61 comments

  • pants2 2 hours ago
    It's a shame what happened to Postman. It started as an excellent little developer tool for testing APIs. Then for some reason they raised over $400M in funding and hired 1,500+ employees, for what should have been a tiny OSS/passion project like curl or little snitch. Instead they now have to justify their valuation by forcing logins, collecting data, monthly subscriptions, AI features, etc.

    I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore

    • swatcoder 2 hours ago
      > for some reason they raised over $400M in funding and hired 1,500+ employees

      You know the reason. A bunch of people were able to take home a lot of money because of that growth and now have the option to FIRE themselves whenever they want to shake off the stress.

      That's the founder mentality that Y Combinator exists to leverage or encourage and it's ubiquity is what separates the prevailing 21st century technology movement from the nerdy, academic, UNIX-y movement that gave us GNU, linux, curl, ffmpeg, redis, etc

      We got to watch innovative products get pumped full of helium until they explode with bloat and rent-seeking instead of accumulating a growing foundation of sturdy technical building blocks as we could have had on the other path.

      AI now leads us into some new movement, the worst version of which a few model vendors protected by regulations absorb almost all technical accomplishment and lease it back out to everybody else, and the best version of which democratizes technical construction so widely that individuals can naively spin up effective solutions for the most idiosyncratic needs.

      We'll see how it goes.

      • mifydev 1 hour ago
        I miss the UNIX-y movement so much :(
        • zaik 1 hour ago
          It's not dead??
          • conductr 53 minutes ago
            It’s as dead as rock and roll
            • bigyabai 33 minutes ago
              UNIX is, UNIX-y stuff isn't.
      • agorabinary 6 minutes ago
        Articulate and well spoken - I hope that through threads like these that especially tech newcomers discover that there are alternatives to the YC founder mentality of "growth at all costs". A more gradual approach that respects users is also better for founders. You may not retire at 35 with some big exit or raise, but why is that the goal anyway? Build something that respects your users and you can see yourself working on for 30 years, living comfortably and in moderation.

        A minor tweak to The Parable of the Mexican Fisherman[1]:

        The venture capitalist laughed and said, “That’s the best part. When the time was right, you would announce an IPO, and sell your company stock to the public and become very rich. You would make millions!”

        “Millions – then what?”

        [1] https://aliabdaal.com/newsletter/the-parable-of-the-mexican-...

      • cnity 1 hour ago
        You are good at writing. Thanks for this.
        • godelmachine 46 minutes ago
          Yes, this dude is really good at writing.
      • terribleperson 1 hour ago
        I'm already enjoying the second version. I just hope we get to keep it.
      • vrganj 1 hour ago
        Hoarders can get piles of money,

        That is true, hackers, that is true.

        But they cannot help their neighbors;

        That's not good, hackers, that's not good.

        Join us now and share the software;

        You'll be free, hackers, you'll be free.

        -- The Free Software Song, as written and sung by rms

        https://www.gnu.org/music/free-software-song.en.html

        • netik 39 minutes ago
          While I agree with every word of this I never want to hear RMS sing this again.
      • guitarlimeo 1 hour ago
        Well put, hopefully it's the latter version.
      • cluckindan 1 hour ago
        Enshittification and private equity are synonymous. Strange that people are still surprised by this.
      • mschuster91 1 hour ago
        > AI now leads us into some new movement, the worst version of which a few model vendors protected by regulations absorb almost all technical accomplishment and lease it back out to everybody else, and the best version of which democratizes technical construction so widely that individuals can naively spin up effective solutions for the most idiosyncratic needs.

        Yeah and the issues from these vibecoded one-off programs will be felt for generations.

        I got out of IT partially because I could see the writing on the wall. The "load bearing Excel sheet" is one thing, manageable if you could catch the person who wrote it in time before they depart or die and know your way around Excel - there's only so many ways to achieve a desired goal (unless the author used VBA, at which point all bets are off, and I member encountering a spreadsheet that macro-called in a DLL shipped together with the sheet).

        But vibe coded AI bullshit? That is supposed to be hosted by someone and kept secure (i.e. isn't hackable in a few seconds by anyone who manages to compromise some dingus's laptop? Oh hell no. I'm outta there, I'm too old for this crap.

        • robotnikman 1 hour ago
          >and I member encountering a spreadsheet that macro-called in a DLL shipped together with the sheet

          That sounds absolutely horrifying. I never encountered one of those before thankfully.

          • akiselev 54 minutes ago
            Oh it gets better (not the OP but I think the following is even worse).

            That DLL hooks into SCADA and sometimes sends updates to a PLC controlling safety critical equipment. When does it send updates versus just query the controller? No one knows. The guy who wrote it died in an (unrelated) industrial accident involving a runaway forklift after leaving the company. Even so much as debugging it would require shutting down the entire factory and replacing all the crucibles afterwards ($$$).

            • Ekaros 22 minutes ago
              Thankfully we are finally after all these years getting regulation on that sort of stuff. It seems EU was 20 something years late... And no I really think that regulation in case like this is really reasonable idea.
            • jodrellblank 42 minutes ago
              > When does it send updates versus just query the controller? No one knows.

              Ask an LLM to reverse engineer it and explain it.

