Live data from Hacker News

DrawAFish.com Postmortem

aldenhallak.com

31–40 of 113 posts

Re: DrawAFish.com Postmortem

#32
post #26
post #15

Earlier quoted context omitted.

…if you had RSS…

I was 15 years old when they killed google reader, so can you blame me for forgetting about RSS? Added :) https://aldenhallak.com/blog/rss.xml

Ha! Subscribed, and now the pressure is on to write something ;-)

Re: DrawAFish.com Postmortem

#35
post #3

Wild that some random used a security hole to try and counter the malicious actions actively lol

I remember reading about 5 or so years ago that the FBI was doing exactly this to counter the EternalBlue exploit (I might be getting the exploit name wrong)

Relevant link maybe: https://www.justice.gov/archives/opa/pr/justice-department-a...

Re: DrawAFish.com Postmortem

#36

I wish there some screenshots of the vandalism. Here in Zurich there's a mural of maybe twenty dinosaurs (not accurate but something that looks like it would be in a children's book). One day someone drew a dick on every single dinosaur. Even the flying pterodactyl had a big dick hanging off of him. It was so puerile and primitive it cracked everyone up that saw it. No tags. No football club graffiti. Just dicks ever…

There's a screen shot of a certain site in the footnotes of the blog and if you visit it, you can probably find some screenshots in the 30-something page thread about OP's game. Edit: yes, the site too terrible to name as evidenced by the reply to this comment becoming dead within minutes l-o-l

[dead]

Re: DrawAFish.com Postmortem

#37
post #10

On the allure of vide coding the author says, > It is really fun to just have high velocity, and it is really fun to not do code reviews and to just push stuff. Was slurfish fun? Looks like if you don't like doing deep and thorough code reviews, LLM-generated code is not for you. As the author concludes, "...LLMs are a tool. They let you generate a lot of code really fast...it is up to you to review it"

>Was slurfish fun?

It was for someone!

Re: DrawAFish.com Postmortem

#38

If you are the dev think you need to add an option to mirror the fish drawing. I can draw a fish facing left, but for some reason it's very difficult to draw one facing right.

Can't you just draw facing left and then flip it horizontally?

Sorry, that's what i meant, i think it needs an option to flip it horizontally on the page, not mirror it.

Re: DrawAFish.com Postmortem

#39
> I vibe coded...

Well, there ya go.

To be fair, it says the attention was unexpected, and this was just a coding exercise... And the port-mortem shows what I'd hope to see: digging in and figuring out root causes. So I'm not judging OP poorly over this.

But still. Launching a vibe-coded app that accepts input from anonymous users is just asking for trouble. I'm frankly surprised it ran as long as it did without such problems. (Although I did see a few weenies swimming around even before the problem hours.)

The lesson I'd pull from this is that if you are not the type of dev who could put together a post-mortem along these lines... don't launch a vibe-coded app.

Re: DrawAFish.com Postmortem

#40
post #21

You can also upvote any fish without auth, limit is 20 votes per minute per IP POST https://fishes-be-571679687712.northamerica-northeast1.run.a... {"fishId":"xxxx","vote":"up"}

That's actually intentional desgin - I think you can like a fish a little or like a fish a lot, and therefore should be able to upvote/downvote to your hearts content :)

The only potential risk I see with anonymous voting is some 4chaner is apt to create a bunch of fish with horrific names and use distributed IPs to upvote them to the top. I guess regular moderation could filter that out.
Post reply on HN