Hacker Newsnew | past | comments | ask | show | jobs | submit | dkdbejwi383's commentslogin

There is no language that makes it impossible to have any kind of bug ever. The safety languages like Rust offer is around memory, not bad configuration or faulty business logic.

If they have a HTTP API using standard authentication methods it's not that difficult to create a simple wrapper. Granted a bit more work if you want to do things like input/output validation too, but there's a trade-off between ownership there and avoiding these kinds of supply-chain attacks.

> Granted a bit more work if you want to do things like input/output validation too,

A bit? A proper input validator is a lot of work.


If you aim for 100% coverage of the API you're integrating with, sure. But for most applications you're going to only be touching a small surface area, so you can validate paths you know you'll hit. Most of the time you probably don't need 100% parity, you need Just Enough for your use-case.

That's an excellent way to get bitten.

I'm not sure how you mean.

To my understanding, there's less surface area for problems if I have a wrapper over the one or two endpoints some API provides, which I've written and maintain myself, over importing some library that wraps all 100 endpoints the API provides, but which is too large for me to fully audit.


Node itself is still fine and you can do a lot these days without needing tons of library. No need for axios when we have fetch, there's a built-in test runner and assertion library.

There are some things that kind of suck (working with time - will be fixed by the Temporal API eventually), but you can get a lot done without needing lots of dependencies.


Do you remember the days of “mongodb is web-scale”? It’s that but “spiral is ai-scale”


So it will be irrelevant after a few years?


Mongo is still very relevant

For better or worse


maybe just a few months, AI scale is much faster than web scale of course


If you click the “learn more” link it explains it.


You have to click and hold

> Just long press any link

It says right there on the page.


It said before you click, that's why. I missed that part.


I used to work for Suncorp (~10 years ago) in Brisbane square, pretty sure they are no longer using the building and it’s now a super company.

I’ve not watched Bluey (don't have kids of my own or niblings the right age), but am looking forward to when the time comes, so I can point out places I know.

Like many here, I grew up in Brisbane but moved elsewhere for opportunities etc. Given the cost of everything there these days I doubt I’ll make a permanent move back, but I do get nostalgic seeing the locations and the little details represented so well.


With cursor at least it recognises linter errors and failing tests and attempts to correct its own problems, with varying levels of success


socialism is when you have to provide ID to download porn


> I'm generally against the environmental movements

why is that, may I ask? Always interested to learn about alternative viewpoints.


Often it's either overblown or outright wrong and just used by wealthy people to manipulate the public. I think protecting the environment is very important but most political environmental movements are doing something else.


Yeah fair enough, there is a lot of bullshit greenwashing and attempts to blame the public for corporations use of plastic, burning fuel, etc.

Green movements can sometimes be their own worst enemy too, letting perfect be the enemy of good and blocking small improvements because they don’t go far enough.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: