frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

The EU must uphold hard-won protections for digital human rights [pdf]

https://edri.org/wp-content/uploads/2025/11/The-EU-must-uphold-hard-won-protections-for-digital-h...
2•doener•3m ago•0 comments

Crushed by capitalism? There's a video game for that

https://www.ft.com/content/5b223e7a-3161-4f03-a577-557e9947618b
2•hhs•4m ago•0 comments

Show HN: Infinite canvas product search and decision making

https://onton.com/surfaces
4•kar_t•4m ago•0 comments

Strict and full Turkish get-up [video]

https://www.youtube.com/shorts/wXWSjSwjGuA
1•programmexxx•5m ago•0 comments

Big Tech Wants Direct Access to Our Brains

https://www.nytimes.com/2025/11/14/magazine/neurotech-neuralink-rights-regulations.html
3•bookofjoe•5m ago•1 comments

Remote access, real cargo: cybercriminals targeting trucking and logistics

https://www.proofpoint.com/us/blog/threat-insight/remote-access-real-cargo-cybercriminals-targeti...
1•gnabgib•6m ago•0 comments

AI Generated Pokemon Sprites with GPT-2

https://matthew.rayfield.world/articles/ai-generated-pokemon-sprites-with-gpt-2/
1•novaray•12m ago•0 comments

Justice Department Announces Actions to Combat Illicit NK Revenue Generation

https://www.justice.gov/opa/pr/justice-department-announces-nationwide-actions-combat-illicit-nor...
1•miohtama•12m ago•0 comments

Cybercom 2.0: Pentagon Unveils Plan to Fix Cyber Talent Shortfalls

https://www.securityweek.com/cybercom-2-0-pentagon-unveils-plan-to-fix-cyber-talent-shortfalls/
1•Bender•13m ago•0 comments

Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability

https://www.securityweek.com/fortinet-confirms-active-exploitation-of-critical-fortiweb-vulnerabi...
1•Bender•14m ago•0 comments

Multi-day storm is threatening flooding and mudslides in Southern California

https://www.cnn.com/2025/11/14/weather/southern-california-storm-flooding-risk-climate-hnk
1•Bender•14m ago•0 comments

There's No Rust on This Ironclad Kernel

https://hackaday.com/2025/11/12/theres-no-rust-on-this-ironclad-kernel/
1•ajdude•15m ago•0 comments

DNS Resolution Delay: The Silent Killer That Blocks Your Threads

https://howtech.substack.com/p/dns-resolution-delay-the-silent-killer
1•birdculture•15m ago•0 comments

Show HN: JSON Schema → Luau type converter (Rust)

https://github.com/amirfarzamnia/json-schema-to-luau
2•amirfarzamnia•17m ago•1 comments

Brexit reduced UK GDP by 6-8%, investments by 12-18% [pdf]

https://www.nber.org/system/files/working_papers/w34459/w34459.pdf
1•jnord•21m ago•0 comments

Firebase's new guide to securing AI endpoints

https://firebase.blog/posts/2025/11/securing-ai-endpoints-from-abuse/
1•jacobalcock•21m ago•0 comments

Lupus may be caused by the common Epstein-Barr virus, study finds

https://www.nbcnews.com/health/health-news/lupus-cause-epstein-barr-virus-study-rcna243364
1•jnord•24m ago•0 comments

Maintaining the Fastest CDN at Netflix on FreeBSD

https://freebsdfoundation.org/netflix-case-study/
2•program•25m ago•0 comments

The short, happy reign of CD-ROM

https://www.fastcompany.com/91128052/history-of-cd-roms-encarta-myst
1•ohjeez•25m ago•0 comments

Show HN: CodeMode – First library for tool calls via code execution

https://github.com/universal-tool-calling-protocol/code-mode
1•juanviera23•27m ago•0 comments

Why isn't everyone using Cerebras?

