21
submitted 1 month ago* (last edited 1 month ago) by ueiqkkwhuwjw@lemmy.world to c/selfhosted@lemmy.world

According to the release:

Adds experimental PostgreSQL support

The code was written by Cursor and Claude

14,997 added lines of code, and 10,202 lines removed

reviewed and heavily tested over 2-3 weeks

This makes me uneasy, especially as ntfy is an internet facing service. I am now looking for alternatives.

Am I overreacting or do you all share the same concern?

(page 2) 50 comments
sorted by: hot top controversial new old
[-] moonshadow@slrpnk.net 1 points 1 month ago

Oh goddamn it, I'm using this and don't have an alternative lined up

load more comments (7 replies)
[-] henfredemars@infosec.pub 1 points 1 month ago* (last edited 1 month ago)

Definitely share your initial concern. Without strong review processes to ensure that every line of code follows the intent of the human developer, there’s no way of knowing what exactly is in there and the implications for the human users. And I’m not just talking about bugs.

They say it’s reviewed, but the temptation to blindly trust is there. In this case, developer appears to have taken some care.

The code was written by Cursor and Claude, but reviewed and heavily tested over 2-3 weeks by me. I created comparison documents, went through all queries multiple times and reviewed the logic over and over again. I also did load tests and manual regression tests, which took lots of evenings.

Let us hope so. Handle with care to ensure responsibility is not offloaded to a machine instead of a person.

[-] Slotos@feddit.nl 1 points 1 month ago

The size of that changeset means that it’s inherently unreviewable.

The commit history is something I’ve seen only in the PRs that even the most dysfunctional companies would demand a rewrite for.

Also, 2-3 weeks review? PostgreSQL support could be added in that time without the need for a damn „vibe check”. Hell, it would probably take less time than that.

[-] MirrorGiraffe@piefed.social 1 points 1 month ago

To be fair they would have needed to spend time testing the manual implementation as well.

The problem I see mainly is that even if this rolls out perfectly, the erratic and changing nature if llms still make it pointless as a proof of concept. Next time Claude might fuck up in a fringe way that's not covered by unit tests and is missed by manual tests. 

On the other hand I guess I've been guilty myself on numerous occasions to implement fringe bugs into production code, but at least I learn from it.

load more comments (1 replies)
[-] irotsoma@piefed.blahaj.zone 1 points 1 month ago

Yeah, it could easily have added a couple of lines of code that sends everything to Northern Korean hackers because it found that in a bunch of repositories or just logging passwords to public logs or other things an experienced developer would never do. "AI" only replicates what it sees most often and as more spam and junk repos are added to its training data because "AI" companies are too concerned with profit to teach it properly, it could do tons of random stuff. It's like training a developer by giving them random examples from the internet rather than specific ones. Of course they pick up bad habits. Even if it "works" it is almost never efficient or secure.

[-] x00z@lemmy.world 1 points 1 month ago

I'll embrace the inevitable fork.

[-] poVoq@slrpnk.net 1 points 1 month ago* (last edited 1 month ago)

If you use ntfy mainly as a Unified Push distributor on Android, then I highly recommend switching to a XMPP client that can do the same.

[-] Decronym@lemmy.decronym.xyz 1 points 1 month ago* (last edited 1 month ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
DNS Domain Name Service/System
Git Popular version control system, primarily for code
IP Internet Protocol
MQTT Message Queue Telemetry Transport point-to-point networking
NAT Network Address Translation
XMPP Extensible Messaging and Presence Protocol ('Jabber') for open instant messaging

[Thread #146 for this comm, first seen 8th Mar 2026, 10:40] [FAQ] [Full list] [Contact] [Source code]

[-] kevinwells@lemmy.world 1 points 1 month ago

I just set up a ntfy server for Unified Push earlier this week to use with Matrix. Now I have to turn around and immediately replace it...

load more comments (1 replies)
[-] Nalivai@lemmy.world 1 points 1 month ago

This doesn't make me uneasy. It makes me resentful, a little angry, and a lot tired. Thanks for bringing it to attention, I will make sure that nothing of that project or from that author will ever cross my ecosystem again.

load more comments (3 replies)
[-] SanPe_@lemmy.world 1 points 1 month ago

I'm so tired of that.

I'm using it for scripts notifications + unifiedpush. I don't know where to start to find the fitting alternative.

[-] douglasg14b@lemmy.world 0 points 1 month ago

The maintainer you and said that they tirelessly tested, reviewed and verified changes over the course of 3 weeks to make sure that things were running and operating correctly.

This is how it should be done. It's not like they're vibe coding this.

load more comments (1 replies)
load more comments (3 replies)
[-] Kushan@lemmy.world 1 points 1 month ago

Fuck, I love ntfy, it's one of the best self hosted push notification systems I've used. It has been flawless so far.

Don't like this.

[-] Lumisal@lemmy.world 0 points 1 month ago

What's the difference between ntfy (android app) and ntfy.sh?

[-] osanna@lemmy.vg 0 points 1 month ago

Ntfy.sh is the hosted version. Hosted by the author. Ntfy (android, ios) is the app that you use as a client.

[-] Lumisal@lemmy.world 1 points 1 month ago

I've never used ntfy.sh

I've only used Ntfy app for Universal Push that some apps need, and they recommend ntfy. Does this affect the app then? Ah, if so, what alternative can I use for just that purpose?

[-] TCB13@lemmy.world 0 points 1 month ago

Well, Telegram does the something for free.

[-] moonshadow@slrpnk.net 1 points 1 month ago

Telegram does the thing for your sweet juicy data

load more comments
view more: ‹ prev next ›
this post was submitted on 08 Mar 2026
21 points (92.0% liked)

Selfhosted

58589 readers
15 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

  7. No low-effort posts. This is subjective and will largely be determined by the community member reports.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS