Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Request Node lib used by 48k modules is now deprecated

github.com

Post reply on HN
Print view View original

81–90 of 135 posts

Re: Request Node lib used by 48k modules is now deprecated

#81

Post by no_protocol »

chrisseaton wrote: post #79
Izkata wrote: post #78

Earlier quoted context omitted.

...so that they can be used? Those numbers across the bottom are your bank's routing number and your account number. I'm honestly surprised I don't hear more about e-check theft done using those numbers.

> Those numbers across the bottom are your bank's routing number and your account number. Those aren't secrets, are they? Isn't your bank account protected by separate secrets and or physical authentication tokens? You can't just take money out at a bank by giving a bank account number, surely?

If someone knows your account number, they can take money from it, there is no separate secret or anything. It would be illegal, but they can do it.

Re: Request Node lib used by 48k modules is now deprecated

#82

Post by somehnguy »

chrisseaton wrote: post #79
Izkata wrote: post #78

Earlier quoted context omitted.

...so that they can be used? Those numbers across the bottom are your bank's routing number and your account number. I'm honestly surprised I don't hear more about e-check theft done using those numbers.

> Those numbers across the bottom are your bank's routing number and your account number. Those aren't secrets, are they? Isn't your bank account protected by separate secrets and or physical authentication tokens? You can't just take money out at a bank by giving a bank account number, surely?

Those numbers are not secrets. They're literally just the bank's routing number and your account number. Using those numbers anyone can withdraw/deposit into that account. Madness isn't it?

Re: Request Node lib used by 48k modules is now deprecated

#83

Post by rafaelvasco »

chrisseaton wrote: post #70
fapjacks wrote: post #68

Earlier quoted context omitted.

He no longer writes checks to people for bug-hunting and hasn't done so for years due to concerns about the proliferation of his banking information. He mails out certificates.

Why do checks have your banking secrets on them?

Check forging. Was a big problem years ago when checks were widely used; These days they're almost dead so; (See 'Catch me if you can' film if you didn't already!);

Re: Request Node lib used by 48k modules is now deprecated

#85

Post by marcosdumay »

Jare wrote: post #76
coolreader18 wrote: post #18

Earlier quoted context omitted.

There doesn't have to be something wrong with a solution to deprecate it, there just has to be a better alternative.

"Deprecated" to me means the author says you shouldn't use it, or with more nuance, that "you shouldn't start using it now, and you should switch out of it ASAP if you already are a user, because it will very possibly stop working within the lifetime of you own project". "A better alternative" is not enough of a reason to not use another alternative, because "better" is not an absolute value and choices tend to have…

Well, looks like your only difference is on that ASAP part.

Deprecated functions within a module will surely stop working in the near future, but deprecated modules probably won't. It's not great that we see the same warning for both, and we should not treat both the same.

Re: Request Node lib used by 48k modules is now deprecated

#86

Post by chrisseaton »

no_protocol wrote: post #81
chrisseaton wrote: post #79

Earlier quoted context omitted.

> Those numbers across the bottom are your bank's routing number and your account number. Those aren't secrets, are they? Isn't your bank account protected by separate secrets and or physical authentication tokens? You can't just take money out at a bank by giving a bank account number, surely?

If someone knows your account number, they can take money from it, there is no separate secret or anything. It would be illegal, but they can do it.

> If someone knows your account number, they can take money from it

You can seriously just say a bank account number at a bank in the US and walk away with a bag of cash from it, with no other security checks at all?

In the UK they’d make you enter a password or PIN or use 2FA.

Re: Request Node lib used by 48k modules is now deprecated

#87

Post by SahAssar »

dpedu wrote: post #16

> request will stop accepting new features. > request will stop considering breaking changes. > The committers that are still active will try to merge fixes in a timely fashion Sounds to me like the library is "done".

I'd agree if it wasn't for it having to remain compatible with future node releases. If it was (and I don't know if it is) part of the node.js testsuite then it seems like the ideal way to end active development on a library.

Re: Request Node lib used by 48k modules is now deprecated

#88

Post by pier25 »

rffn wrote: post #75
pier25 wrote: post #28

Earlier quoted context omitted.

> Everyone I see seems to use axios these days Axios was somewhat abandoned a year or so ago. A new collaborator was added in Dec 2019 which apparently is picking it up. https://github.com/axios/axios/issues/1965 Who knows for how long though...

What would be the alternative to Axios?

On the browser I generally use fetch(). It's a bit weird at first but it's easy to write a thin wrapper if the default behavior doesn't make sense. Eg: throwing when you receive a 400 or 500.

On Node I've been using this lately: https://github.com/node-fetch/node-fetch

Re: Request Node lib used by 48k modules is now deprecated

#89

Post by [deleted] »

rffn wrote: post #75
pier25 wrote: post #28

Earlier quoted context omitted.

> Everyone I see seems to use axios these days Axios was somewhat abandoned a year or so ago. A new collaborator was added in Dec 2019 which apparently is picking it up. https://github.com/axios/axios/issues/1965 Who knows for how long though...

What would be the alternative to Axios?

[deleted]

Re: Request Node lib used by 48k modules is now deprecated

#90

Post by loeg »

djsumdog wrote: post #27
dpedu wrote: post #16

> request will stop accepting new features. > request will stop considering breaking changes. > The committers that are still active will try to merge fixes in a timely fashion Sounds to me like the library is "done".

Yea, makes me think of how every news blog reported mp3 as "dead" when the patent expired, when they should have been saying mp3 is now license free.

I don't think anyone really uses mp3 for audio compression anymore, though. There's FLAC, mp4 (AAC), and free Vorbis (which claims to be competitive with both); and DVDs and whatnot are still using AC3, EAC3, and various other Dolby Digital audio formats. Given that landscape, I don't know why you'd pick mp3.
Post reply on HN