sebdufbeau

there's another one this summer that didn't get as much attention (or any at all) which allowed exfiltrating master provider keys with any authenticated user/virtual key

https://nvd.nist.gov/vuln/detail/cve-2026-84377

As a stealth model, it was priced as $1.25M in / $10M out

Right now, it seems free when you are a Cursor Pro user, but I'd love more clarity on how much it will cost (I can't believe it'll be unlimited usage for subscribers)

Couldn't find the info quickly, is the stealth model cheetah they had a few weeks ago their new Composer 1 model? If not, who's was it?

Edit: yes it was: https://x.com/amanrsanger/status/1983581288755032320

Has the API rollout started? It's not available in our org, even if we've been verified for a few months

EDIT: It's out now

OpenRouter says Singapore

I joined a project last year which uses Konva inside an Angular application. It was my first time doing any kind of canvas programming, but the ergonomics of konva can be picked up quite rapidly and I've been enjoying quite a lot.

We're working on performance-sensitive project, so one lesson we learned is that all shapes listen to all mouse events by default. We didn't even have lots of shapes, but this was enough to have a noticeable performance hit due to all the event handlers being registered. We pivoted to an opt-in approach instead and that fixed most of our problems.

An important point in the story: while she was contacted by the scammers when she was still married, it is after the divorce that she received most of the money that was eventually scammed - over €700k

The article is an excerpt from an upcoming book, maybe it's part of it

How are you comparing bundle sizes? I know that the reported size on some sites like Bundlephobia for v5 is bigger than reality:

https://twitter.com/TkDodo/status/1714275314745081895

For me, Spotify on Mobile has a sleep timer functionality and one of the options of "End of episode". I do have premium so cannot confirm if it exists on the free tier.

I don't have any hard info, but here's my speculation:

The Spotify most people know (finding and playing songs, creating playlists, recommendations), which obviously very important, is probably a tiny fraction of the complexity for the company.

I would wager the vast majority of the employees at Spotify are working on everything else needed to enable the above. The artists portal, analytics and royalties, paying the labels, paying the artists, legal for every country, etc.

Someone who knows could probably elaborate more than me on everything needed to run a company like that.

Does that require 8000 people? Debatable, but it's certainly more complex than clicking a song and playing it.

EDIT: A quick glimpse at job listing for Spotify on LinkedIn shows:

* Client Partner in India

* Business Operations in Nigeria

* Creator Partner Manager in Mexico

* Artist & Partnerships Manager in Egypt

* NLP Research Scientist in the USA

* Director of Sales in Singapore

Image-Line's FL Studio has been going strong for decades

I signed up with no problem using a Canadian credit card

Quick look at the network tab shows two network requests, they are launched in parallel and take 250ms on my end.

The stunning part is one of these is to get a string of text that is displayed in a banner that is only visible if you scroll in the menu (like, at the very bottom). You could easily defer this call to happen once the menu is open and have 0 impact on the UX.

The other call, I have no idea what it does, but is launched both when you open and close the menu.

Seems to already be on his radar:

https://twitter.com/jarredsumner/status/1615071897859018753

Not to be confused with the AI code generation tool from Replit of the same name:

https://replit.com/site/ghostwriter

Might be wrong, but isn't the workaround to this usually just putting a password on the .zip file?

From my understanding, this is a fairly new predicament, for projects that target ESM (type module in package.json) instead of the default CJS

In the episode, you here about people who like the monitoring as it "levels the playing field" and reduces the perceived performance (eg: slackers that get promoted), leaving only the concrete performance as monitored by such tools

I'm not agreeing or disagreeing with that position personally, just exposing it

You can use esbuild with webpack via esbuild-loader, but what makes Vite so fast is mainly the strategy of pre-bundling dependencies when running the dev server, this makes hot starts and hot reloads incredibly quick.

Caution: This explanation might not use 100% accurate terminology, but should get the point across.

Most modern music is made via software named DAW (Digital Audio Workstation), which is kind of like an IDE but where music is made. These allow you to play with audio (ex: import audio files, arrange them across a timeline, record sound from external sources like a microphone). This is great if you already have all the audio files you need (eg: you're a live band and recorded a song in a studio), but sometimes you want to create new audio without having access to a recording studio.

Audio plugins allow you to create new sounds. You've got two main types of plugins: ones that generate sound (eg: instruments, like a synth) and ones that modify sounds (takes an input sound, modifies it and then outputs it again, like an equalizer/EQ).

Audio plugins are external (or bundled) software that you can use inside a DAW, you can download a lot of them for free but they can also get quite expensive (eg: thousands of dollars). The most popular format for these plugins for a long time (and still today) was VST, but Clap aims to be a new standard to compete with VST.

This link get's thrown around a lot, but here's a former Uber EM explaining why "an app with 6 screens" is misjudged statement: https://news.ycombinator.com/item?id=25376346

Jetbrains IDEs have this feature, however I can't find any other documentation other than this StackOverflow question on how to disable the feature:

https://stackoverflow.com/questions/59105219/how-to-get-rid-...

From https://difftastic.wilfred.me.uk/getting_started.html, it's installed via Cargo, so if you already have Cargo installed its straightforward, otherwise you can install it via https://doc.rust-lang.org/cargo/getting-started/installation...

Might be wrong, but I think it's referring to Indian consulting companies (Wipro, Infosys, TCS, Cognizant and HCL)

Wow, that's fascinating, first time I stumble upon the company. Seems like Peloton for weight lifting

Does the detection work well? Is it worth the price?

I can concur for the bone conduction headphones. Maybe I'm late to the party, but it is the most "mind-blowing" piece of tech I've tried in a very long time. I was skeptical that it would sound good or even work at all, but it does.

I'm using the Aeropex AfterShokz for reference (https://us.aftershokz.com/products/aeropex)

The problems came from the touchscreens loosening, detaching and falling, which I would assume is a fairly new problem in the history of treadmill safety.

Edit: main safety issue doesn't seem to be the touchscreens actually

They did:

https://opensea.io/assets/0x495f947276749ce646f68ac8c2484200...

A software solution like Krisp is an easy solution that goes a very long way.