frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Evolving MSFT's approach to coordinated security research: In scope by default

https://www.microsoft.com/en-us/msrc/blog/2025/12/in-scope-by-default
1•icampanini•55s ago•1 comments

New AI tool turns social chatter into pure sales Intel

https://www.socialsalesanalyzer.ai/ai-ssa-join-live
1•brightarrowtech•2m ago•1 comments

Pg_ClickHouse Postgres Extension

https://github.com/ClickHouse/pg_clickhouse
1•AlexClickHouse•3m ago•0 comments

Show HN: Autofix Bot – Hybrid static analysis and AI code review agent

1•sanketsaurav•3m ago•0 comments

Pure-Go implementation without CGO dependency

https://github.com/golang/go/issues/76786
2•andrewstetsenko•4m ago•0 comments

AlphaEvolve on Google Cloud

https://cloud.google.com/blog/products/ai-machine-learning/alphaevolve-on-google-cloud
1•gmays•6m ago•0 comments

ChatGPT's 'adult mode' is expected to debut in Q1 2026

https://www.theverge.com/news/842657/openai-chatgpt-adult-mode-debut-q1-2026
1•amrrs•7m ago•0 comments

Apple wins partial reversal of sanctions in Epic Games antitrust lawsuit

https://www.reuters.com/sustainability/boards-policy-regulation/us-appeals-court-partly-reverses-...
1•benoau•8m ago•0 comments

Serious concerns about the rise in sycophantic and delusional outputs [pdf]

https://www.iowaattorneygeneral.gov/media/cms/12_68B5C629180F6.pdf
1•layer8•8m ago•0 comments

RFC 6677 DNS Transport over TCP – Implementation Requirements

https://www.ietf.org/rfc/rfc7766.txt
1•1vuio0pswjnm7•9m ago•0 comments

AI-led integrations: A faster alternative to iPaaS for legacy systems

https://isoform.ai/blog/ai-led-integration-fastest-ebitda-lever-for-private-equity
2•Chrisywz•12m ago•1 comments

US mass killings drop to 20-year low. Some policy shifts might be helping

https://www.csmonitor.com/USA/Society/2025/1208/mass-killings-shootings-drop
1•paulpauper•12m ago•0 comments

Oracle shares slide on $15B increase in data center spending

https://arstechnica.com/information-technology/2025/12/oracle-shares-slide-on-15b-increase-in-dat...
2•andyjohnson0•12m ago•1 comments

A Friendly Response to Alex and Tyler's Discussion About the Debt

https://www.theunseenandtheunsaid.com/p/a-friendly-response-to-alex-and-tylers
2•paulpauper•14m ago•0 comments

Did industrial policy drive East Asian growth?

https://www.richardhanania.com/p/human-capital-not-industrial-policy
1•paulpauper•14m ago•0 comments

Stop Multitasking at Work: Better Productivity Methods

https://burkerecruiting.com/stop-multitasking-at-work-better-productivity-methods/
1•takenotes•15m ago•0 comments

PromptForge: A visual prompt management system for AI image generation

https://github.com/intelligencedev/PromptForge
1•doener•16m ago•0 comments

My new fave thing to go to is algoraves

https://interconnected.org/home/2025/12/11/live
1•ingve•17m ago•0 comments

Foundations: My 1999 (and Part of 2000)

https://michaeljburry.substack.com/p/foundations-my-1999-and-part-of-2000
1•lawrenceyan•21m ago•0 comments

My Code Editor

https://www.mariasolos.com/posts/my-code-editor/
1•jesperlang•21m ago•0 comments

Show HN: Gotui – a modern Go terminal dashboard library

https://github.com/metaspartan/gotui
2•carsenk•22m ago•0 comments

Hundreds quarantined as measles outbreak accelerates in the South

https://www.dailymail.co.uk/health/article-15375729/Hundreds-quarantined-measles-outbreak-acceler...
3•Bender•22m ago•0 comments

Hundreds Quarantined in South Carolina as Measles Spreads

https://www.nytimes.com/2025/12/11/well/measles-cases-outbreak-south-carolina.html
4•measurablefunc•22m ago•0 comments

Compound Engineering: How Every Codes with Agents

https://every.to/chain-of-thought/compound-engineering-how-every-codes-with-agents
1•mooreds•22m ago•0 comments