              • jacobgkau 6 minutes ago
                They said this:

                > Even so much as debugging it would require shutting down the entire factory and replacing all the crucibles afterwards ($$$).

                I'm guessing the fundamental reason debugging would require that isn't something an AI could get around. My guess is the LLM would immediately disregard whatever instructions you gave it not to cause having to replace all the crucibles, then say "Oops! You're right." when you point out that you asked it not to do that.

        • fock 1 hour ago
          sadly this is coming to your linux-distro in no time! Far too many single-dev core building block which are now adding features at breakneck speed conversing with AI only.
        • pessimizer 1 hour ago
          > But vibe coded AI bullshit? That is supposed to be hosted by someone and kept secure

          It's also astonishingly stupid. I don't want a one-off program for everything. I want a well-designed and battle-tested program that I can extend with AI, and that has a ton of people's AIs directed at it, constantly finding bugs, posting them on the bugtracker, and writing and debating pull requests.

          I can't comprehend people who think that everything should be built over and over again, and that that will be safe, practical or cheap. It's like they're telling me that I should design a new language for each conversation that I have. Why would I?

          The worst part is how far the capabilities of AI are from that dream anyway. They can't even write readable, intelligible code. They're being celebrated for being able to notice buffer overrun errors in code that people would also notice if anybody had ever really looked at some particular span of code in the last 10 years. It's finding errors in move fast and break things code and code that has been maintained by a weirdo professor in his spare time for free and half the economy somehow relies on. That's not magic, its a sign of how sloppy things got.

        • CamperBob2 1 hour ago
          [flagged]
          • birdsongs 1 hour ago
            True or not - this vibe of "deal with it, it's how things are" feels really crummy to me.

            There's legitimate concerns and emotions here. No reason to be a dick when discussing it.

          • ericfr11 1 hour ago
            Poor judgement call
          • surgical_fire 1 hour ago
            > Deal with it.

            Whenever I spot this shitty cop out here, it is always on a bad take. Never fails.

            • bigstrat2003 10 minutes ago
              Yeah, I was going to vouch the comment because while I think it's a bad take, it doesn't really break the rules to have bad takes. Then I got to the arrogant "deal with it", and I think that does cross the line.
      • tonymet 53 minutes ago
        trying to make money off an invention is perfectly reasonable.
        • andyroid 43 minutes ago
          Indeed, a couple of GUI forms on top of curl is right up there with electricity, antibiotics and sliced bread.
          • tonymet 8 minutes ago
            then why haven't you done it?
        • kentm 9 minutes ago
          How you try to make money off an invention may be perfectly reasonable, or it may be perfectly unreasonable. The "how" matters here.
          • tonymet 4 minutes ago
            nearly every "how" is going to trigger some haters.
        • jodrellblank 48 minutes ago
          Silently installing hooks into your other tools, to route their traffic through Postman without your knowledge or consent, is not at all reasonable.
          • tonymet 4 minutes ago
            you skipped a node in the tree
        • Ambolia 49 minutes ago
          People hating you for the damage you cause while making money is also perfectly reasonable.
      • theturtletalks 1 hour ago
        It’s definitely the best version. I’m seeing so many amazing open source projects since people who once had the vision, but not the coding chops, can now build what they imagine. I myself am building a personal OS that connects to everything and it’s way more fun to build things and use them yourself vs just paying for some other software. Especially when that software can be enshittified or start to squeeze its users like you mentioned.
        • caned 56 minutes ago
          I'm also seeing people who previously had little interest in coding or understanding systems suddenly become empowered to pump out and deploy unmaintainable trash faster than their peers can resolve the problems they generate.
          • theturtletalks 13 minutes ago
            Suit yourself. Always diamonds in the rough and you can check repos I star on Github.

            I built software to manage my own e-commerce business before AI coding existed but see teenagers I mentor vibe code applications that are actually helping them make money. They are 5-7 years ahead of where I was at their age and I started the e-commerce business in college.

            And these people are making software for themselves and opensourcing it. So what are you on about peers resolving problems?

        • surgical_fire 1 hour ago
          Can you share any of these many open source projects? I am curious about them.
    • aliasxneo 2 hours ago
      > I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore

      B2B maybe? Usually these businesses thrive solely on flirting with the CTO and getting them to sign a lucrative contract and then mandate internal usage. I'm speaking from experience.

      • spoiler 37 minutes ago
        I worked at a company where postman was (incorrectly) set up, used by everyone in the company, including non-devs and the ops team to make API requests instead of letting us develop tooling... Everyone hated it, but the company kept paying for it.

        Hell, our CI test suite ran Postman, but because that was badly set up if a test suite failed, it required manually editing some state, otherwise the Postman state got fucked and everything would fail.

        Did we still continue paying for it, you might wonder? Yes, of course we did.

