tyrchen
Re:Malicious Rust crate Arrayref runs a build-time payload
on Thursday August 20, 2026 @02:18PM (#49378217)
When several supply-chain attacks hit the npm ecosystem a few months ago, I built SBE: https://github.com/tyrchen/sbe.
It provides sandboxing for arbitrary CLI commands using Seatbelt / SBPL on macOS and Landlock LSM + seccomp-bpf on Linux. You can use it to protect local dependency builds, or integrate it into GitHub Actions to add an extra layer of protection to CI.
Feel free to give it a try — I’d love to hear your feedback.
Renovate: A new way to handle Postgres schema migration, inspired by Terraform
Re:Ask HN: Who is hiring? (July 2016)
on Friday July 01, 2016 @06:32PM (#12020171)
awesome. Love to know more.
Multiple async / sync listeners done right for EventEmitter in Node.js
Customer service WRT stupid customer
Elixir Chinese translate/pinyin/slugify module, inspired by Elixir.Unicode
Having a harsh boss
Re:Programmer's Dilemma
on Thursday August 15, 2013 @09:12PM (#6221634)
Sorry I missed that. Chrome seems not pointing that typo out so I neglected. Seems I'm too dependent on tools. :(
Re:Programmer's Dilemma
on Thursday August 15, 2013 @09:07PM (#6221623)
I totally agree. This should not be a hard problem to conquer since the hash table is provided by library. I just want to see if the candidate is a competent coder and a fast learner.
Why should C programmer learn Erlang?
Re:Ask HN: Founders, how much equity did you give up in your first fun...
on Tuesday July 02, 2013 @08:27PM (#5981621)
As a first time entrepreneur, I raised about $25k for seed round, paying 10% (5% for the money, 5% for a 4-month service) of my equity to the incubator. Then after 4 months I raised half million USD for angel round, paying 20% of my equity. BTW, I'm in Beijing, China.
This is just a reference. It could vary greatly based on the background of your team, the maturity of your product, etc.
Re:Ask HN: Any js lib to implement the effects like apple mac pro ads?
on Thursday June 13, 2013 @12:34AM (#5872327)
Wow. I see. Thanks a lot.
Ask HN: Any js lib to implement the effects like apple mac pro ads?
The ad is here: http://www.apple.com/mac-pro/.