Unlike the more common postinstall-hook supply-chain pattern, this campaign executes at module-load (import/require) time. When any consuming build or application imports a poisoned package, the injected block runs immediately. Because the trigger is an import rather than an install script, the common npm install –ignore-scripts mitigation does not neutralize it.

[–] [S] 7 points 4 months ago (2 children)

Headless does not mean “no screen anywhere.” It means you are not required to use the company’s app or site to finish the job.

You might say: “Book a flight and a hotel in Tokyo.” A helper (with hooks into services, e.g. MCP or other agent APIs) talks to airlines and hotels for you. You might never see their homepage or their “join our club” popup.

Whilst I can see where the author is going with this, I can't see some tasks, particularly booking concert tickets, being done by AI agents. Whilst it may be convenient for end users, it's also open to exploitation by scalpers.

  • source
  • [–] [S] 6 points 5 months ago (4 children)

    I think you're misconstruing the author's argument, at no point does the author imply that Claude knows best, or that Electron apps are better. Their closing argument is certainly not an endorsement for Electron or AI slop.

    Don’t get me wrong: writing this brings me no joy. I don’t think web is a solution either. I just remember good times when native did a better-than-average job, and we were all better for using it, and it saddens me that these times have passed.

    I just don’t think that kidding ourselves that the only problem with software is Electron and it all will be butterflies and unicorns once we rewrite Slack in SwiftUI is not productive. The real problem is a lack of care. And the slop; you can build it with any stack.

  • source
  • parent
  • context
  • [–] [S] 3 points 5 months ago (8 children)

    Imagine being such a slop-brainwashed fanboi

    Do you have any evidence for this? Looking through the post, and the author's other blog post titles, there is very little mention of AI or Claude.

    Instead of throwing labels at the author, it's much more worthwhile to discuss their key argument about the challenges of developing native apps.

  • source
  • parent
  • context
  • [–] [S] 4 points 5 months ago

    I wonder if we’ll end up in a situation of open source projects with closed source tests. Though I don’t know how that would work, because how would you contribute a new feature if the tests are closed? 🤔

  • source
  • view more: ‹ prev next ›