      • cute_boi 2 hours ago
        [dead]
      • radicalbyte 2 hours ago
        Oh THAT'S what they're trying. Doesn't work on me %)
    • alfanick 2 hours ago
      I cannot imagine 1500+ employees "working" on this. Wtf, it's a single person project.
      • aldanor 2 hours ago
        1 developer, 10 managers, 20 C-suite, 1468 sales, 1 barista

        All adds up pretty well

        • dalmo3 2 hours ago
          And no one to deliver the mail?
          • PcChip 1 hour ago
            surely they have a postman for that
        • baobabKoodaa 1 hour ago
          Still sounds much better than Oracle's employee composition!
          • SoleilAbsolu 4 minutes ago
            Well with a proverbial lawnmower at the top of the org chart, how many sets of weed-whackers, pruning shears, leafblowers, and RoundUp dispensers are below it?!
        • dominotw 1 hour ago
          they are going to annouce layoffs laying of that 1 developer
        • enbugger 2 hours ago
          [flagged]
          • strictnein 1 hour ago
            It's pretty clear they were making a joke.
          • sp527 1 hour ago
            It's both hilarious and telling that his jest was close enough to reality to provoke you into taking it so seriously.
            • embedding-shape 1 hour ago
              I love how "1468 sales" was the outrageous part, not "1 developer, 10 managers, 20 C-suite" which came before it.
          • arvid-lind 1 hour ago
            That just added up to 1500, so maybe the "+" is another manager. No need to be so hasty.
      • Philip-J-Fry 2 hours ago
        To be fair Postman is a lot more than just a fancy curl client. It's a whole saas platform now.
        • bartread 2 hours ago
          > It's a whole saas platform now.

          I think the argument may be that it doesn't justify this - that the main benefit of the SaaS platform has been to provide 1500+ people with something to do - and that perhaps the SaaS platform doesn't really add enough value to justify its existence or the company's valuation.

          I don't really have a point of view on this since I've only used the browser extension (though I don't have it installed at present, thankfully) so the SaaS part of the business might be amazingly useful or it might not: I'm just laying out what I infer the argument in this sub-thread to be.

          • talon8635 19 minutes ago
            Well, I guess if people need things to do, and others are willing to pay, then what’s the problem?
        • boomlinde 1 hour ago
          To be fair, is there a good reason that it should be?
        • Keyframe 1 hour ago
          can it send email yet?
          • ako 23 minutes ago
            If you use an api?
        • ex-aws-dude 27 minutes ago
          As someone who hasn't used it since like 8 years ago that reads like satire
      • kklisura 1 hour ago
        Wait till you hear Docusign has 7k employees...
    • autoexec 2 hours ago
      > Instead they now have to justify their valuation by forcing logins, collecting data, monthly subscriptions, AI features, etc.

      All those people who gave them millions in funding are expecting to make a return on that investment and that means prioritizing turning it into something that will make money by selling out users. The valuation is just a guess at how successful it will be at screwing users over. Greed ruins everything.

    • vanschelven 1 hour ago
      Someone should vibe-code a VC death clock for developer tools. Enter a company, and it will deduce from its last funding round and headcount the moment it all goes to shit.

      In an utlimate twist of irony such a tool could itself pivot to investors because the moment it gets really bad is also the moment to invest in the competition.

      I'm not saying that's my strategy with Bugsink, but I'm not saying it isn't either.

      • peanut-walrus 1 hour ago
        • xpct 31 minutes ago
          I must say, this style of UI has become really grating even for toy projects.
        • vanschelven 1 hour ago
          "Our models are busy right now. Please retry in a moment."

          Hacker News (comment) hug of death? Or victim of its own punchline?

    • ayush--s 2 hours ago
      I logged in to postman today after 3 years to use some public API, and god, it was so damn unusable. It took me navigating through "workspace", "environments", etc etc before I could hit the simplest of http endpoints.
    • coldtea 23 minutes ago
      >It's a shame what happened to Postman. It started as an excellent little developer tool for testing APIs. Then for some reason they raised over $400M in funding and hired 1,500+ employees, for what should have been a tiny OSS/passion project like curl or little snitch. Instead they now have to justify their valuation by forcing logins, collecting data, monthly subscriptions, AI features, etc.

      The good thing is that now takes about 2 days to replicate with an agent the parts that matter from their whole offering and tell them to go f themselves.

    • mikestew 56 minutes ago
      I used to use Postman daily almost ten years ago. Then as my last hurrah before retirement, I took an embedded job that didn't involve me beating on a web API, so I didn't use Postman anymore.

      So imagine that I hear about this "Postman" product that involves subscriptions, and AI, and "valued at $X billion" and all this crap, and you can see how I seriously thought that there was another product called "Postman" that wasn't the product I used to use. Turns out...

    • phendrenad2 4 minutes ago
      [delayed]
    • pjmlp 1 hour ago
      Yeah, they managed to land on the IT blacklist for several of our customers.

      Nowadays Portman is forbidden for project delivery, unless the customer development team also uses it.

    • richin13 1 hour ago
      For some reason, it is very popular in my country (Costa Rica). Every freelancer I’ve worked with only knows about postman It’s like it was very popular back in the day and people never got the memo there’s better options out there
    • krmmalik 42 minutes ago
      >>>I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore.

      Just out of curiosity, what are developers using these days?

    • writtenone 2 hours ago
    • jfyi 2 hours ago
      A surprising number of developers I work with don't actually know how to use curl. Postman is ubiquitous among that crowd.
      • colejohnson66 2 hours ago
        That's just GUIs being easier to use than CLIs for most people. After all, that's why Postman got popular - it's a GUI to do curl without the CLI! Or Handbrake to avoid using ffmpeg. Or various "paint" applications to rotate images instead of using imagemagik.

