Hacker News Reader

mxholdon Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

Interesting coincidence?

>On April 12, Coinbase updated their user agreement to take effect TODAY, May 15, with new language about waiving some rights to class action lawsuits and jurisdiction selection.

https://bsky.app/profile/jsweetli.bsky.social/post/3lp7sw647...

mxholdon You should know this before choosing Next.js

I've always been a little uneasy about Vercel after trying to self-host Next.js on a VPS and running into a few of the little traps they seem to have set to nudge you into hosting on their platform instead. I get they have to pay the bills somehow but it does feel a bit risky to bet on their goodwill long-term.

The way they've handled this vulnerability has made me even more uneasy.

Vercel's initial framing of their Firewall as having "proactively protect[ed]" their customers definitely leaves a bad taste.

This, plus the delay in notifying other platforms, reveals a conflict of interest I had not previously considered: is Vercel actually less motivated to prevent such vulnerabilities from being introduced to Next.js in the future because they can roll out mitigations on their own platform before public disclosure and then say "well you wouldn't have been affected if you used us for hosting :)"?

mxholdon Know this before choosing Next.js

I really appreciate this post. I've always been a little uneasy about Vercel after trying to self-host Next.js on a VPS and running into a few of the little traps they seem to have set to nudge you into hosting on their platform instead. I get they have to pay the bills somehow but it does feel a bit risky to bet on their goodwill long-term.

The way they've handled this vulnerability has made me even more uneasy.

Vercel's initial framing of their Firewall as having "proactively protect[ed]" their customers definitely leaves a bad taste.

This, plus the delay in notifying other platforms, reveals a conflict of interest I had not previously considered: is Vercel actually less motivated to prevent such vulnerabilities from being introduced to Next.js in the future because they can roll out mitigations on their own platform before public disclosure and then say "well you wouldn't have been affected if you used us for hosting :)"?

mxholdon 14 Police Officers Take Down a One-Legged Homeless Black Man Outside Twitter HQ

Are you kidding me? Did you watch the video? This man was not a threat.

mxholdon 'The Last Black Man in San Francisco' Searches for Home in a Fast-Changing City

"Census numbers reveal a staggering 35.7 percent decrease in San Francisco's black population between 1990 and 2010"

I was surprised to hear it was this drastic.

mxholdon Silicon Valley’s 'Startup Castle' is looking for roommates

John, a resident of the Startup Castle (who declined to give his last name), told me in an interview that he didn’t consider these rules discriminatory, and that the housemates were just “trying to get away from people who were obsessed with themselves.”

I'm astounded anyone could look at that list of requirements and say this with a straight face.

mxholdon A Startup That Wants to Cure Social Anxiety

The app is Joyable: https://joyable.com/

mxholdon Personal names around the world

"How do people's names differ around the world, and what are the implications of those differences on the design of forms, databases, ontologies, etc. for the Web?"

This has basically convinced me that you should only ever have a single (long) "Name" text input.