Viewing profile — bodash

Few days ago, UK cyber test almost merged malware through social engineering: https://news.ycombinator.com/item?id=49205790

Interesting. I’m also a night owl who struggled waking up like an early bird. Was the transition and efforts worth it? Recently I tried to find a better schedule other than spendin…

Guys I’m joking btw, left the comment during my jest mood

When you define prosperity in large amount of people, it makes you sound like a communist, and America spent decades to avoid that. The other alternative is to sound like a capital…

Stripe about to acquire OpenRouter for $10B, and Airtable is only ~1/10th of OpenRouter???

Similar to where we simply ask LLM to leave 20% of the work undone: humantodo.dev

“The oppressors left, but their systems remain”

> AI companies see people's images and data as raw material to be exploited What a quote

It’s not crazy. I always add a simple message to my prompts: “leave 20% solutions empty and I’ll implement them myself”. It work wonders for me.

Agreed, JSON is not the most optimal spec language choice, but is it better if different projects all started to writing their own specs? Related: https://www.openui.com/blog/stop-…

I’m completely on your side, but also I think about all the AI saturations in the society like this: “Driving to work or running a 10km on the weekend sharing the same surface goal…

Given the audience here, I think an adjacent analogy would be “if we were to understand tech today, do we always go back to the beginning of tech?” Then the answer is more clear as…

fyi npm 12 will have securer defaults https://github.blog/changelog/2026-06-09-upcoming-breaking-c... but it will be a while for ecosystem to catch up and npm reputation already da…

Agreed. If it's "digital", it will be used for elite power plays, because it's too easy. How else could you mass control/analyse/manipulate millions of people instantly? Digital, d…

My browser combo: Firefox Developer Edition + uBo + Privacy Badger + Facebook Containers One time setup, it’s synced to Mozilla account for later reinstalls

GitHub repo (800+ stars) on a list of tips for protecting against npm supply chain attacks: https://github.com/bodadotsh/npm-security-best-practices

This is a surprise. And they still haven't included corepack as an official instruction on the nodejs.org download page. Is corepack a failed experiment?

few more tips here: https://github.com/bodadotsh/npm-security-best-practices

Astro might be the closest option here. JSX can be used as a templating language for it, and devs can still opt-in for full clientful islands.

AstroNvim v6 just released after neovim 0.12, and it's my favourite out-of-box setup

Some great tips in this thread and I've been collecting them all at https://github.com/bodadotsh/npm-security-best-practices

Exactly! I’ve noticed a resounding amount of people are writing the same pieces recently, it’s almost like everyone’s sounding their alarm for the upcoming tsunami. Who’s listening…

Got a link?