frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

CVE Record: CVE-2026-91403

https://www.cve.org/CVERecord?id=CVE-2026-91403
1•Daviey•2m ago•0 comments

Node.js: 5 vulnerabilities found, update now

https://nodejs.org/en/blog/vulnerability/october-2026-security-releases
2•danfritz•3m ago•0 comments

A million orthopteran singers from a year of continuous field recorders

https://www.biorxiv.org/content/10.64898/2026.10.18.759993v1
1•ersinesen•3m ago•0 comments

"Good" AI

https://thoughts.wyounas.com/p/what-does-good-ai-mean
1•simplegeek•5m ago•0 comments

Nonfiction Is Struggling. Publishers Are Making It Worse

https://thewalrus.ca/nonfiction-is-struggling-publishers-are-making-it-worse/
2•simplegeek•6m ago•0 comments

A Lost Schrödinger Manuscript Reveals a Surprising Twist in Quantum Physics

https://www.sciencealert.com/a-lost-schrdinger-manuscript-reveals-a-surprising-twist-in-quantum-p...
2•ibobev•6m ago•0 comments

Cable theft causes Openreach broadband outage for thousands in Thurnscoe, UK

https://www.datacenterdynamics.com/en/news/cable-theft-causes-openreach-broadband-outage-for-thou...
1•GloVin•10m ago•0 comments

Compare grid features, side by side

https://comparegrids.com/features
1•davidvela•12m ago•0 comments

A framework for evaluating agentic AI systems

https://deepsense.ai/blog/your-agent-passed-the-eval-should-you-ship-it/
1•nvmdbljstm•15m ago•0 comments

Patch the Planet – The Trail of Bits Blog

https://blog.trailofbits.com/2026/06/22/introducing-patch-the-planet/
2•janandonly•18m ago•0 comments

Terminal Setup for macOS: ZSH and Oh My Zsh

https://solomk.in/posts/terminal-configuration
1•ankitg12•18m ago•0 comments

Compaction Laundering:Provenance Destruction in Context-Compacting Coding Agents

https://arxiv.org/abs/2610.29869
1•ersinesen•19m ago•0 comments

ChatGPT Ads as over 100k advertisers have used the platform

https://openai.com/index/chatgpt-ads-expands-26-new-countries/
2•haebom•22m ago•0 comments

Show HN: A stateless MCP server over our docs – search, list_topics, get_article

https://chinaready.co/docs/api/
2•martinliucn•24m ago•0 comments

ZK-irp-firewall: Zero-knowledge invariant enforcement for AI agents

https://github.com/trenttrinder1111-byte/zk-irp-firewall
3•trenttrinder111•24m ago•0 comments

A Markdown File Should Just Open

https://joshuamorris.info/notes/2026/10/13/a-markdown-file-should-just-open/
5•TheWoollyBully•26m ago•1 comments

Halloween Gothic Reading Pathway

https://www.betterreads.dev/blog/halloween-gothic-pathway
2•zlu•30m ago•0 comments

AI Agent Observability with OpenTelemetry

https://signoz.io/blog/opentelemetry-ai-agent-observability/
8•dhruv_ahuja•31m ago•0 comments

They Want Your Blood

https://www.theverge.com/column/1015563/blood-death-clock-longevity-apps-health-tech
3•saikatsg•33m ago•0 comments

Show HN: no-fi – a linter for the ASCII wireframes agents draw

https://github.com/p-a-u-l-i-e/no-fi
1•PaulVanOijen•36m ago•0 comments

Turning IPv6 tunnels into programmable delay lines for pulsing DoS

https://blog.apnic.net/2026/10/22/turning-ipv6-tunnels-into-programmable-delay-lines-for-pulsing-...
1•frostbyte7•38m ago•0 comments

Show HN: Aw-1 – Deterministic AST circuit breaker and kernel jail for AI agents

https://github.com/MvikManners/aw1-circuit-breaker
1•MvikVela•38m ago•0 comments

Digital Hygiene (2025)

https://karpathy.bearblog.dev/digital-hygiene/
2•vinhnx•40m ago•0 comments

Claude Code install script is down

https://downloads.claude.ai/claude-code-releases/bootstrap.sh
5•sspross•42m ago•0 comments

