Lightnews — Scholar-powered news

Reposted by Andrey Sitnik

Socket @socket.dev · 8h

North Korea’s “Contagious Interview” campaign continues to weaponize npm: 338 malicious packages, 50K+ downloads. Leveraging typosquats, loader tweaks, and new aliases, it targets #crypto devs and job seekers via recruiter lures.

Full Report →
socket.dev/blog/north-k... #NodeJS

North Korea’s Contagious Interview Campaign Escalates: 338 M...

The Socket Threat Research Team is tracking weekly intrusions into the npm registry that follow a repeatable adversarial playbook used by North Korean...

socket.dev

3 5 7

Reposted by Andrey Sitnik

firefoxdevtools.bsky.social @firefoxdevtools.bsky.social · 1d

As an experiment, we (the Firefox team) wanted to try a new way to get feedback on which Interop proposals matter most.

So, here's a web app where you can rank the proposals you care about, giving us data we can use when reviewing which ones to champion.

interop-rank.jakearchibald.com

Interop Feature Ranking

Rank the web platform features you care most about

interop-rank.jakearchibald.com

14 99 200

Andrey Sitnik @en.sitnik.ru · 17h

If you, like me, are worried about surveillance, get involved in hacker, local-first, and decentralization communities.

A good system is built by a community, not by a single dictator.

2 5

Andrey Sitnik @en.sitnik.ru · 17h

It’s frustrating that the real issue of surveillance is now being used for political propaganda.

Durov talks about the problems of the EU and the Democrats, but stays silent about similar laws and projects from Republicans (HB 1181, IODA).

And he talks about “saving forefathers traditions”.

1 3

Reposted by Andrey Sitnik

San Francisco Ruby Conference, Nov 19-21 @sfruby.com · 2d

This November in San Francisco... 💎❤️
Grab your tickets before October 20 at sfruby.com
youtu.be/m2P9PZwi8W4

The San Francisco Ruby Conference: join in at sfruby.com

YouTube video by Evil Martians

youtu.be

2 13 21

Andrey Sitnik @en.sitnik.ru · 2d

Astro is amazing, and we are using it of course.

Our new frontend developer wrote a post about his experience.

Evil Martians @evilmartians.com · 2d

Your snappy statically generated @astro.build site deserves a search that likewise feels instant. Here’s how to get build-time indexing and client-side search that’s fuzzy, performant, and accessible. evilmartians.com/chronicles/h...

How to add fast, client-side search to Astro static sites—Martian Chronicles, Evil Martians’ team blog

Join me on a breathtaking journey as we add a client-side search to an SSG docs-first site, built with Astro!

evilmartians.com

5

Andrey Sitnik @en.sitnik.ru · 2d

Starlink satellite “train” from orbit by Don Pettit

4 8

Andrey Sitnik @en.sitnik.ru · 3d

BTW, @evilmartians.com (where I am working for 15 years) helped in creating create Bolt 2 release

www.youtube.com/watch?v=UDGC...

Bolt.new V2 Is Here: The Future of Building

YouTube video by Bolt․new

www.youtube.com

1 8

Andrey Sitnik @en.sitnik.ru · 4d

3. “Stories” used to be my little reward after completing lessons.

Now they’re generated by an LLM, and it feels like I’m reading pure neuro-slop.

A beloved feature turned into torture.

1

Andrey Sitnik @en.sitnik.ru · 4d

2. The Max subscription has its own design.

But since it was added hastily and carelessly, it just broke the UI.

You get this bad feeling that you’re paying extra just to be a beta tester and that no one’s thinking about you.

1 1

Andrey Sitnik @en.sitnik.ru · 4d

1. The live call with Lily could’ve been a great feature, but they messed up the network code (vibe-coding?) and the call wouldn’t end, so the lesson didn’t count.

A cool feature for investors, but with MVP-level code that only makes real users angry.

1 3

Andrey Sitnik @en.sitnik.ru · 4d

Duolingo is a great example of how not to integrate LLMs into a business.

I’ve got a 1300-day streak in @duolingoverde.bsky.social and it’s exactly because of the LLM that I no longer want to pay.

LLMs are an amazing technology. But in the rush to please investors, you can kill your product.

1 5

Reposted by Andrey Sitnik

Vlad :: gwer @webholt.bsky.social · 5d

Next month will mark a year since I bought a huge (seriously, you wouldn’t believe how heavy) ThinkPad, after a decade of MacBooks I had grown tired of. Still don’t regret.

