HackTuber News

To subscribe to this, simply use this link on any RSS 2.0 reader:
        https://brainwo.github.io/hacktubernews/feed.xml
      
⭐ Star this project on GitHub
👀 Sneak peek:

rabbit failed to properly reset all keys: emails can be sent from rabbit.tech domains - rabbitude

(rabbitu.de)

rabbit failed to properly reset all keys: emails can be sent from rabbit.tech domains in our last article we announced that rabbit had hardcoded keys in their codebase for ElevenLabs, Azure,...

Researchers Prove Rabbit AI Breach By Sending Email to Us as Admin

(www.404media.co)

Subscribe Join the newsletter to get the latest updates. Great! Check your inbox and click the link. Please enter...

Chrome AI - Vercel AI SDK

(ai-sdk-chrome-ai.vercel.app)

Next.js Chrome AI ChatbotThis is an open source AI chatbot app template built with Next.js, the Vercel AI SDK, and the chrome-ai provider.It uses Google Chrome's built-in large language model, Gemini Nano.

Config 2024 In Review

(www.figma.com)

We’re launching Figma AI, UI3, and Figma Slides, along with major updates to Dev Mode and improvements to your favorite Figma features.Sign up for the betaFigma AI and UI3 are currently in limited beta and...

Polyfill supply chain attack hits 100K+ sites

(sansec.io)

Update June 28th: We are flagging more domains that have been used by the same actor to spread malware since at least June 2023: bootcdn.net, bootcss.com, staticfile.net, staticfile.org, unionadjs.com,...

Automatically replacing polyfill.io links with Cloudflare’s mirror for a safer Internet

(blog.cloudflare.com)

06/26/20246 min readpolyfill.io, a popular JavaScript library service, can no longer be trusted and should be removed from websites.Multiple reports, corroborated with data seen by our own client-side...

Queueing

(encore.dev)

We're Encore and we build tools to help developers create distributed systems and event-driven applications. In this blog, you're going on an interactive journey to help you understand common queueing...

State of JavaScript 2023

(2023.stateofjs.com)

It should be clear by now that, for better or for worse, JavaScript is not slowing down. Between server components, server actions, signals, compilers, and more, we're seeing new innovations pop up faster...

Slow performance iterating over a file · Issue #4 · richard-viney/file_streams

(github.com)

Hello! Theo was doing some benchmarking and discovered that this library is very slow, 12 times slower than NodeJS. https://x.com/t3dotgg/status/1798234716312887448 Seeing as this is likely a libra...

Lines stream in Gleam

(gist.github.com)

Lines stream in Gleam This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor...

I Will Fucking Piledrive You If You Mention AI Again

(ludic.mataroa.blog)

The recent innovations in the AI space, most notably those such as GPT-4, obviously have far-reaching implications for society, ranging from the utopian eliminating of drudgery, to the dystopian damage to the...

Help Civilians

(prytulafoundation.org)

Humanitarian Demining Project We supply humanitarian demining teams with equipment and technical means to accelerate the pace of demining in the de-occupied territories of Ukraine. Healthcare We contribute to...

GitHub - denysdovhan/wtfjs: 🤪 A list of funny and tricky JavaScript examples

(github.com)

What the f*ck JavaScript? A list of funny and tricky JavaScript examples JavaScript is a great language. It has a simple syntax, large ecosystem and, what is most important, a great community. At the...

Wat

(www.destroyallsoftware.com)

A lightning talk by Gary Bernhardt from CodeMash 2012 This talk does not represent anyone's actual opinion. For a more serious take on software, try Destroy All Software...

Building an interactive 3D event badge with React Three Fiber

(vercel.com)

In this post, we’ll look at how we made the dropping lanyard for the Vercel Ship 2024 site, diving into the inspiration, tech stack, and code behind the finished product.InspirationWe’ve shared digital...

How I learned Haskell in just 15 years - duckrabbit solutions

(duckrabbit.tech)

by Evan Silberman, Duckrabbit Solutions Haskell is a programming language invented sometime in the 20th century by Scottish logicians as a prank.¹ Fifteen years or so ago, for reasons I can no longer remotely...

React 19 and Suspense - A Drama in 3 Acts

(tkdodo.eu)

한국어Add translationThat was quite a roller-coaster last week 🎢. Some things unravelled, some things went down, and in the middle of it: React Summit, the biggest React conference in the world.Let me try to...