2•tghack•28m ago•0 comments

Hacker Stations

https://hackerstations.com
1•bookofjoe•31m ago•0 comments

I got scammed for $157 000 for trying to revive my favorite videogame

https://phack-the-publisher.com/en/
1•COMMENT___•33m ago•0 comments

Hackers and crime rings are teaming up to steal cargo, cyber firm says

https://www.japantimes.co.jp/news/2025/11/03/world/hackers-crime-rings-steal-cargo/
1•PaulHoule•36m ago•0 comments

His Legal Name Is One Letter–Airline Rejects It and Says 'Just Call Yourself AA'

https://viewfromthewing.com/his-legal-name-is-one-letter-the-airline-rejects-it-and-says-just-cal...
4•georgecmu•37m ago•0 comments

Washington Court: Data Captured on Flock Safety Cameras Are Public Records

https://www.eff.org/deeplinks/2025/11/washington-court-rules-data-captured-flock-safety-cameras-a...
1•hn_acker•44m ago•1 comments

Jimmy Wales, Co-Founder of Wikipedia, quits interview angrily after one question

https://old.reddit.com/r/interesting/comments/1ox0lkz/jimmy_wales_cofounder_of_wikipedia_quits/
1•martinlaz•52m ago•1 comments

Facts that might mess with your sense of time

https://www.datawrapper.de/blog/historic-events-time-overlap
2•glitchdout•54m ago•0 comments

USDA head says 'everyone' on SNAP will now have to reapply

https://thehill.com/homenews/administration/5606715-agriculture-secretary-snap-reapply/
24•sipofwater•54m ago•31 comments

Developers Can Choose the Right AI Coding Tool Without Feeling Overwhelmed

https://practicalsecurity.substack.com/p/the-complete-2025-guide-to-ai-coding
1•atilla_bilgic•54m ago•0 comments
Open in hackernews

CheerpJ 4.1: Java in the browser, now supporting Java 17 (preview)

https://labs.leaningtech.com/blog/cheerpj-4.1
120•pjmlp•5mo ago

Comments

letters90•5mo ago
The minecraft demo is quite impressive

https://browsercraft.cheerpj.com/

apignotti•5mo ago
Thanks. Architecturally, beside the unmodified Minecraft and LWJGL jars, this demo uses the original JNI code from LWJGL, compiled from C++ to WebAssembly.
90s_dev•5mo ago
Clever.

Java seems to have come a long way since 2015. Might be worth looking into, if only I could find a page that summarizes every new language feature.

_old_dude_•5mo ago
Java Almanac has a list of all features https://javaalmanac.io/features/

And the main page let you compare API versions https://javaalmanac.io/

creatonez•5mo ago
I love this... but I've grown disappointed by these technically impressive demos, now that older Minecraft running in WASM is no longer novel ever since Eaglercraft came out. As per the readme:

> The latest version of Minecraft. Newer releases of Minecraft use a newer version of Java and OpenGL which we currently do not support. [...] This demo demonstrate these capabilities by running an older version (1.2.5) of Minecraft and LWJGL entirely in the browser.

Sadly, no one seems to be able to get past Minecraft 1.5, which was released in 2013 :(

Edit: Hmm... not sure when this happened, but Eaglercraft supports 1.12 (2017) now. Neat! Might be hard to go further than that, since modern Minecraft uses Java 21 / OpenGL 3.2, and LWJGL itself has evolved significantly in its platform APIs.

apignotti•5mo ago
As a matter of fact we have internally achieved 1.16.5.

The Java side of things works out-of-the-box, but LWJGL3 JNI code uses some subtle techniques that are yet supported in public builds of CheerpJ.

Now that we have Java 17 support we expect to be able to move even further.

bufferoverflow•5mo ago
Works on my smartphone. That's wild.
boomskats•5mo ago
"Ha! I KNEW it! WebAssembly literally IS just a reinvention of the JVM!!1"

Wouldn't it be funny, after all that sandboxing and component modelling, if it was JNI and SwingSet3 that finally made enterprise Wasm a thing?

(also this is impressive, great job)

txdv•5mo ago
It compiles to JavaScript and not wasm AFAIK
apignotti•5mo ago
The target of the JIT compiler is indeed JavaScript, since WasmGC is still too limited.

