n2d4

16 ms·

241.
by n2d4 2y ago
It's geared towards people who want to become wealthy, and are willing to take the risk that it needs to get there. 500k is enough to get you by for a few years at least, even in the bay area. You might not be able to afford champagne
242.
by n2d4 2y ago
Stack Auth | Full-stack/Founding Engineer | ONSITE (SF Bay) We are Stack Auth, the open-source Auth0 alternative. We are looking for cracked engineers who are passionate about building for other devs, whether that's authentication
243.
by n2d4 2y ago
Given that Google Trends doesn't show that bump, I'd assume it has to do with how the data was collected. Maybe all stories with < X votes/comments older than 2015 are not included, or deleted from whatever index you used?
244.
by n2d4 2y ago
You made it sound like it's a hobby project not ready for production — where do you see that in the README? Calling it a "WorkOS clone" because they mention it is an alternative also isn't fair — even if it solves the sa
245.
by n2d4 2y ago
I was more thinking about the replies — but granted!
246.
by n2d4 2y ago
Knowing both the team behind SSOReady and their product, I can tell you that this couldn't be further from the truth. What a shameful thing to say — of course you want your own product to look good, but badnaming your competitors is no
247.
by n2d4 2y ago
Stack Auth maintainer/co-founder here. Kinda disappointed by the lack of open-source solutions in this thread — if anyone's looking for managed auth like WorkOS/Clerk/Auth0, but wants it to be 100% open-source, you shoul
248.
by n2d4 2y ago
Hah! Here's what it had to say about itself this hour: > In a more self-referential turn, we examine the launch of HN Update itself. This initiative aims to provide hourly news broadcasts, summarizing top stories from Hacker News. W
249.
by n2d4 2y ago
Googling it returns this HN comment, so probably not. They are correct though when saying that the block has been in place for at least a few months now: https://x.com/Forceultraomega/status/1795189735297605635
250.
by n2d4 2y ago
The problem is the validation. You'd expect you just have to validate a lower bound, but you also have to validate an upper bound.
251.
by n2d4 2y ago
The default behaviour of setTimeout seems problematic. Could be used for an exploit, because code like this might not work as expected: const attackerControlled = ...; if (attackerControlled < 60_000) { throw new Error(&q
252.
by n2d4 2y ago
But you probably wouldn't take the time to write up a nice report and send it to Google either if they didn't pay. Or even try to find the bug in the first place. (But yea, I think lots of people would sell exploits to criminals f
253.
by n2d4 2y ago
I assure you that when Google set those bounties, they thought about how much they would have to pay white hats to make them do the right thing. Of course, it's a highly illiquid market (usually there's just one seller and only a
254.
by n2d4 2y ago
> The severity of a bug isn't based on how it could theoretically affect people but on how it actually does No, it's priced on demand and supply like anything else; bug bounties are priced to be the amount that Google thinks it
255.
by n2d4 2y ago
IMO this is different from discriminating based on political opinions because it's the employee who decides whether they want to leave. Similarly, if you build a company and are very vocal on Twitter supporting a presidental candidate,
256.
by n2d4 2y ago
Having done lots of Minecraft modding a decade ago, it's wonderful to see that the community is still active enough for there to be inside jokes like these. Given the size of the game, it's not an easy feat to build a Minecraft
257.
Show HN: An open-source reverse proxy that authenticates users(github.com)
14 points by n2d4 2y ago|0 comments
258.
by n2d4 2y ago
The difference between those is that Musk and Altman make wrong predictions about the future; Holmes with Theranos made wrong statements about the present. One of them is illegal, the other isn't.
259.
by n2d4 2y ago
I can promise you that after all of this outrage, they're going to be much more careful about everything they do. To respond to your question directly though, yes it does matter; any accelerator that accepts hundreds of companies eve
260.
by n2d4 2y ago
YC funds startups based on their teams and ideas, and in some cases, even without the latter. Building a code editor is not a requirement to get accepted. It's very possible that Pear AI even mentioned that they're a fork in their
261.
by n2d4 2y ago
If no two companies could share a name, we'd have run out of names by now. (Case in point: I'm building a company called Stack.)
262.
by n2d4 2y ago
State regulators have to sign off on the deal; it's not sufficient for the non-profit board to agree to it.
263.
by n2d4 2y ago
After the non-profit sells its assets, it would either donate the proceeds in a way that would be aligned with the original mission, or continue to exist as a bag of cash, basically.
264.
by n2d4 2y ago
Well predicted. Just two days later: > OpenAI to remove non-profit control and give Sam Altman equity https://news.ycombinator.com/item?id=41651548
265.
by n2d4 2y ago
Just wait until the Duolingo owl catches wind of this!
266.
by n2d4 2y ago
This starts becoming really powerful when ORMs support it natively. Imagine if Prisma generated reversible pgroll migrations instead of SQL files!
267.
by n2d4 2y ago
You can do it with template string types: https://ybogomolov.me/type-level-uuid
268.
by n2d4 2y ago
They do that in this article towards the end: https://wavebyagc.com/en/hidden-antennas-for-urban-environme...
269.
by n2d4 2y ago
More efficient than brute forcing a private key, as you would have to do when you don't have the public key. Sure, finding a private key whose public key's hash is given might be 2x slower, but Pollard's rho algorithm is 2^12
270.
by n2d4 2y ago
Pollard's rho algorithm can be applied to not just numbers but any cyclic group, which secp256k1 (the elliptic curve used by Bitcoin) is.

More ›