        The problem is that Postman decided to want to be a business and took VC money.

      • Ekaros 18 minutes ago
        I know lot of bits with curl. But I find it always a pain to use. Fine for when you do scripting but I find command line pretty painful overall. So I understand want to use some other tool with better ergonomics.
      • threetonesun 59 minutes ago
        10 years ago I totally get that but these days there's plugins built into every IDE that can smooth over the annoyances of testing an API via curl without having to invoke paying for Postman and dealing with all of its nonsense.

        Of course now that I said that today I'd probably just have Claude hit the API for me, or build a dashboard to test it, I really don't know how Postman continues to exist.

    • justincormack 1 hour ago
      They were valued at $5.6bn in 2021, in the ZIRP boom, and havent raised since. Unlikely they can raise at anything like that now.
    • bonestamp2 2 hours ago
      > I don't know a single developer who actually uses it anymore

      I have no need for it, but there's one company I work with and all of their developers still use it. What do you do/recommend instead?

    • enbugger 1 hour ago
      It seems like cursed(blessed) niche? In search of alternatives couple of years ago, I'm stumbled upon Mockoon which looked really like a single person project. Now, judging by their webpage, I see they are going the same way
    • skrebbel 1 hour ago
      > Then for some reason they raised over $400M in funding and hired 1,500+ employees

      Wtf!! how

    • liendolucas 2 hours ago
      Postman valued at 5 billon? WTF? I mean the IT industry lives in a fart cloud honestly. I really really think everything is just a little bit overvalued, isn't it?

      People should be using curl + bash. It's a universal combination available almost everywhere.

      • mschuster91 1 hour ago
        > People should be using curl + bash. It's a universal combination available almost everywhere.

        They should but Bash escaping/encoding is nasty and most terminals have a hard time using the mouse to reliably edit a cURL command, especially if the last command didn't do a final "\n" output. And it gets oh so tiring when the "copy cURL" command includes about 1000 bytes worth of Cookie headers full of analytics garbage.

        That's why Postman became a thing in the first place.

        • liendolucas 1 hour ago
          Yes, that's true. You can suffer a lot escaping things out, but is also a valuable lesson! Not promoting those extreme cases, but many many times a few simple curl calls can save your day.
      • surgical_fire 1 hour ago
        Personally, I replaced Postman years ago with IntelliJ's HTTP client. It is pretty good.
    • Grimeton 35 minutes ago
      Yeah. Curl the little side project:

      https://xkcd.com/2347/

    • agilek 1 hour ago
      1500+ ppl? :-O
    • darepublic 2 hours ago
      Yes a prime example of enshittification. You attract attention making something humble in scope but good.. but then it is compelled to become something much more. Same story with Coursera imo
    • theturtletalks 1 hour ago
      Everything will be enshittified, it’s not a question of if but when. The incentives are simple, the stock ticker must go up.
    • _doctor_love 1 hour ago
      > a tiny OSS/passion project like curl

      Um.

      • saghm 1 hour ago
        I was looking to see if someone had posted a reaction to this part, because if no one had, I was going to! I don't disagree with the parent comment at all, but if curl is an example of a tiny project, I'm not sure what could possibly be considered large. It's literally the first example I'd give if asked for an example of an open source utility getting deployed on like, everything in the world.
    • postmannotlover 2 hours ago
      EDIT: sorry, I was cranky. I just really don't like Postman/its UI/BS. To each his/her own.
      • bfbf 2 hours ago
        Weird take. Just because you can use curl it doesn’t mean you can’t value a GUI to be able to store and manipulate requests quickly and view a formatted response body.

        I use postman all the time to explore apis. Sure I could do it from the command line, but this is quicker and it saves my request payloads.

        (Though now I’m obviously open to suggestions for better tools)

        • tempestrose 1 hour ago
          Get an older copy of fiddler.
        • thisIsFiner 1 hour ago
          Weird take. I thought for myself about the problem and solved it rather than externalize such and end up locked into an increasingly abusive relationship.

          Been using homegrown scripts designed around wget and curl, accessible as shell aliases so I save time never downloading Postman or developing muscle memory for it, yet can still explore APIs

          There's an idea for a better tool; the one you patch right in to your workflow to avoid context switches to a GUI mental model; I just focus on computer generating data rather than color of the virtual captains chair

          • bfbf 1 hour ago
            Not sure if you’re trolling but writing “homegrown scripts as shell aliases” is not faster than a gui. I totally agree Postman is enshittified, but when I just want to see a sample response for given input data, it does the job. Sure I’d like a more lightweight tool, but there’s no way I’m “context switching” to writing shell scripts when I just want to check a single endpoint. (I’d also wager than in many cases, opening a gui and hitting send on a pre-saved request is faster than using an llm too)

            You can do what you like though, my original comment was against the gatekeeping and punching down. I don’t care one way or another what tool you use, but let’s not make people inferior because they aren’t using a TUI for everything.

