News for hackers. Stuff that matters.

dfreire

Looks great!
Very useful, thanks
Absolutely. If you ever did a npm install on a project using one of the affected axios versions, your entire system may be compromised.

> The malicious versions inject a new dependency, [email protected], which is never imported anywhere in the axios source code. Its sole purpose is to execute a postinstall script that acts as a cross platform remote access trojan (RAT) dropper, targeting macOS, Windows, and Linux. The dropper contacts a live command and control server and delivers platform specific second stage payloads. After execution, the malware deletes itself and replaces its own package.json with a clean version to evade forensic detection.

I strongly recommend you read the entire article.

Re:Nothing: Simply Do Nothing on Saturday September 21, 2024 @05:56AM (#41608839)
And… you’re doing something.
Re:How to Think in Writing on Tuesday July 09, 2024 @03:58AM (#40913588)
Thank you. This is very different from my own experience and I find it fascinating.

My thoughts are mostly verbal. I do hear an inner voice all the time. I cannot easily catch the moment before words start to form. This excessive wordiness often leads me to a negative experience, it’s relatively easy to fall down on a spiral, worrying to much, going over and over about all the things that can go wrong. I just wish I had the ability to stop. I’m looking into meditation because of this.

Re:How to Think in Writing on Monday July 08, 2024 @07:01PM (#40910698)
What a great comment.

Can you expand on why do you strive to be non-verbal?

Re:Astro DB on Tuesday March 12, 2024 @02:11PM (#39682841)
So what's the added value over Turso + Drizzle?
Re:How I hacked chess.com with a rookie exploit on Saturday January 27, 2024 @08:48AM (#39155510)
I understood it as when it was his turn to play, his piece moved without him moving it
I see what you did here :)
Re:Is TypeScript actually worth It? on Friday January 13, 2023 @06:59AM (#34366623)
I don’t want to sound harsh, but saying Javascript is a simpler version of Java just tells me you have never used Java seriously.

It’s like saying Korean is a simpler version of Spanish.

Yes, Java and Javascript are both programming languages, but they don’t even share the same paradigm.

You might be confusing the motivation that led to the creation of Javascript with the actual implementation.

Having said that, I have used Java professionally for more than 7 years, then I switched to mainly Javascript, and later to Typescript, and I’m never going back. I agree with your overall point.

Re:No, React Native is not the future on Sunday January 01, 2023 @01:05PM (#34208860)
Same
Re:The Full Chess Cheating Report of Hans Neiman on Wednesday October 05, 2022 @09:02AM (#33095008)
I've not gone through it myself, but believing someone's investigation on Twitter, it does narrow it down to one person.
Re:How to Learn Stuff Quickly on Tuesday July 20, 2021 @06:04AM (#27891834)
CodeCrafters looks great, I'm looking forward to use it.
Re:You Don’t Need Permission on Thursday June 10, 2021 @02:30AM (#27457509)
Wow, is the rest of the book as good as this?
Re:No Cookie for You on Thursday December 17, 2020 @01:22PM (#25458485)
1GB how? I see 112MB in the App Store...
You're absolutely right, and this is huge...
Re:Carlsen–Karjakin World Championship on Thursday December 01, 2016 @05:26AM (#13078471)
If anyone was disrespectful in that occasion, it was Magnus. He refused to talk in the flash interview, went immediately to the press conference, and had to wait 90 seconds or so before deciding to leave because Karjakin was still in the flash interview Magnus had refused.
Don't try to do everything at once.
Re:Ask HN: Freelancer? Seeking freelancer? (March 2015) on Sunday March 08, 2015 @01:19PM (#9166259)
SEEKING FREELANCER

I'm looking for programmers interested in working in part time.

If you are interested, please contact me by filling the form at: https://docs.google.com/forms/d/1RPmLS9IqQPrwEGOTLT_AZBGmBij...

Your experience and particular skills will not be decisive (although we will be working with javascript, nodejs and go), there will be a mentoring period and probably a test project before doing any real work, but I do value attention to detail, intelligence, ability to learn, and ability to get things done.

In the beginning, I want to start slowly but steadily, pair programming sessions of about one hour each day, almost every day.

If you want to get ahead of the pack, send me a description of your background, motivation, expectations (financial or other), and samples of your work (links, screenshots, code samples, etc.)

A guided tour of a project they did, looking at code samples.
Re:Dart: Web Fragmentation vs. Web Development Fragmentation on Tuesday January 29, 2013 @06:26AM (#5133396)
Exactly. It is not acceptable to buy into a large Javascript framework, but it is acceptable to buy into a whole different language? I fail to see the validity of this argument...

So what if one needs to use a Javascript library? Does one wait for the community to implement the wrapper around it? Does one implement the wrapper oneself?

Typescript on the other hand, seems to be more in line with the author's purposes, with one additional - and imo crucial - benefit: Javascript is valid Typescript (i.e. no need to change existing code, or wrap around libraries).

Re:Getting Things Done For Hackers on Sunday April 08, 2012 @06:25PM (#3815098)
Would you care to elaborate on this a bit? In your example the daily outcome is:

Help people communicate more quickly -> Launch beta of FaceSpace -> Call Jason for programmer recommendations

But the actual outcome (task) for that day would be "Call Jason for programmer recommendations", right? I mean the "Launch beta of FaceSpace" seems more of a long term or strategic goal, and the "Help people communicate more quickly" more of a purpose, or like they say nowadays, a mantra.

So if you repeat this every day, isn't this overwhelming?

And there are a lot of intermediate steps between the "Call Jason" and the "Launch website", so how do you keep track of these?

Finally, how do you see this as a substitute for GTD? (Since GTD is a practical approach to keep track of everyday's bits of todos, that appear from everywhere.)

Re:Kendo UI - a framework for modern HTML UI on Monday September 12, 2011 @04:57PM (#2988877)
... and SmartClient.

Older »