allseteslla

There is no I in AI

Senior Vibe Coder

[allseteslla @allseteslla]

@vanilagy @Doctorthe113 First. I genuinely hate it whenever a library fails when it could silently fallback to working.

[allseteslla @allseteslla]

@FrancescoCiull4 they are paying for the horded gpu

[allseteslla @allseteslla]

@nexxeln @amanvarshney01 @ni5arga is this subjected to dna testing?

[allseteslla @allseteslla]

@rauchg AI slop, my guess is you fired all the human designers, look at your logo.

[allseteslla @allseteslla]

@jarredsumner you are being challenged
by @YoavCodes

blocked me for calling out his shenanigan's
of riding the bun hate wave

electrobun is riskier to use, from an author that acts on a whim and cancel a project like this

he had his 15 min of fame

https://t.co/kjmjpDwnUJ

[allseteslla @allseteslla]

@YoavCodes @nikolas_beckel I dare you to decouple bun already. less talking more doing.

all it will do is motivate bun to make their own electrobun.

last project that messed with bun got refactored out.
and no one even remember zip anymore.

[allseteslla @allseteslla]

@YoavCodes @jarredsumner I think bun people always read the code, there are thousands of PR that never get merged because no one got the time to review

also the code is open source millions of people can review it
The question is do real people still want to review code.

open source exists for a reason

[allseteslla @allseteslla]

@xhfloz I have been using this for :ever too

[allseteslla @allseteslla]

@jarredsumner I hear if you add 2FA to each unsafe calls
you can make bun safer.

[allseteslla @allseteslla]

@AndaristRake @boshen_c I am not saying don't trust github
we have to trust them a little, npm a little
the security scanners a little,
the people that audit a little,
and the package manager a little

with isolating and distributed trust
the overall trust level is greater than it sum

[allseteslla @allseteslla]

@AndaristRake @boshen_c the question is can you trust github
read the recent news

[allseteslla @allseteslla]

@DanielLockyer @boshen_c that is why we also need mandatory delay for publishing

[allseteslla @allseteslla]

@boshen_c if one to compromise your ci env and publish a bad package, the human approval process becomes
the 2FA of the publishing.

for this to work, I think both consumers and package providers should have a delay. manual approval is good, but even that can be compromised.

[allseteslla @allseteslla]

@boshen_c it is called friction based continuous delivery

it does not prevent supply chain attack but
it introduce a delay at the source, instead of only the consumer side(package managers)

giving time for security scans and audit a chance to detect or review unintended publishing

[allseteslla @allseteslla]

@ipwanciu JSON.stringify is at least 2 times faster.

for the same use case of JSON.stringify
use JSON.stringify over structuredClone

[allseteslla @allseteslla]

@rough__sea stop calling it JavaScript
and just call it JS

JS is not even Java or a script of java

one or two letters names for programming languages works fine
C, C#, GO

case closed.

[allseteslla @allseteslla]

@p_millerd I think I am stuck with them

[allseteslla @allseteslla]

@p_millerd I tried to cancel my subscription too

[allseteslla @allseteslla]

@grafana guys I think the attacker also made your repository public

I am sorry you got your open source project leaked like that

and I hope you recover fast from this.

https://t.co/VHzAwMMnVc

[allseteslla @allseteslla]

@mil000 I cancelled my netflix subscription and when I got back a year later, all my movies and tv shows are not deleted, sometimes some movies are gone but the majority stay.

we talking petabytes of movies

riverside needs to learn a lesson from netflix