        • syhol 1 hour ago
          [dead]
    • embedding-shape 2 hours ago
      > I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore

      I think most people here on HN is within or close by the "Innovators" part of the "Technology adoption life cycle" (https://en.wikipedia.org/wiki/Technology_adoption_life_cycle). When Postman hit mainstream, it was already bloated and ruined, and "Innovators" had already moved on to something else, but for Postman that's just the beginning, as they're in the "Early Majority" part, and still have a tail to ride, so investors and everyone else can extract all the value from the remaining s̶u̶c̶k̶e̶r̶s̶ users.

    • sneak 2 hours ago
      This is why the right to fork exists in open source licenses. It’s easier than ever now, too, thanks to LLMs. You might even be able to oneshot forking and removing the malware and rebranding and rebuilding f/oss crapware these days.

      I’ve been considering setting up a nonprofit solely to do this and to republish things like Mattermost, Stats, Bitwarden, etc with the corporate antifeatures ripped out.

      • FuriouslyAdrift 2 hours ago
        Bruno. Open source base, runs locally, data remains on your infrastructure.

        https://www.usebruno.com/

      • pxc 2 hours ago
        Postman has always been proprietary software, hasn't it?
        • sneak 44 minutes ago
          Oh, my mistake! I always assumed it was f/oss that slowly boiled the frog. Turns out it wouldn’t have been in the running for consideration in my daily use stack anyway.
    • mschuster91 1 hour ago
      > Then for some reason they raised over $400M in funding and hired 1,500+ employees

      ... what the fuck. Certainly explains things

      > I still don't know how they're valued at $5B+ when I don't know a single developer who actually uses it anymore

      Yep, one of them. I loved Postman but gone back to plain cURL and the dogshit that is IntelliJ's built-in HTTP request tool.

      As for the question... easy. Markets can stay irrational for a very long time...

    • jameson 2 hours ago
      [dead]
    • asdff 1 hour ago
      I feel the same way about docker. This things just running containers and yet its a billion dollar company.
  • senfiaj 2 hours ago
    Who still uses Postman? In my experience it became insanely slow and bloated. Switched to Bruno. IMO, Postman is like uTorrent, everybody heard about it and many install because of inertia.
    • DuncanCoffee 2 minutes ago
      Switched from Bruno to Voiden, it's more of a postman + notebook. Bruno started adding premium and stuff and I didn't want to wait to migrate again...
    • karthikeyankc 9 minutes ago
      Mostly enterprise teams and intermediate devs from my experience. I lead the API platform for a popular e-signature company, and a postman collection is the first thing devs ask for. Even when we point them to our docs, they'd rather just import a collection and start hitting endpoints immediately.

      Haven't heard of Bruno until now. Looks like a solid offline-first tool. I don't see a public collection or web runner, and it looks like it supports GitHub-based sharing. Postman on the other hand, their public API network (or whatever they call it) along with the web runner reduce a lot of friction for API vendors like us and for dev teams who just want to quickly play with the API in the browser, especially during their evaluation stage.

    • jvzv 19 minutes ago
      bruno is really great used it for a while but the 5 API syncs a month on the free tier is a pain, had to switch to Apidog never been so happy with unlimited syncs
    • giancarlostoro 31 minutes ago
      It was really good until... idk 3 or so years back? Whenever they started forcing you to login to use it.
    • _fat_santa 7 minutes ago
      I use hopscotch and highly recommend it. Very similar UI to postman and it just works.
    • ex-aws-dude 23 minutes ago
      I'm not really a vibe-coder but it seems like the easiest possible tool to vibe-code

      Or just give your agent JSON and tell it to use curl

    • snapetom 1 hour ago
      It's one of those things that have become "enterprise." There's always been better competitors out there, but it was so big, it's the easy choice for companies that are too lazy to do proper/fast vetting.
  • bottombutton 1 hour ago
    Working in healthcare, and Postman got decertified by our Cyber team for this. We all switched to Bruno overnight. Their sales team is pinging us like gangbusters though.
    • happytoexplain 1 hour ago
      A lot of GxP environments had already ditched Postman because it auto-syncs your API schemas to their cloud, as well as values and secrets.
    • tonfreed 1 hour ago
      Bruno is fantastic. Switched a while ago and haven't even thought about going back
  • dham 2 hours ago
    We went to bruno years ago and has been good. Nice to be able to store the request definitions in git. But to be honest, don't really need any of these tools anymore.
    • reddalo 2 hours ago
      +1 for Bruno, it's simple and great.

      They offer a paid version though, so I'm always afraid it's going to enshittify in the future, just like Postman and then Insomnia did.

  • schleck8 8 minutes ago
    Wow this is bad

    Circumvention of the trust model of the agent harnesses (the hash), prompt injection and silently registering an outbound remote MCP endpoint

  • CommonGuy 2 hours ago
    I have been building Kreya [1] for over 6 years now as a Postman alternative. It's offline-first and privacy focused with a storage format made for git.

    In all our years, Kreya "just worked" for our users without any drama or unwanted changes, unlike most of our competitors...

    [1] https://kreya.app

  • dvtkrlbs 33 minutes ago
    I've been using Yaak [1] for a while. It is a breath of fresh air.

