frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

HN: Kerf – if Burp, Wireshark, and Dependabot had a kid

https://kerf.software
1•openpost•6m ago•0 comments

Amazon warns new cyber flaws detected using AI are being 'broadly exploited'

https://www.ft.com/content/245778d9-597b-492d-b5b6-a2967c77e853
1•nprateem•7m ago•0 comments

LCOS 0.9.5 Has Landed

https://lunduke.substack.com/p/lcos-095-has-landed
1•onemoresoop•7m ago•0 comments

New World screwworm cases confirmed in wildlife in Texas, beef cow in New Mexico

https://www.reuters.com/business/healthcare-pharmaceuticals/us-agriculture-dept-confirms-first-de...
1•bushwart•9m ago•0 comments

Personal Agent Protocol

https://sierra.ai/blog/introducing-personal-agent-protocol
1•gmays•11m ago•0 comments

New record κ=1.788⋅10^−3 for Fourier Transform

https://github.com/bigospeedrun/verifier/blob/607121a796548005a238a6e63589de866c9ab6f6/submission...
1•aleph_minus_one•13m ago•1 comments

Show HN: HarnessHive – collaborative wiring harness design platform in browser

https://harnesshive.com
1•danielkopelke•13m ago•0 comments

Show HN: GitPushups, block your code if you don't do pushups during your workday

https://gitpushups.com
1•higgins•17m ago•0 comments

Zac-OS-9: The classic Platinum desktop, reborn for modern PCs

https://sourceforge.net/projects/zac-os-9/
1•felixding•18m ago•0 comments

Creative success will not fill the hole in your heart

https://herbertlui.net/creative-success-will-not-fill-the-hole-in-your-heart/
2•herbertl•18m ago•0 comments

Data centers could erase decades of air quality gains

https://www.theverge.com/ai-artificial-intelligence/1015958/data-center-pollution-rising-report
3•cdrnsf•18m ago•0 comments

Making COUNTs and the Rest of Search Fast in Postgres

https://www.paradedb.com/blog/opening-a-closed-tin-part-2
1•philippemnoel•18m ago•0 comments

Why Trader Joe's parking lots are the way they are: We ranked every one in IL

https://www.chicagotribune.com/2026/10/21/trader-joes-parking-lots/
1•mattas•21m ago•1 comments

Google Paranoid Crypto, the tool used to discover the eMudhra private keys

https://github.com/google/paranoid_crypto
1•tech234a•22m ago•1 comments

Decomposer: Decompile Symbolic Music to Programs

https://github.com/elianakim/Decomposer
1•modinfo•23m ago•0 comments

Show HN: Claude driving a powerful music notation editor [video]

https://www.youtube.com/watch?v=lJOV3wvAOb4
1•yetanotheruser•23m ago•0 comments

Japan's Onamae Desktop Cloud hacked, up to 27,000 servers affected

https://www.bleepingcomputer.com/news/security/japans-onamae-desktop-cloud-hacked-up-to-27-000-se...
2•PicardManeuver•23m ago•0 comments

Qutebrowser still trusts eMudhra: QtWebEngine does not check cert revocation

https://github.com/qutebrowser/qutebrowser/issues/9032
1•tech234a•24m ago•0 comments

The Rise and Fall of Visual Studio: The Tool That Ruled Every Office

https://www.youtube.com/watch?v=P0RTve5G80w
2•cable2600•25m ago•0 comments

Lipoprotein(a) in Disaggregated South Asian Groups

https://www.sciencedirect.com/science/article/pii/S2772963X26007519
1•brandonb•26m ago•0 comments

Viewert IP and Domain Lookup

https://www.viewert.com/ip
1•Sunrostern•31m ago•0 comments

Towards Securing the Internet

https://twitter.com/gdb/status/2112921529650688312
1•gmays•32m ago•0 comments

LiteLLM Security Update

https://docs.litellm.ai/blog/security-incident-oct-21-2026
9•abhikap•44m ago•0 comments

Tesla profits drop 43% in Q3

https://arstechnica.com/cars/2026/10/tesla-profits-drop-43-in-q3/
8•throw0101a•44m ago•0 comments