Chasing a Flake into OpenSSL's GCM Kloak Path

https://getkloak.io/blog/the-h-that-wasnt-there/
1•neo2006•44m ago•0 comments

Enterprises keep buying software upgrades that IT thinks will make things worse

https://arstechnica.com/information-technology/2026/10/survey-enterprises-waste-28-percent-of-sof...
2•joozio•45m ago•0 comments

"Ignore the Slop"

https://daniel.haxx.se/blog/2026/10/22/ignore-the-slop/
10•asimovDev•47m ago•0 comments

Accrescent: A novel Android app store focused on security, privacy and usability

https://accrescent.app/
1•teekert•51m ago•0 comments

Apple Ordered to Open iPhone to Rival App Stores in Australia

https://forums.macrumors.com/threads/apple-ordered-to-open-iphone-to-rival-app-stores-in-australi...
4•mjy78•53m ago•0 comments

As Politicians Argue About China, US Patients Find Cutting-Edge Treatment There

https://kffhealthnews.org/health-industry/china-cancer-drugs-foreign-travel-pharma-biotech-fda-re...
2•mathgenius•56m ago•0 comments
Open in hackernews

CheerpJ 4.0: WebAssembly JVM for the browser, now with Java 11 and JNI support

https://labs.leaningtech.com/blog/cheerpj-4.0
9•apignotti•1y ago

Comments

palata•1y ago
That's technically pretty cool, but it makes me wonder:

In order to run a Java Desktop app, I need to install a JVM first (or the Desktop app can embed it, I guess that's what IntelliJ does, right?).

Now if I run CheerpJ, it means that I essentially download a JVM when I load the page (every time), and run code in that JVM. But at this point, why not downloading a Desktop app?

It feels like we are going around, shipping simple web pages together with full browsers and calling that "desktop apps" (e.g. ElectronJS), then shipping complete JVMs as web pages and calling that a "web page"... why don't we just ship simple webpages through browsers and complex desktop apps through package managers?

apignotti•1y ago
With CheerpJ you are downloading the subset of the JVM that you need, and actually only once thanks to the standard browser cache.

There are many reasons why shipping via the browser is a better choice compared to shipping desktop apps. The main 3 in my opinion are:

1. Distribution: Give your user a link and the app will start 2. Isolation: The user can have confidence the app won't read his personal files. 3. Cross-platform: Every OS and every device, for real this time

yuri91•1y ago
For reference, when loading https://browsercraft.cheerpj.com for the first time (up to loading a world), my browser downloaded ~32MB.

The second time almost nothing.

jeffreportmill1•1y ago
And here's an entire Java IDE with CheerpJ that downloads less than 15mb:

https://reportmill.com/SnapCode

palata•1y ago
> With CheerpJ you are downloading the subset of the JVM that you need

That's interesting! May I ask how it works? Does that also happen with e.g. IntelliJ?

> Every OS and every device, for real this time

Doesn't the JVM run everywhere in 2025?

apignotti•1y ago
> That's interesting! May I ask how it works? Does that also happen with e.g. IntelliJ?

Byte ranges request do most of the heavy lifting, data is loading exclusively on-demand.

> Doesn't the JVM run everywhere in 2025?

What about iOS? Android has Java, but can't run desktop Java apps. Chromebooks also have limits.

palata•1y ago
> Byte ranges request do most of the heavy lifting, data is loading exclusively on-demand.

I don't understand what that means. The JVM is supposed to interpret and sometimes compile bytecode, right? How can it be done with only a fraction of the JVM?

Or are you saying that it is constantly communicating with a server that does the work?

apignotti•1y ago
The VM itself is very small, it's the OpenJDK runtime that is quite sizeable. Byte ranges are used to only download the parts of the runtime (in terms of bytecode) that are required.

There is no server-side computation. CheerpJ runs code exclusively client-side.

palata•1y ago
But you said before that you only download a subset of the JVM, right? Or did you mean a subset of the JDK, including the JVM and... I guess other stuff?
apignotti•1y ago
I meant the JVM in an extended sense: the combination of the bytecode parsing, JIT compiler and OpenJDK runtime. You are right, I should have been more precise and refer to only the runtime part, which is by far the most significant.
palata•1y ago
I was not trying to prove you wrong, I'm just genuinely interested :-). I don't see a lot of articles about the JVM these days.