    [1] https://yaak.app/

    • dvtkrlbs 15 minutes ago
      One nice thing about it is only the builds are licensed. If you build from source it is MIT.
  • georgel 2 hours ago
    Postman went from a great lightweight tool to a bloated up-selling mess.
    • wolttam 2 hours ago
      As do all great things once VC sinks its teeth in.
      • 999900000999 2 hours ago
        I know I’d also take 400 million in VC funding in hopes of eventually becoming a billionaire.

        Vs making tools for donations and no one appreciating it!

        • bluefirebrand 9 minutes ago
          I'm really curious what difference to your lifestyle being a billionaire would be compared to 400 million

          Maybe I'm just too small minded to imagine, but having that kind of money just seems so unnecessary to me

  • unkn0wn_root 2 hours ago
    If anyone is interested in a Postman alternative but likes TUIs and leans more toward using .http files, check out resterm[0].

    btw - I'm the author.

    [0]https://github.com/unkn0wn-root/resterm

  • eddieroger 22 minutes ago
    Many, many years ago, I used Postman for the first time, way back when it was a Chrome plugin. As an iOS dev, it was amazing to be able to validate the requests I needed to make outside the context of my code to validate things worked. Until, one day, I wasn't seeing something iterate in the responses I was getting as I expected to. Many cmd+R presses later, I talked to the API team to check logs, and we found that Postman was caching what should have been independent requests. Easily blamed on Chrome at the time, but it was an undocumented and unexpected behavior by Postman, who really should have better handled making each request unique.

    I didn't need another reason not to use Postman, but I'll take it. Shame on them for moving in shadows.

  • firefoxd 26 minutes ago
    Postman was my curl with a gui. Used it everywhere, recommended it everywhere. But one day out of the blue it asks me to login, and it all went downhill from there. Imagine you had to login to use curl?

    Anyway, I'm sure somewhere in some terms and conditions I agreed to, it says "we own the glass".

  • ediamondscience 2 hours ago
    I don't understand how postman became the tool that it is today. The best version of it was just a logger and a formatter on top of an http client. The proto import was nice for gRPC. Who thought that relatively simple tool needed accounts and MCPs and whatever else they've thrown into it?
    • Havoc 1 hour ago
      > I don't understand how postman became the tool that it is today.

      You can’t have a unicorn valuation built on a simple offline client.

      This is basically standard SV play book - first step is „fix“ it to have a cloud component/account. Then store some of the data in cloud only - say for example for team sharing or a „workspace“. Then make some features paid only. Then ramp up the enshitification till metrics show it’s saturated and users will bear no more

  • xlayn 35 minutes ago
    When they started uploading things to the server and requiring you to have an account to access the things that they STOLE from your machine without authorization in first place, I uninstall it...

    What can go wrong by uploading your things, if you had any passwords or users there that "pinky promise" will not be uploaded, then running AI and maybe oops have a leak and now someone is hitting your production servers?

  • ag3ntsc4rn 1 hour ago
    I am just going to build my own free little http client (miss the days when postman was just that). Building my own client here - https://github.com/ag3ntsc4rn/librepost Feel free to contribute
  • closetheloopdev 31 minutes ago
    With AI agents at our disposal, can we not just have them code up something we need to use instead of using such sketchy apps like Postman?

    It'd be a personal dev app where only features we need are implemented, including features only we (and no one else) need.

  • toddmorey 2 hours ago
    Why do all these tools require a paid account? Bruno specifically says it’s platform-free and stores everything in git.
  • sitzkrieg 27 minutes ago
    postman has been malware since the day they added accounts many years ago. luckily only low skill cli fearing developers mostly gravitated to it, esp anytime in the past decade
  • Waterluvian 2 hours ago
    I replaced that garbage with Insomnia years back. I’m just waiting until I hear that Insomnia is also a problem and where to go next.
    • mzajc 2 hours ago
      Insomnia 8.0 and above requires an account on their servers to use. The stated reason was that this makes it easier to advertise to you. No thanks.

      Older versions are fine, though.

      https://github.com/Kong/insomnia/discussions/6590

      • tastyfreeze 2 hours ago
        Bruno is a serviceable replacement that is local first.
        • skinfaxi 21 minutes ago
          And the cycle continues...
    • reddalo 1 hour ago
      Insomnia _has_ a problem, since it forces you to create a cloud account with them.

      Bruno [1] is the current better alternative to Insomnia.

      [1] https://www.usebruno.com/

      • Keyframe 1 hour ago
        My path was: Postman -> Turns into shit -> Insomnia -> Turns into shit -> Bruno.. let's hope Bruno doesn't turn into shit.
        • walthamstow 1 hour ago
          These days I would just vibe my own. There's nothing special about any of these software.
        • reddalo 19 minutes ago
          If Bruno turns to shit, I hope that thanks to AI it's going to be easier for a new maintainer to step in and work on a fork
    • amflare 2 hours ago
      I've been using Insomnia whenever I can since before Covid. Its been nice, but ever since they started pushing accounts so aggressively, I've switched to Yaak to get back to that feel of a simple API client that prompted me to switch to Insomia in the first place. 100% recommend. https://yaak.app/
      • Waterluvian 2 hours ago
        That looks appealing but the existence of a Pricing page tells me it's just a matter of time.

        I have a sense that a dumb Web API testing UI application is really not that hard to get AI to implement. These apps all look about the same for a reason. So maybe there will be a prevailing FOSS option that isn't trying to monetize.

