@stack_wild
Account based inUnited States
About this account
- Account based in
- United States
- Connected via
- Web
Account-level information from X, not a live location or the device used for a specific post.
i used to code
west virginia
Joined July 2021
- Tweets560
- Following5.8K
- Followers5.8K
- Likes1.6K
Software engineers don't even read the AI generated code anymore. They just look at you like this.
StackWild 🐟 retweeted
Fork your dependencies, trim them to only your use case, never update unless it breaks for your users. I’ve been vocal about this for 10+ years. I’ve always said that updating is way riskier than latent bugs (which can be tracked and CVEs monitored).
If you are updating a dependency, it’s on you to analyze every single commit in the full transitive set of dependencies. If you dont see anything compelling, dont update!
I remember at HashiCorp once in awhile an engineer would try to update a dep or replace a DIY lib with an external one and id always ask “show me the commit we need.” Dont update for the sake of it.
Feeling pretty swell about this mentality with all the supply chain attacks happening.
StackWild 🐟 retweeted
‼️🚨 BREAKING: A new npm supply-chain attack uses a dead-man's switch. The payload plants a watcher on your machine that nukes your home directory the second you revoke the GitHub token it stole from you.
The compromise happened today, across 42 official tanstack npm packages, 84 malicious versions in total. tanstack/react-router alone pulls more than 12 million weekly downloads.
The attacker forked TanStack's repository and pushed a single hidden commit. From there, they tricked TanStack's own release system into signing the malicious packages as if they were the real thing. To npm, and to anyone checking the cryptographic proof of origin (SLSA provenance), the poisoned versions looked 100% legitimate.
Maintainer Tanner Linsley confirmed the whole team had 2FA enabled. It didn't matter. This is the first documented npm worm in history that ships with a valid, signed certificate of authenticity, the same one defenders rely on to know a package wasn't tampered with.
StackWild 🐟 retweeted
oops did it again
updating napkin math benchmarks, it's been too long
github.com/sirupsen/napkin-m…
using c4-standard-48-lssd now as a representative machine (turbopuffer sponsored)
previously a dinky 6 core 2019 VM
StackWild 🐟 retweeted
There are 4 types of people saying "AI will replace Software Engineering" in 6 months
1. they own a company that benefits from replacing engineers (ceo, stockholders etc). they need to justify the amount invested into them
2. Company that made big cuts and they want to attribute it to whatever and AI is good excuse
3. People who never worked as as/with Software Engineering and have no clue the work is not just typing
4. Burned out engineers who don't want to do that job anymore
StackWild 🐟 retweeted
AI is NOT replacing cybersecurity jobs. Full stop.
I'm so tired of people parroting "AI will replace reverse engineers" and "malware analysis is solved". No. It is not.
I have analyzed hundreds of malware samples using AI. Here's what actually happens:
-> It gives you made-up decryption keys with full confidence
-> It tries to decrypt data that is literally random garbage
-> It misidentifies malware families
-> It misses critical functions
And have you ever tried retrohunting with the YARA rules AI writes across thousands of samples? Go ahead. Watch the false positives roll in. That alone should tell you everything you need to know.
Every single output needs human validation and rigorous review.
AI is a tool, a powerful one. But someone still has to build the MCPs, validate the output, understand the context, catch the hallucinations, and make the actual calls during incident response.
The people saying this stuff loudest have clearly never watched AI confidently hand them completely wrong decrypted data and make them believe it's real.
Stop scaring newcomers out of the field and misleading people with this nonsense. Cybersecurity still needs humans.
I can't believe someone would just steal from Anthropic like this. The millions of man-hours Anthropic spent hand-writing code, text, art, books, etc. to generate enough data for training must be taken into consideration here. Where is the respect for IP?
StackWild 🐟 retweeted
Nobody wants "recommendations" in the search results.
We want search results relevant to the search terms we enter.
