I posted a job for freelance dev work and all replies were obviously ai generated. Some even included websites that were clearly made by other people as their 'prior work'. So I pulled the posting and probably won't post again.
Who knew. AI is costing jobs, not because it can do the jobs, but it has made hiring actual competent humans harder.
I'm starting to think these 'Github Apps' are a bad idea. Even if CodeRabbit didn't have this vulnerability, what guarantee do we have that they will always be good actors? That their internal security measures will ensure that none of their employees may do any malicious things?
Taking care of private user data in a typical SaaS is one thing, but here you have the keys to make targetted supply chain attacks that could really wreak havoc.
Oh my god. I haven't finished reading that yet, it became too much to comprehend. Too stressful to take in the scope. The part where he could have put malware into release files of 10s of thousands (or millions?) of open source tools/libraries/software. That could have been a worldwide catastrophe. And who knows what other similar vulnerabilities might still exist elsewhere.
Reading things like this, stories in this thread, and about how people are avoiding seeing the doctor because they're afraid of the bills ... makes me realize in some ways Thai people actually have a higher quality of life than many in US in this respect.
Costs are order of magnitude(s) lower. A night in the hospital is typically 5,000-10,000 baht or $166-$333. And the quality of care is at a good standard .. so much so that Thailand has become a Medical Tourism destination:
Thailand is a relatively poor country, but we are still able to do this. In the US, I guess some people would rather die than admit needing help from the government ... or trying to clamp down on healthcare costs cause it would be too much 'regulation'?
No, it does properly support both of those and I've been happily using those features in VS Code for a while now. It might actually be the best editor for JSX.
With all this writing about the 'quantum problem' and quantum mechanics not making sense, I don't understand why quantum theorists don't take pilot wave theory and the oil droplet experiments more seriously.
I actually prefer stronger typing and Typescript solves that for me for Javascript+Node.js
The bigger reason I see for sticking with Node.js for web development is being able to use Javascript for both server and client code.
Newer Javascript frameworks and templating libraries such as dust.js, Ractive.js, React.js can render both on server side and client side so on the initial requst the server can send a fully rendered page for SEO and performance, and then client side Javascript can dynamically update the page using the same code/templates.
Maybe try Typescript, it has optional typing and is compatible with normal Javascript. It really solves those problems you mention and will give you compile errors if you send parameters of the wrong type to functions.