News for hackers. Stuff that matters.

tyrchen

Re:Malicious Rust crate Arrayref runs a build-time payload on Thursday August 20, 2026 @02:18PM (#49378217)
When several supply-chain attacks hit the npm ecosystem a few months ago, I built SBE: https://github.com/tyrchen/sbe.

It provides sandboxing for arbitrary CLI commands using Seatbelt / SBPL on macOS and Landlock LSM + seccomp-bpf on Linux. You can use it to protect local dependency builds, or integrate it into GitHub Actions to add an extra layer of protection to CI.

Feel free to give it a try — I’d love to hear your feedback.

Re:Ask HN: Who is hiring? (July 2016) on Friday July 01, 2016 @06:32PM (#12020171)
awesome. Love to know more.
Re:Programmer's Dilemma on Thursday August 15, 2013 @09:12PM (#6221634)
Sorry I missed that. Chrome seems not pointing that typo out so I neglected. Seems I'm too dependent on tools. :(
Re:Programmer's Dilemma on Thursday August 15, 2013 @09:07PM (#6221623)
I totally agree. This should not be a hard problem to conquer since the hash table is provided by library. I just want to see if the candidate is a competent coder and a fast learner.
As a first time entrepreneur, I raised about $25k for seed round, paying 10% (5% for the money, 5% for a 4-month service) of my equity to the incubator. Then after 4 months I raised half million USD for angel round, paying 20% of my equity. BTW, I'm in Beijing, China.

This is just a reference. It could vary greatly based on the background of your team, the maturity of your product, etc.

Wow. I see. Thanks a lot.