Logan's credit though, his team made and drove a lot of good improvements in AI studio and Gemini in general since the early days.
I feel his team is really hitting a wall now in terms of improvements, because it involves Google teams/products outside of their control, or require deep collaboration.
It was one hell of a ride, but I would say the Angular team did one hell of a job too, supporting the glue code until v18 (not sure if the latest version still does).
Having both old and new Angular running in one project is super weird, but everything worked out in the end.
Had a meeting where developers were discussing the infrastructure for an application. A crucial part of the whole flow was completely dependant on an AWS service. I asked if it was a single point of failure. The whole room laughed, I rest my case.
I guess it also didn't help that these kind of PRs are most commonly generated with AI.
Same thoughts. Company is currently migrating from tech A to tech B, and while AI gets us 70-80% of the way, due to the riskier nature of the business, we now spend way more time reviewing the code.