Why People are Angry over Go 1.23 Iterators

(www.gingerbill.org)

NOTE: This is based on, but completely rewritten, from a Twitter post: https://x.com/TheGingerBill/status/1802645945642799423 TL;DR It makes Go feel too “functional” rather than being an unabashed imperative language. I recently saw a post on Twitter showing the upcoming Go iterator design for Go 1.23 (August 2024). From what I can gather, many people seem to dislike the design. I wanted to give my thoughts on it as a language designer. The merged PR for the proposal can be found here: https://github.

Web apps have client and server state (plus realtime and LiveView) - Dashbit Blog

(dashbit.co)

José Valim June 7th, 2024 liveview, pubsub Recent discussions around client-side and server-side frameworks have brought up some misconceptions about state handling in web...

</> htmx ~ htmx sucks

(htmx.org)

htmx gives you access to AJAX, CSS Transitions, WebSockets and Server Sent Events directly in HTML, using attributes, so you can build modern user interfaces with the simplicity and power of hypertext htmx is small (~14k min.gz’d), dependency-free, extendable, IE11 compatible & has reduced code base sizes by 67% when compared with react

The One Billion Row Challenge

(www.morling.dev)

Update Jan 4: Wow, this thing really took off! 1BRC is discussed at a couple of places on the internet, including Hacker News, lobste.rs, and Reddit. For folks to show-case non-Java solutions, there is a "Show & Tell" now, check that one out for 1BRC implementations in Rust, Go, C++, and others. Some interesting related write-ups include 1BRC in SQL with DuckDB by Robin Moffatt and 1 billion rows challenge in PostgreSQL and ClickHouse by Francesco Tisiot. Thanks a lot for all the submissions, this is going way beyond what I’d have expected! I am behind a bit with evalutions due to the sheer amount of entries, I will work through them bit by bit. I have also made a few clarifications to the rules of the challenge; please make sure to read them before submitting any entries. Let’s kick off 2024 true coder style—​I’m excited to announce the One Billion Row Challenge (1BRC), running from Jan 1 until Jan 31. Your mission, should you decide to accept it, is deceptively simple: write a Java program for retrieving temperature measurement values from a text file and calculating the min, mean, and max temperature per weather station. There’s just one caveat: the file has 1,000,000,000 rows!

The One Billion Row Challenge Shows That Java Can Process a One Billion Rows File in Two Seconds

(www.infoq.com)

On the first day of 2024, Gunnar Morling, Senior Staff Software Engineer at Decodable, launched The One Billion Row Challenge (1BRC) to the Java Community. This ongoing challenge will run until the end of January and aims to find Java code that processes one billion rows in the fastest time. Until now, the podium contained algorithms that finished the processing in under 2.5 seconds.

1 billion row challenge in a SINGLE EXPRESSION WITH ELIXIR!!

(gist.github.com)

/1brc.exs Last active June 19, 2024 17:07 Star () You must be...

1 billion rows challenge in PostgreSQL and ClickHouse

(ftisiot.net)

Last week the good old Gunnar Morling launched an interesting challenge about ordering 1 billion rows in Java. Like my ex colleague and friend Robin Moffat, I’m not at all a Java expert, and while Robin used...

GitHub - TodePond/DreamBerd: perfect programming language

(github.com)

New: DreamBerd now supports rich text DreamBerd DreamBerd is a perfect programming language. These are its features! When you've finished reading through all the features, check out the...

How to find the AWS Account ID of any S3 Bucket

(tracebit.com)

In 2021 Ben Bridts published a highly inventive method for finding the AWS Account ID of a public S3 bucket.This post describes a technique to find the Account ID of any S3 bucket (both private and...

You Suck at Securing S3, Here's Why - env.fail

(env.fail)

TLDR: S3 presigned post or other ways of uploading files can easily be abused with XSS or unwanted paths for uploads So you might have recently seen all of my (Eva) tweets about S3 upload, and how many...

Why Patching Globals Is Harmful

(kettanaito.com)

Honestly, I'd never thought I'd be writing about this, but the matter of patching globals turned out to be one of those topics that a lot of engineers seem to misunderstand. Most of us don't do...

fetchWithProxy.ts

(gist.github.com)

This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn...