Clojurians Log v2
Clojure programming
Channels
Apps
off-topic 2026-03-31
dpsutton 2026-03-31T04:50:38.897019Z
https://x.com/feross/status/2038807290422370479?s=20 axios exploit. npm package has since been pulled. but > The latest axios@1.14.1 now pulls in plain-crypto-js@4.2.1, a package that did not exist before today. This is a live compromise.
đ 1
đ 3
seancorfield 2026-03-31T14:56:26.428719Z
For once I'm glad that our JS codebase has a lot of outdated dependencies (unlike our Clojure codebase)!
đ
1
https://notes.zachmanson.com/copilot-edited-an-ad-into-my-pr/
đĻ
2
đŠ 1
đ 3
đ¤ 2
âšī¸ 2
Yeah that makes me want to throw up a little
seancorfield 2026-03-31T14:53:23.059159Z
The backlash has been loud and swift: GitHub has since removed "tips" (as they called ads) from AI PRs.
mloughlin 2026-03-31T16:01:07.637959Z
I imagine that "feature" will be on the back burner until our collective standards have been sufficiently lowered in ~18 months time
đ 1
â 1
seancorfield 2026-03-31T16:13:32.687149Z
wonders if Kalshi or Polymarket have open bets on that? đ¤
seancorfield 2026-03-31T16:13:41.935759Z
(that's a joke BTW)
Turboquant is supposed to reduce model sizes 6X in memory. I don't see openAI surviving when things start shifting local.
henrik 2026-04-01T13:29:49.042689Z
Standard Microsoft, nothing new. My gaming PC is pleading with me to switch to SteamOS