This is fundamentally an implementation detail though, when we adopt WasmGC there will be no user visible change beside a potential performance improvement

dunham•5mo ago
How do you deal with numbers? Javascript doesn't do 64-bit numbers and naively multiplying 32-bit numbers can loose lower bits. If I remember right GWT used two numbers to represent 64-bit and ignored the 32-bit issue.
apignotti•5mo ago
BigInts are the current solution. There are other solutions as well.
txdv•5mo ago
Can you point out the limitations?
lesuorac•5mo ago
Java Applets probably would've snuffed out WASM if it was added into a browser by default (instead of an extension).

However, they were pretty insecure and caused a ton of problems for the browser [1] and I'm guessing Oracle had no interest in providing free work in a secure solution. So they got eliminated.

[1]: https://blog.chromium.org/2013/09/saying-goodbye-to-our-old-...

hawk_•5mo ago
This is incredible. Kudos to the team behind it. This requires knowing both the browser and JVM quite well.

I do wonder though why Oracle doesn't seem interested in building or acquiring some JVM in the browser.

devrandoom•5mo ago
> why Oracle doesn't seem interested

It doesn't come with any lucrative extortion options to squeeze millions out of enterprises.

hawk_•5mo ago
There ought be a fair amount of legacy Java code sitting in enterprises that they would be willing to pay for an Oracle® seal of approval for running parts in the browser.

May be they are aiming for graalvm to be the answer eventually. (actually I don't know whether graalvm in the browser is effectively aot and brings all the reflection/dynamic code issues with it.) Curious if someone knowledgeable in that ecosystem knows.

maratc•5mo ago
> I do wonder though why Oracle doesn't seem interested

And then what? Everybody would write Java code and run their ... not quite "apps" but we can call it app-lets -- in the browser, so that "write once run everywhere" could be achieved?

mooreds•5mo ago
Nooo! I spent a summer in college writing physics education applets. The scars are still there.

Seriously, I do wonder what the real value of some of this WASM stuff is. I mean, seems cool to run a java (or rust or <insert language here>) app in the browser, but what is the real world use case? If I run an app in the browser, I still have to do all the server side business validation because "you should never trust the client".

What am I missing?

Edit: on reading other comments, apparently this is direct-to-js compilation, not WASM. The intent of the comment still stands.

mickael-kerjean•5mo ago
For my use case of building Filestash, WASM is a game changer in those 2 areas:

1. use libraries from ecosystem outside JS. In the past few months, I've added support for file types like psd, dbf, arrow, parquet and about 50 more. To give a concrete example: https://www.filestash.app/tools/parquet-viewer.html WASM open up a very exciting door. In the same idea, I stumbled upon a couple JAVA only libraries which I would love to ship on a browser and not have to create web service to interact with those.

2. enable third party to make plugin that can run in my app in a safe way. In my case, plugins are zip files containing a bunch of assets and the WIP piece is to be able to put wasm in there that will run server side without giving those plugins a blank check for acting crazy.

mooreds•5mo ago
Thanks, that's super helpful. For #2, do you run the WASM plugins in a sandboxed browser?
jeffreportmill1•5mo ago
I totally agree with this! Oracle still spends time and money promoting Java client, and the browser is now the largest client platform. They could really revitalize Java client by backing CheerpJ.
soco•5mo ago
I don't see what for me would be the key document: how is this technology addressing the plethora of reasons which made the applets fail.
apignotti•5mo ago
Applets were executed completely outside of the browser sandbox. An absolute disaster from the security standpoint.

CheerpJ is effectively just a very sophisticated JavaScript/WebAssembly library and it plays by the rules of the browser sandbox.

sunshine-o•5mo ago
> Applets were executed completely outside of the browser sandbox. An absolute disaster from the security standpoint.

It is easy to forget Java (applets, web start) was a thing during the Windows 98 era, meaning a time when there was (almost?) no security. People were downloading and running random .exe files all the time.

There was no browser sandboxing and you could run wild Basic code in IE.

Sun with Java were the first one to try to solve that problem. It was imperfect but way better than what others were doing at the time.

rst•5mo ago
WASM has a better security sandbox. (Designed in from the beginning, not the thousand-fingers-in-the-dike retrofit that was the Java SecurityManager -- which was eventually deprecated and abandoned along with the Applet tech it was intended to support.)
afavour•5mo ago
I’d imagine the biggest one is that it doesn’t require the user to have installed a Java runtime on their computer.
maratc•5mo ago
Applets didn’t fail because of missing JRE, it was included in IE. It was only after Microsoft started playing around with the implementation that Sun asked them to stop, which they did. Only then did a missing JRE become an issue.
matsemann•5mo ago
Wow, seriously impressive. GWT had so many drawbacks this seems to solve (like everything with reflection not working).