Microsoft Patches 57 Vulnerabilities, Three Zero-Days

https://www.securityweek.com/microsoft-patches-57-vulnerabilities-three-zero-days/
1•Bender•23m ago•0 comments

Show HN: XeraSentry – Real-time Ethereum security monitoring in Python

1•Chu_Wong•23m ago•0 comments

Gogs Git service zero-day exploited since Dec. 1

https://www.scworld.com/news/gogs-git-service-exploited-since-dec-1
1•Bender•23m ago•0 comments

OWASP PTK 9.3.0 with Support

1•DenisPodgurskii•24m ago•0 comments

Malicious VSCode Marketplace extensions hid trojan in fake PNG file

https://www.bleepingcomputer.com/news/security/malicious-vscode-marketplace-extensions-hid-trojan...
5•speckx•28m ago•0 comments

Higher Ed's Dirtiest Secret

https://hollisrobbinsanecdotal.substack.com/p/teaching-quality
1•HR01•29m ago•1 comments
Open in hackernews

CheerpJ 4.0: WebAssembly JVM for the browser, now with Java 11 and JNI support

https://labs.leaningtech.com/blog/cheerpj-4.0
9•apignotti•7mo ago

Comments

palata•7mo ago
That's technically pretty cool, but it makes me wonder:

In order to run a Java Desktop app, I need to install a JVM first (or the Desktop app can embed it, I guess that's what IntelliJ does, right?).

Now if I run CheerpJ, it means that I essentially download a JVM when I load the page (every time), and run code in that JVM. But at this point, why not downloading a Desktop app?

It feels like we are going around, shipping simple web pages together with full browsers and calling that "desktop apps" (e.g. ElectronJS), then shipping complete JVMs as web pages and calling that a "web page"... why don't we just ship simple webpages through browsers and complex desktop apps through package managers?

apignotti•7mo ago
With CheerpJ you are downloading the subset of the JVM that you need, and actually only once thanks to the standard browser cache.

There are many reasons why shipping via the browser is a better choice compared to shipping desktop apps. The main 3 in my opinion are:

1. Distribution: Give your user a link and the app will start 2. Isolation: The user can have confidence the app won't read his personal files. 3. Cross-platform: Every OS and every device, for real this time

yuri91•7mo ago
For reference, when loading https://browsercraft.cheerpj.com for the first time (up to loading a world), my browser downloaded ~32MB.

The second time almost nothing.

jeffreportmill1•7mo ago
And here's an entire Java IDE with CheerpJ that downloads less than 15mb:

https://reportmill.com/SnapCode

palata•7mo ago
> With CheerpJ you are downloading the subset of the JVM that you need

That's interesting! May I ask how it works? Does that also happen with e.g. IntelliJ?

> Every OS and every device, for real this time

Doesn't the JVM run everywhere in 2025?

apignotti•7mo ago
> That's interesting! May I ask how it works? Does that also happen with e.g. IntelliJ?

Byte ranges request do most of the heavy lifting, data is loading exclusively on-demand.

> Doesn't the JVM run everywhere in 2025?

What about iOS? Android has Java, but can't run desktop Java apps. Chromebooks also have limits.

palata•7mo ago
> Byte ranges request do most of the heavy lifting, data is loading exclusively on-demand.

I don't understand what that means. The JVM is supposed to interpret and sometimes compile bytecode, right? How can it be done with only a fraction of the JVM?

Or are you saying that it is constantly communicating with a server that does the work?

apignotti•7mo ago
The VM itself is very small, it's the OpenJDK runtime that is quite sizeable. Byte ranges are used to only download the parts of the runtime (in terms of bytecode) that are required.

There is no server-side computation. CheerpJ runs code exclusively client-side.

palata•7mo ago
But you said before that you only download a subset of the JVM, right? Or did you mean a subset of the JDK, including the JVM and... I guess other stuff?
apignotti•7mo ago
I meant the JVM in an extended sense: the combination of the bytecode parsing, JIT compiler and OpenJDK runtime. You are right, I should have been more precise and refer to only the runtime part, which is by far the most significant.
palata•7mo ago
I was not trying to prove you wrong, I'm just genuinely interested :-). I don't see a lot of articles about the JVM these days.