Then you’re waiting forever on vulnerability patches. Especially if there are layers, and each layer waits to update.

Larger standard libraries do a lot. It’s a lot harder to sneak vulnerabilities into the basic C# or Java or C++ libraries than it is to add a vulnerability to something one dude maintains in the javascript ecosystem.

And since javascript libraries tend to be so small and focused, it’s become standard practice for even other libraries to pull in as many of those as they want.

And it stacks. Your libraries pull in other libraries which can pull in their own libraries. I had a project recently where I had maybe a dozen direct dependencies and they ended up pulling in 1,311 total libraries, largely all maintained by different people.

In a more sane ecosystem like C#, all the basics like string manipulation, email, or logging have libraries provided by Microsoft that have oversight when they’re changed. There can be better, third-party libraries for these things (log4net is pretty great), but they have to compete with their reputation and value over the standard library, which tends to be a high bar. And libraries made on top of that system are generally pulling all those same, certified standard libraries. So you pull in 3 libraries and only one of those pulls in another third party single library. And you end up with 4 total third party libraries.

Javascript just doesn’t really have a certified standard library.

(This certified standard library doesn’t have to be proprietary. Microsoft has made C# open source, and Linus Torvalds with the Linux Kernel Organization holds ultimate responsibility for the Linux kernel.)

But ci/cd though

Ignorance, fear, or are you just following the kid’s trend of anti-ai, pushback against corporate desperation?

It’s not realistic to expect no AI assistance in coding in 2026.

It’s also not a stand-in for a human. There’s a huge field of gray where it’s unclear how much of it was fully vibe coded vs how much is carefully hand reviewed and/or written.

I’ve been a professional developer for decades and I’ve done both. Obviously I’ve hand coded stuff for many years. The fully vibe coded stuff is personal, to test and learn the capabilities of the tech. My professional stuff I watch much more closely, and I’m much more targeted in what I’m having the AI do.

That said, if I were gonna use this I’d actually review the code. I’m not recommending this guy’s stuff, but you can’t rule it out on the basis of ai assistance alone.

Called what? That you didn’t like their use of emojis?

What does that have to do with this? You didn’t call shit.

People were playing text-based multiplayer, effectively mmos with PvP well before Tim-Berners Lee invented the Web Browser.

http://mud.arctic.org/ this one is still around.

But why? You don’t need telnet to transfer text.

I’ll always be able to play Balatro, Factorio, and he’ll, I’d go to text based MUDs first.

Like a wireless router?

Can your neighborhood communicate when the Internet goes down like Iran?

You can just have things be out of scope. It’s really okay!

Thanks for the work you’ve put into this.

Which is just as risky as instantly updating unless you’re really closely keeping an eye on which updates are security related.

Thank you!

No, but it clearly wasn’t the solution. They likely could have used some of those people they fired for that.

pushing people towards specific ideas using social media

I’ve been incredibly concerned about this for more than a decade. Watching r/the_donald in action was incredible and validated all of that fear.

And it’s still happening. On all social media, including here.

Certain narratives are pushed hard, and it’s effective. Some of it is fully genuine. Some of it is/was seeded artificially and picked up some genuine steam, and is still being reinforced. The stuff that’s fully artificial seems to be dropped fairly quickly most of the time these days.

After the artificial narrative picks up and gets genuine sentiment mixed with it, it becomes hard to tell the difference. If you can mix it in with existing emotions, like anger that we’re in this situation, and add in some seeds of truth it works even better.

Propaganda works. On all of us. And just by being here, we’re being exposed. But I’m afraid to leave, too. The more real people leave the easier it is to manipulate the remainder.

It’s just all so easy and effective and actually happening. And the alarm bells about it aren’t loud enough.

start small … nextcloud

Vaultwarden is what you’re looking for.

Go to their GitHub and look at issues and their comments first.

Doesn’t xmpp require a constant connection?