This is one of my favorite bugs so far. WYSIWYG editors have become quite complex these days, especially with the addition of block-based editing and collaboration features. This complexity is often overlooked because many people are hesitant to dive into JavaScript code.
If you're into beautiful attacks, check out this piece of work by @rskvp93.
ProseMirror is a powerful web editor used by the NYT, The Guardian or Atlassian. Its rather complicated design spec is 100+ pages in print.
@rskvp93 was like, "Oh the spec has a bug in page 79."
In the past month, KyberSwap has faced unprecedented challenges due to the Elastic exploit. Despite this, I am grateful to say that our core business, including the Aggregator and Limit Order functions, remains robust.
Moreover, we will soon be launching our Zap API, an innovative development that will enable dApps, wallets, and other projects to become the most convenient gateways for their users to access DeFi liquidity protocols. This development underscores our commitment to not only sustaining our platform, but also to continuing to contribute to the wider DeFi ecosystem.
However, due to the Elastic exploit, in a move to stand by affected users, we implemented the KyberSwap Elastic Exploit Treasury Grant Program to cover up to 100% of users’ losses. We have also made significant changes in our business operations to ensure we are well positioned to continue on a sustainable path forward, including temporarily pausing our liquidity protocol initiatives and KyberAI project.
Regrettably, we have also reduced our workforce by 50%. The past few days have been among the most challenging in my journey as an entrepreneur. The decision to part ways with so many of our team members was heart-wrenching. Each individual is not only highly skilled, but also deeply committed to advancing DeFi and bringing tangible value to end-users. Their unwavering dedication during these tough times has shown great character and passion for the industry. Such talent and integrity are rare in our fast-paced, profit-driven industry.
To support our departing team members, we are creating a voluntary database to connect them with potential opportunities in the web3 space. I highly recommend that fellow web3 founders consider these exceptional individuals for their teams. They are not only capable, but also bring a level of commitment and integrity that is invaluable.
@KyberNetwork
If you use https://t.co/rRSMl0rqfp in AWS EKS, be aware of a privesc vector that leads to full cluster compromise. We recommend revoking pod creation permission and switching to domain verification using DNS.
See the update at the end of this blog post: https://t.co/IouTvb4A1Z
@Apple closed our developer account and removed all apps
→ Apple has not paid us $108,878 revenue (this amount is for 3 months).
→ Our 6 applications had a total of $33,680 MRR as of September 20, 2023.
→ One day before removal, we had 1209 active trials.
→ We are left without means of existence. The applications were our sole source of income. I cannot convey the challenges that we and our families have faced due to the account termination.
We hired a lawyer and are currently filing a pre-trial claim against Apple. Please, read our story and sign the petition https://t.co/D6HqaHghcV
#buildinpublic #iosdev #apple #indiehackers
Friend: I have this genius idea, I just need to find someone to "code" it.
Me: Yeah?
Friend: Basically, it is Facebook but for "XXX"... Do you think "we" can do it in one week?
Confession: I've been programming for years but never realized that "boolean" type is named after George Boole, the mathematician.
I'm not the only one, right?