Top all-time · #16383
Ivan Drinchev
Personal blog · drinchev.com/blog · on HN as drinchevwebprogramming
Ivan Drinchev's personal blog at drinchev.com covers web and programming. Since 2013, 4 different Hacker News readers have linked it 24 times, most often “Alert: NPM modules hijacked”. No feed was found, so read it on the site itself.
Too few sampled comments (1) to say how often HN recommends it.?
Why HN links it
Cited in a comment arguing that frivolous npm modules like left-pad hurt the ecosystem through security holes. The comment does not discuss the post's writing.
Summarised by Claude from a sample of 1 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
A web developer based in Berlin
Most-linked posts?
- Alert: NPM modules hijacked3 people · 5 mentions · first linked 2016-03-23
- Increase your dependencies2 people · 4 mentions · first linked 2016-03-19
What Hacker News says?
Completely agree. Combining this with isomorphic code, cross-browser development and micro-services. I even wrote a blog post couple of days ago about it [1]. 1 : http://www.drinchev.com/blog/increase-your-dependencies/
Comment linking /blog/increase-your-dependencies/
on “NPM and Left-Pad: Have We Forgotten How to Program?”Submitted Alert: NPM modules hijacked as a story · 238 points
HN discussionSadly there is a user @nj48, who already published empty modules and took the names [1]. Is this a joke or something coordinated with the community? [1] https://www.npmjs.com/~nj48 EDIT : The hijacked modules look suspicious. http://www.drinchev.com/blog/alert-npm-modules-hijacked/
Comment linking /blog/alert-npm-modules-hijacked/
on “I've Just Liberated My Modules”Submitted SSH and terminal background as a story · 4 points
HN discussion> The shell the tests ran in unknowingly had a DATABASE_URL environment variable set as our production database. It was an old terminal window in a tmux session that had been used for inspecting production data many days before. The developer returned to this window and executed the test suite with the DATABASE_URL still set. I was expecting something like this. I remember, I configured my terminal windows to change…
Comment linking /blog/ssh-and-terminal-background/
on “Post-Mortem and Security Advisory: Data Exposure After travis-ci.com Outage”Submitted Increase your dependencies as a story · 4 points
HN discussionThis reminds me about the whole `left-pad` fiasco and npm allowing same-name packages to be re-published. For a while I thought that the packages were hijacked [1]. GitHub should definitely not allow username reuse, but most prominently it's a Go issue, where they use GitHub as a package manager. 1 : http://www.drinchev.com/blog/alert-npm-modules-hijacked/
Comment linking /blog/alert-npm-modules-hijacked/
on “GitHub shouldn't allow username reuse”Submitted Germany, Freelancing and Taxes as a story · 3 points
HN discussionI'm a huge fan of 1 & 2, so I end up using CSS with only class names. This helped me deliver maintainable and reliable stylesheets that other devs like. Most importantly using only class names you will gain : 1. Your HTML / CSS is easier to maintain. 2. Is faster to develop. 3. Is faster to refactor. 4. Is more portable. 5. Is faster for the browser. I even wrote a blog post about it [1]. http://www.drinchev.com/blo…
Comment linking /blog/css-with-only-class-names/
on “CSS: The bad bits and how to avoid them”Submitted SSH and terminal background as a story · 3 points
HN discussionAs for "Why So Many Dropped Production Databases?", you can always configure ssh with a combination of LocalCommand or use tmux to change the background of the terminal, when you are on a production server. I did a blog post about it [1]. 1: http://www.drinchev.com/blog/ssh-and-terminal-background/
Comment linking /blog/ssh-and-terminal-background/
on “Times I've Messed Up as a Developer”Submitted Increase your dependencies as a story · 3 points
HN discussionI like mine :D [1] https://www.drinchev.com
Comment linking /
on “Ask HN: What are some examples of well-designed personal sites?”Submitted CSS with only class names as a story · 2 points
HN discussionTypical Berlin startups as of 2018 usually look for importing developers from other countries with relocation help. This, IMHO, is already the beginning of the salary increase, which is inevitable. Unfortunately the progressive taxation [1] is quite complicated and makes it impossible to increase your life-style with just a salary bump. I guess that's one of the reasons Berlin is still considered as temporary place…
Comment linking /blog/germany-freelancing-and-taxes/
on “'Google go home': the Berlin neighbourhood fighting off a tech giant”Submitted Let's scale that Gulpfile.js as a story · 2 points
HN discussionSEEKING WORK - Remote ( I'm Based in Berlin ) NodeJS, MongoDB, Socket.IO, SCSS+Compass, Foundation, CoffeeScript, BackboneJS, Grunt, Git, Responsive design, Photoshop, Deployment Full stack website development. Seeking part-time work. Portfolio : http://www.drinchev.com
Comment linking /
on “Ask HN: Freelancer? Seeking freelancer? (July 2013)”Submitted CSS with only class names as a story · 1 points
HN discussionSince you are using "git" & "Jekyll" I would say you are a technical person, so you should just do it. A couple of days scripting, designing and configuring I managed to have a decent blog [1], without paying a dollar. I'm using a combination of metalsmith, Amazon s3 & gulp. 1: http://www.drinchev.com/blog
Comment linking /blog
on “The Svbtle Promise”Submitted SSH and terminal background as a story · 1 points
HN discussionI learned a lot about how you can fail to become rich by working, after I did some digging into taxation in Germany [1]. The outcome is that you should not expect that working more will equal to becoming rich. 1 : http://www.drinchev.com/blog/germany-freelancing-and-taxes/
Comment linking /blog/germany-freelancing-and-taxes/
on “Ask HN: What is something surprising you learned about making money?”No idea why this list is on the first page of HN, but it looks like ( at least the 10 that I clicked around ) are very spammy, not at all popular, packages that I doubt have any use. Probably the attention to this article is the good old debate about npm and the huge dependencies that a package can have. Which is not always a bad thing. Actually I wrote an article [1] about it. 1 : http://www.drinchev.com/blog/incre…
Comment linking /blog/increase-your-dependencies/
on “NPM packages with most dependencies”I wrote a small paragraph about the warning [1] and how the new modules look like. [1] : http://www.drinchev.com/blog/alert-npm-modules-hijacked/
Comment linking /blog/alert-npm-modules-hijacked/
on “NPM user nj48 steals “liberated” module names”Having frivolous modules (ala left-pad) brings down the quality of the ecosystem as a whole. Even if you don't use them directly one of the modules you do include could include them, and they're pretty much only a source of security holes. NPM in particular could do with much more policing. Between module hijacking, typosquatting, and a lack of security audits of any sort, fewer packages on NPM is a good thing in my…
Comment linking /blog/alert-npm-modules-hijacked/
on “We have a tendency to police our code ecosystems and it's harmful”