        • gschier 2 hours ago
          Yaak creator here! The commercial-use license is my best attempt at aligning incentives between me and the user, while still funding the project's future.

          FYI the license terms only apply to the prebuilt binaries. You can build and run from source for any use (including commercial), for free.

          Happy to answer any questions as well.

          • Waterluvian 2 hours ago
            Hey! I respect your desire to monetize. And I appreciate that you're trying to make it work through monetizing the commercial side. I think that's a sensible approach.

            I'm for the most part just jaded about it all because I've seen Postman and Insomnia slowly boil the frog with increased pushiness towards logins and monetization. If a project is trying to make money at all, I feel it will inevitably grapple with the same issues. Especially for the kind of product where we can have five different options for in the comments section already. But I hope you do succeed in maintaining an honourable revenue stream.

            • runako 1 hour ago
              > If a project is trying to make money at all

              long-time engineer here, begging others to reconsider this attitude. Engineering work has value, engineers deserve to be paid for their time, and the community will have better software if engineers are able to get paid for their time.

              Is there another profession where charging a fair price for a product is looked on with derision the way it is with software?

              • Waterluvian 1 hour ago
                Oh don't get me wrong. I have gotten my company to pay for a lot of good FOSS and services, especially from teams of 1. There just has to be honest value-add potential.
            • gschier 1 hour ago
              Yep! Fun fact, I made Insomnia too, and started over with Yaak after I sold it and watched it go down the same path. Yaak was my attempt at making sure it doesn't happen again.
    • georgel 2 hours ago
      Just installed it, it's funny their landing page is littered with every AI buzzword too. But I am going to give Insomnia a try, I've heard people talk about it and a few others on HN over the years. I just need a glorified cURL GUI at the end of the day.
      • debo_ 2 hours ago
        I use Bruno. I forget what Insomnia did that irritated me, but Bruno is the closest I've found to a dumb client that doesn't pester me for an account.
      • jmuguy 2 hours ago
        Yeah it got bought by Kong a while back, and they're definitely not a great company, but the application itself still seems pretty OK.

        I really like that you can paste a curl in to setup a new request.

        This is definitely the type of app that some AI agent could cobble together pretty quickly, so I don't know why Postman etc thinks they have enough of a moat to keep enshittifying their product.

  • taosx 47 minutes ago
    "When someone shows you who they are, believe them the first time.".

    I dropped them when they first started forcing you to have an account and from them only used it when work made it mandatory, in some cases we even dropped them for other alternatives (http with source in git, scripts..etc)

  • neya 2 hours ago
    Wow, the timing is perfect, I was going to post about this. I also found out last night that they actually proxy your requests without your permission. I have setup an exclusion within my firewall for certain request parameters, but it kept getting blocked despite all my settings a though it was going through their server. That really pissed me off since these requests actually contain sensitive data they did not have permission to intercept.

    Postman also removed the ability to export individual requests and grouped them into "Share" which means now you have to get a subscription to get your data out, and most export options are gone completely, except for collections itself - which they ask you questions why before you can get your data out. Fuck Postman. I moved to Insomnia as of last night (open source).

  • rurp 2 hours ago
    Lots of discussion about less terrible alternatives to postman. For those already using a Jetbrains IDE there's a builtin rest client that works well. I haven't used it for anything too complicated, but for routine stuff where you need to hit an endpoint and fiddle with the payload and headers it's great.
    • isityettime 38 minutes ago
      > [for every] Jetbrains IDE there's a builtin rest client that works well

      There's also one available as a major mode for Emacs: https://melpa.org/#/restclient

      If the command line is acceptable but you want more of a focus on usability than curl has, there's httpie (https://httpie.io/) and its clone xh (https://github.com/ducaale/xh).

    • rhdunn 1 hour ago
      The JetBrains IDE, Visual Studio, and VS Code all support http files as well, which can be checked into an application.
      • kubelsmieci 1 hour ago
        The REST Client for VS Code is pretty good; I’ve been using it for a few years now.
  • fergie 1 hour ago
    It was never, ever clear to me why you needed to use Postman instead of Curl
  • neoyagami 49 minutes ago
    Welp, time to vibecode an non cloud version :/
  • rienbdj 2 hours ago
    Postman feels pointless when I have an agent plus curl.
  • bitbasher 1 hour ago
    Would you be willing to pay for a local only postman alternative if it was built by hand and native (no electron)?
    • stronglikedan 1 hour ago
      People are paying for Bruno, and probably wishing it would load near instantly (no electron), so there's like a market.
  • itsafarqueue 42 minutes ago
    There are few apps more amenable to one shotting with your ai sub than postman et al
  • igleria 33 minutes ago
    The old gray mare, she ain't what she used to be...
  • Colegno 2 hours ago
    I really don't see the point of Postman. It used to be light and efficient, now it's bloated and inefficient
  • theseamusjames 2 hours ago
    If there's ever been a perfect app to vibecode your own replacement, it's postman. Claude can knock out a completely usable competitor in under an hour, I'm sure of it. A day of tweaking and you'll have everything you need.
  • donmb 1 hour ago
    We left Postman long time ago and only use Bruno.
  • system2 16 minutes ago
    At this point, with coding agents, it would be stupid to waste time with Postman. I already uninstalled it after using it for over a decade. Build your own simple tools for debugging, my friends. The old archaic era is over.
  • stillpointlab 2 hours ago
    If there ever was a tool that could be vibe coded, a postman-like is the one.
  • throw03172019 2 hours ago
    Postman was amazing 6-8 years ago. What a downfall it’s been.
  • mococa 44 minutes ago
    I miss the native macOS app Paw
    • guessmyname 31 minutes ago
      Why miss? It still exists, just renamed as RapidAPI → https://paw.cloud

      It is still fully native (real native, not fake web-driver native).