YouTube search has been beyond broken for years now. I use DuckDuckGo to search YouTube, that's how bad it is lol
Your activity on YouTube & Google can influence your search results, recommendations on the Home page, in-app notifications, & suggested videos. You can manage your homepage recommendation by selecting "Not interested" to remove the video in your feed or "Don't recommend channel" so vids from a specific channel don't show in your recommendations. We get that this can be frustrating, but you can view this resource for more info: goo.gle/3OCRRU8
StackWild 🐟 retweeted
I'll be honest.
tRPC changed how I think about APIs more than any
course, book, or YouTube tutorial ever did.
The moment you stop writing fetch('/api/user') and
start calling user.get() like it's just... a function?
Your brain rewires. Permanently.
If you're still REST-maxxing on a full-stack TypeScript
project in 2026, I genuinely feel for you.
@trpcio has no business being this clean.
StackWild 🐟 retweeted
I hate that Microsoft might be vibecoding Windows, but it's inevitable
microsoft laid off everyone who knows how c++ works so now they just prompt gpt 5 to fix the codebase. 30% of windows is written by ai. that is why your printer drivers were deleted to make room for 4gb of copilot telemetry
they rewrote office in typescript. file explorer and the notification center are now just bloated electron instances that take 3 seconds to render a right click menu
the taskbar and start menu were rebuilt from scratch in react just to shove ads and "recommended" bloatware in your face. it uses more ram than world of warcraft did in 2004
copilot is being forced into notepad and paint. they are forcing you to test it in your basic tools
windows search isn't looking for your files. it's a bing wrapper designed to sell you a microsoft 365 subscription while you're desperately trying to find a local pdf
the widgets section is another bloat that nobody asked for. edge webview was designed to keep your cpu usage high enough that you're forced to switch to linux
over all of that, the task manager barely works in the latest updates
nobody at microsoft knows what "win32" means anymore. they replaced their support forums with an ai that just tells you to "try restarting" if your kernel panics
For that matter, Microsoft Word 2002 used about 25MB of RAM. Now Word uses 10x that much memory to display the same 584kb document. What the heck is it doing to that text now that it wasn't doing before?
ALT Screenshot of Microsoft Word displaying some DirectSound documentation from 1996. In front of it is Windows Task Manager, showing that Word is using 240.6MB of memory.
StackWild 🐟 retweeted
It's mind-blowing that the entire AI revolution is being driven by a single 10-line algorithm.
StackWild 🐟 retweeted
🔹 Day 165 of
Solved LeetCode #2942: Find Words Containing Character 🔍📝
Used Java to iterate efficiently and return indices of matching words.
Simple but great for string manipulation practice!
#Java #LeetCode #Coding #StringProcessing #200DaysOfCode #ProblemSolving
StackWild 🐟 retweeted
Those that ordered the correct thing, but, failed to use it properly are, in my opinion, worthy of some study (-;
ALT "Too much Pain" ... "Causes too much pain and agony, dont know why its so popular now a days, im just going to use toilet paper", reads the captioned review by Christine Campbell who gave two whole stars on 2017-08-28 for the "Verified Purchase" of a toilet-bowl scrubber. Featured in the image is the offending toilet-bowl scrubber, its holder, tastefully displayed on dark-rouge tiles.
StackWild 🐟 retweeted
LLMs are generating code faster than ever—so where do you safely run it?
@heroku's answer: one-off dynos powered by #MCPs. Run AI-generated code in Node, Python, Go, and more—with just one command.
Watch the full convo with @julian_duque on the Modern Web Podcast 👇
StackWild 🐟 retweeted
🧠 Day 161 of #200DaysOfCode
Solved LeetCode #73: Set Matrix Zeroes using Java!
Efficiently updated rows & columns in-place without extra space by smart flag usage! 💡
#Java #LeetCode #Matrix #InPlaceUpdate #ProblemSolving #100DaysOfCode #CodingJourney