The Kessler Syndrome (where blowups multiply exponentially) applied to software

3•spenvo•47m ago•0 comments

PHP 9.2 Critical Memory Corruption CVE

https://nvd.nist.gov/vuln/detail/cve-2026-109618
4•xiaoyu2006•47m ago•0 comments

FreeBSD 16.0-CURRENT/aarch64 guest boots on Apple Virtualization.framework

https://github.com/tjfontaine/freebsd-apple-virtualization
3•rguiscard•52m ago•0 comments

Claude builds the Excel model,Filing Studio links every number to its SEC filing

https://drive.google.com/file/d/1TquJDCgvf3gr9-j779AxNTNGYqw2BPbi/view?usp=sharing
3•CincoDataCeo•54m ago•0 comments

The Huawei-DeepSeek Symbiosis

https://newsletter.semianalysis.com/p/huawei-deepseek
5•nsoonhui•55m ago•0 comments

Building a multiplayer FPS that runs in the browser, and you can play it now

https://semperplay.com/news/operation-raven-origins-and-plan/
2•semperMade•55m ago•0 comments
Open in hackernews

CheerpJ 4.0: WebAssembly JVM for the browser, now with Java 11 and JNI support

https://labs.leaningtech.com/blog/cheerpj-4.0
9•apignotti•1y ago

Comments

palata•1y ago
That's technically pretty cool, but it makes me wonder:

In order to run a Java Desktop app, I need to install a JVM first (or the Desktop app can embed it, I guess that's what IntelliJ does, right?).

Now if I run CheerpJ, it means that I essentially download a JVM when I load the page (every time), and run code in that JVM. But at this point, why not downloading a Desktop app?

It feels like we are going around, shipping simple web pages together with full browsers and calling that "desktop apps" (e.g. ElectronJS), then shipping complete JVMs as web pages and calling that a "web page"... why don't we just ship simple webpages through browsers and complex desktop apps through package managers?

apignotti•1y ago
With CheerpJ you are downloading the subset of the JVM that you need, and actually only once thanks to the standard browser cache.

There are many reasons why shipping via the browser is a better choice compared to shipping desktop apps. The main 3 in my opinion are:

1. Distribution: Give your user a link and the app will start 2. Isolation: The user can have confidence the app won't read his personal files. 3. Cross-platform: Every OS and every device, for real this time

yuri91•1y ago
For reference, when loading https://browsercraft.cheerpj.com for the first time (up to loading a world), my browser downloaded ~32MB.

The second time almost nothing.

jeffreportmill1•1y ago
And here's an entire Java IDE with CheerpJ that downloads less than 15mb:

https://reportmill.com/SnapCode

palata•1y ago
> With CheerpJ you are downloading the subset of the JVM that you need

That's interesting! May I ask how it works? Does that also happen with e.g. IntelliJ?

> Every OS and every device, for real this time

Doesn't the JVM run everywhere in 2025?

apignotti•1y ago
> That's interesting! May I ask how it works? Does that also happen with e.g. IntelliJ?

Byte ranges request do most of the heavy lifting, data is loading exclusively on-demand.

> Doesn't the JVM run everywhere in 2025?

What about iOS? Android has Java, but can't run desktop Java apps. Chromebooks also have limits.

palata•1y ago
> Byte ranges request do most of the heavy lifting, data is loading exclusively on-demand.

I don't understand what that means. The JVM is supposed to interpret and sometimes compile bytecode, right? How can it be done with only a fraction of the JVM?

Or are you saying that it is constantly communicating with a server that does the work?

apignotti•1y ago
The VM itself is very small, it's the OpenJDK runtime that is quite sizeable. Byte ranges are used to only download the parts of the runtime (in terms of bytecode) that are required.

There is no server-side computation. CheerpJ runs code exclusively client-side.

palata•1y ago
But you said before that you only download a subset of the JVM, right? Or did you mean a subset of the JDK, including the JVM and... I guess other stuff?
apignotti•1y ago
I meant the JVM in an extended sense: the combination of the bytecode parsing, JIT compiler and OpenJDK runtime. You are right, I should have been more precise and refer to only the runtime part, which is by far the most significant.
palata•1y ago
I was not trying to prove you wrong, I'm just genuinely interested :-). I don't see a lot of articles about the JVM these days.