2 3

Andrey Sitnik @en.sitnik.ru · 4d

The porn industry is currently facing a significant shortage of male performers, which is a direct result of poor working conditions and low pay for men

metro.co.uk/2025/09/28/a...

1

Reposted by Andrey Sitnik

#sitnikfriday @friday.sitnik.ru · 4d

t.me/tesi_f

3 15

Andrey Sitnik @en.sitnik.ru · 5d

KCD2 is true role-play game, you really feel immersed in the era.

And the romantic storylines are done so well. They feel natural, reveal the characters, and sometimes reflect the culture of the time.

But they’re all kind of sad.

Clara’s storyline especially hit me hard.

Reposted by Andrey Sitnik

Proton @proton.me · 6d

Avoiding US tech? Some European alts:

🇳🇴 Browser: Vivaldi
🇫🇷 Search: Qwant
🇫🇷 Music: Deezer
🇫🇷 Hosting: OVH
🇫🇮 Mobile OS: Jolla
🇩🇪 Maps: Here WeGo
🇩🇪 Translation: DeepL
🇳🇱 Design: Sketch
🇨🇭 Notes: Standard Notes
🇨🇭 Messenger: Threema
🇨🇭 Dev Tools: Sonar

https://proton.me/blog/european-tech-alternatives

European alternatives to US tech | Proton | Proton

Take back control of your digital life with privacy-focused European alternatives to US Big Tech apps and services.

proton.me

26 140 360

Reposted by Andrey Sitnik

Signal @signal.org · 7d

We are alarmed by reports that Germany is on the verge of a catastrophic about-face, reversing its longstanding and principled opposition to the EU’s Chat Control proposal which, if passed, could spell the end of the right to privacy in Europe. signal.org/blog/pdfs/ge...

signal.org

42 2.4K 3.9K

Reposted by Andrey Sitnik

Abinash @implabinash.bsky.social · 7d

When I say @zed.dev is fast, it's fast.

Trust me. It is fast.

#Zed #SoftwareDevelopment

1 3 7

Reposted by Andrey Sitnik

Ell Huang 🖤🤍💜 @nocturnalxlight.bsky.social · 8d

I want to make it very clear when I advocate for asexual rep I am in no way calling for censorship, homophobia, transphobia, queer erasure, purity culture, or hatred of sex. I believe in sex education, marriage equality, bodily autonomy, and other human rights—and asexuality is part of that.

4 27 91

Reposted by Andrey Sitnik

Electronic Frontier Foundation @eff.org · 6d

The EU is once again trying to push a dangerous legislative proposal that undermines encrypted communication and obliterates our rights to private conversations. www.eff.org/deeplinks/2...

Chat Control Is Back on the Menu in the EU. It Still Must Be Stopped

The European Union Council is once again debating its controversial message scanning proposal, aka “Chat Control,” that would lead to the scanning of private conversations of billions of people. Chat

www.eff.org

1 88 160

Andrey Sitnik @en.sitnik.ru · 6d

Just finished Kingdom Come: Deliverance 2: it is really a solid candidate for best game of the year.

The best storytelling. Even in side quests you will always find interesting story, twist or good example of how people live at that time.

1 4

Reposted by Andrey Sitnik

#sitnikfriday @friday.sitnik.ru · 6d

Victoria Pale

1 4 20

Reposted by Andrey Sitnik

Evil Martians @evilmartians.com · 9d

Use Vite & TypeScript to build a true API-first repository command center. Get a dedicated contract-first documentation workflow, keep contracts the single source of truth, cut bottlenecks & give your team a fast, reliable way from design→implementation. evilmartians.com/chronicles/c...

Contract shock therapy: the way to API-first documentation bliss—Martian Chronicles, Evil Martians’ team blog

Learn how to build a dedicated API documentation repository that becomes your team's single source of truth, enabling true contract-first development.

evilmartians.com

2 1

Andrey Sitnik @en.sitnik.ru · 9d

You may found special Size Limit tool useful for this checking of JS library bundle footprint

github.com/ai/size-limit/

GitHub - ai/size-limit: Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit.

Calculate the real cost to run your JS app or lib to keep good performance. Show error in pull request if the cost exceeds the limit. - ai/size-limit

github.com

1