Since it's the runtime being ran on wasm, does this also allow for kotlin, clojure, scala etc as long as it's valid bytecode?

apignotti•5mo ago
Yes, any JVM language should work. We did some experiments with Kotlin specifically in the past.
matsemann•5mo ago
Thanks! I know kotlin has a JS target, but being able to just deploy the software as-is without a separate codebase for the interface, dealing with all the differences of the platforms etc is something else entirely. Very cool.
quaintdev•5mo ago
They ran freaking Intellij IDE inside the browser. Insane!
Alifatisk•5mo ago
That's actually very impressive, wow
gwbas1c•5mo ago
> CheerpJ can run existing, full Java applications from unmodified JARs, with no recompilation or pre-processing, straight from bytecode.

I'm kind of curious what limitations happen with networking?

As far as I know, there's no way to do direct socket / network IO in WASM. (IE, you need to use the fetch API.) Likewise, what if a jar uses HTTP, but uses an HTTP library that uses sockets?

apignotti•5mo ago
CheerpJ does out-of-the-box support HTTP/HTTPS requests using fetch when the application uses the standard Java UrlConnection APIs. Of course the requests must be to the same domain (which a common case) or to a domain which is CORS enabled, since CheerpJ is subject to the same limitations as any other JavaScript library.

For more general cases our Tailscale integration is required. For more information see: https://cheerpj.com/docs/guides/Networking

jeffreportmill1•5mo ago
I need to check out the tailscale solution, although CheerpJ also makes it trivial to plug in a proxy server, which I currently do in my app that supports cross origin.
apignotti•5mo ago
I see the post has been killed by moderators. I would like to be contacted to discuss why this is the case. Our content is of obvious interest to the community and we always engage in productive ways.

What is the problem here?

Alifatisk•5mo ago
How has it been killed by mods?
apignotti•5mo ago
Sent straight down to 3rd page from the very first position in home. I assume there must be some internal "send this down to hell" button.
ConfusedDog•5mo ago
Not OP here, but it did disappear from the frontpage. I was still pondering about it and left this tab open... frankly I can't think of a good use case for it besides making legacy java apps available via browser. For gaming, I'd probably still use Unity or other game engines. For app development, I probably not gonna develop on Java 11 again which the support gonna be ending in 2026. I'm impressed by this project though.
apignotti•5mo ago
The legacy use case is indeed very important, but there are many other opportunities that can come from using Java libraries as part of Web apps.

CheerpJ provide "Library mode": an API to natively interact with Java objects from JavaScript: https://cheerpj.com/docs/guides/library-mode

CheerpJ also support Java 17 (currently in preview) and LTS parity is scheduled for next year.

gavinray•5mo ago
Being able to access the entirety of the JVM ecosystem of libraries from JS without glue code is kind of insane.
ConfusedDog•5mo ago
Yes, I'm super impressed by that.
jeffreportmill1•5mo ago
I use CheerpJ to do new development that is spectacularly cross-platform, runs native on all the major platforms and everywhere else in the browser with a single code base. I don't think there are too many alternatives for that and I suspect Java + CheerpJ is one of the best.

https://reportmill.com/SnapCode

ConfusedDog•5mo ago
This is really great! Thanks for sharing.
gavinray•5mo ago
It could be that it got upvoted so rapidly it triggered vote-spam detection.

I don't think mods hand-downrank posts to certain pages.

apignotti•5mo ago
I suspect something else is amiss here, since it is not the first time this happens.

And, in full transparency, we don't engage in any manipulation of upvote count.

We try to play as fair as possible here and in other communities.

Alifatisk•5mo ago
I once wanted to port a little Java application (with no libs except JavaFX) to the web, so I converted it into Dart lang and then compiled it to the web, a bit painful but cool thing.

CheerpJ might be better solution next time.

nopcode•5mo ago
Interesting how this is perceived as impressive (and it is!), but we had runescape running in the browser over 20 years ago already.