      • sgarman 12 minutes ago
        I'm a PAW fan but the emails I've gotten from them make it sound like it won't be around much longer.

        "No new versions of PAW are currently planned for release. No additional bug fixes, security updates, or feature enhancements are planned."

      • mococa 4 minutes ago
        Nice to know!
  • Sparkyte 1 hour ago
    We are in the new era of provider malware. GREEEAAAAT! Thanks AI!
  • clickety_clack 2 hours ago
    I haven’t used postman for years and I don’t know why anyone would. Are people really paying for it?
  • maxdo 1 hour ago
    This is their very bad attempt to survive , who need this in the age of agents ?
  • p0w3n3d 1 hour ago
    Curl Web Interface shouldn't require any payment at all
  • IlikeMadison 1 hour ago
    Use impostman.el/verb.el/restclient.el in Emacs.
  • arttaboi 2 hours ago
    Never liked Postman since they started forcing everyone to signup. Sometimes I hate VCs who unnecessarily funds and ruins a perfectly fine product (of course founders are equally guilty).
  • Havoc 1 hour ago
    If even half of that is true then they’re cooked
  • richwater 2 hours ago
    Postman went from a nice tool to an almost virus in just a few years. It's crazy that anyone still uses it.

    I'm currently using Bruno (https://www.usebruno.com/)

    • saikatsg 2 hours ago
      They have an open format for API collections: https://www.opencollection.com/
    • statenjason 2 hours ago
      I made the switch to Bruno years ago after getting hounded by Postman’s sales team and Insomnia started requiring an account.

      Works well enough without getting in my way.

    • rs999gti 2 hours ago
      Does anyone know if Bruno is not on the same path as Postman?
      • reddalo 1 hour ago
        They have a "Pricing" page, so it's a matter of time before it enshittifies. But it's still nice as of now.
    • devmor 2 hours ago
      Switched to Bruno myself, and moved my team to it last year as well. Vast improvement over late stage Postman.
  • moi2388 2 hours ago
    Thank god we moved to Bruno and sometimes just http files in vs code or jetbrains
  • O3marchnative 1 hour ago
    At least it has never been easier to transition to another tool or to make your own.
  • vachina 1 hour ago
    Thanks, I still use Postman out of muscle memory. Will use Bruno or Insomnia (as recommended here)
  • skilning 1 hour ago
    Enshittification wins again. :(
  • plagiarist 2 hours ago
    Unsurprising. I loved the tool but it was obviously time to drop it when they began pushing for logins.
  • dsschnau 22 minutes ago
    I'm glad to find out from this comment section that I'm not the only one who has noticed Postman is the poster-child of Enshittification.
  • cglan 1 hour ago
    This happened to me. Holy fuck I was pissed
  • tty456 1 hour ago
    Part of Postman's ongoing enshittification...
  • ebtebt 1 hour ago
    Thank you for the reminder, I had not deleted Postman yet. Done :D
  • languagehacker 2 hours ago
    I've always kind of thought that Postman was an enshittification story waiting to happen. I've always felt like they prey on people who just aren't comfortable with the command line, and so there isn't much more stooping lower for them than something like this.
  • orphereus 2 hours ago
    Does everything have to go to shit when money is involved?
    • pizzafeelsright 2 hours ago
      No. Postman sells nothing of value.

      At this point I do not see why the entirety of their software could not be a one shot prompt for the price of deer nuts.

      • paulddraper 1 hour ago
        > price of deer nuts

        Which, in case others didn't know, are under a buck.

    • rs999gti 1 hour ago
      Depends. Is it an investment grant or loan? The former is money to grow with no expectations on growth. The latter has an investor giving money in expectation of a return.

      Most of the YC companies are loan backed with investors pushing milestones for the next investment chunk or round.

    • autoexec 2 hours ago
      Pretty much. It's just a question of how fast it happens. The more capable something is of making money without compromising the product or exploiting users the longer it will take, but once people who are sick with pathological greed get involved they'll eventually start to demand enshittifying the product and selling out the userbase to squeeze more and more money into their pockets.
    • lenerdenator 2 hours ago
      Until we stop relying on SV as the standard-bearer for tech culture? Absolutely.
  • EmX_3000 2 hours ago
    [dead]
  • fletchowns 1 hour ago
    [dead]
  • twistorlabs 1 hour ago
    [flagged]
  • PhaseTwobig 1 hour ago
    [dead]
  • canpolatkaya4 1 hour ago
    [flagged]
  • Surac 2 hours ago
    who the hell needs that. skills are just md files
    • fifilura 2 hours ago
      Or pre-AI it was a python script inside a notebook.