frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Poland to probe possible links between Epstein and Russia

https://www.reuters.com/world/poland-probe-possible-links-between-epstein-russia-pm-tusk-says-202...
1•doener•7m ago•0 comments

Effectiveness of AI detection tools in identifying AI-generated articles

https://www.ijoms.com/article/S0901-5027(26)00025-1/fulltext
1•XzetaU8•13m ago•0 comments

Warsaw Circle

https://wildtopology.com/bestiary/warsaw-circle/
1•hackandthink•14m ago•0 comments

Reverse Engineering Raiders of the Lost Ark for the Atari 2600

https://github.com/joshuanwalker/Raiders2600
1•pacod•19m ago•0 comments

The AI4Agile Practitioners Report 2026

https://age-of-product.com/ai4agile-practitioners-report-2026/
1•swolpers•20m ago•0 comments

Digital Independence Day

https://di.day/
1•pabs3•24m ago•0 comments

What a bot hacking attempt looks like: SQL injections galore

https://old.reddit.com/r/vibecoding/comments/1qz3a7y/what_a_bot_hacking_attempt_looks_like_i_set_up/
1•cryptoz•25m ago•0 comments

Show HN: FlashMesh – An encrypted file mesh across Google Drive and Dropbox

https://flashmesh.netlify.app
1•Elevanix•26m ago•0 comments

Show HN: AgentLens – Open-source observability and audit trail for AI agents

https://github.com/amitpaz1/agentlens
1•amit_paz•27m ago•0 comments

Show HN: ShipClaw – Deploy OpenClaw to the Cloud in One Click

https://shipclaw.app
1•sunpy•29m ago•0 comments

Unlock the Power of Real-Time Google Trends Visit: Www.daily-Trending.org

https://daily-trending.org
1•azamsayeedit•31m ago•1 comments

Explanation of British Class System

https://www.youtube.com/watch?v=Ob1zWfnXI70
1•lifeisstillgood•32m ago•0 comments

Show HN: Jwtpeek – minimal, user-friendly JWT inspector in Go

https://github.com/alesr/jwtpeek
1•alesrdev•35m ago•0 comments

Willow – Protocols for an uncertain future [video]

https://fosdem.org/2026/schedule/event/CVGZAV-willow/
1•todsacerdoti•36m ago•0 comments

Feedback on a client-side, privacy-first PDF editor I built

https://pdffreeeditor.com/
1•Maaz-Sohail•40m ago•0 comments

Clay Christensen's Milkshake Marketing (2011)

https://www.library.hbs.edu/working-knowledge/clay-christensens-milkshake-marketing
2•vismit2000•47m ago•0 comments

Show HN: WeaveMind – AI Workflows with human-in-the-loop

https://weavemind.ai
9•quentin101010•53m ago•2 comments

Show HN: Seedream 5.0: free AI image generator that claims strong text rendering

https://seedream5ai.org
1•dallen97•54m ago•0 comments

A contributor trust management system based on explicit vouches

https://github.com/mitchellh/vouch
2•admp•56m ago•1 comments

Show HN: Analyzing 9 years of HN side projects that reached $500/month

3•haileyzhou•57m ago•1 comments

The Floating Dock for Developers

https://snap-dock.co
2•OsamaJaber•58m ago•0 comments

Arcan Explained – A browser for different webs

https://arcan-fe.com/2026/01/26/arcan-explained-a-browser-for-different-webs/
2•walterbell•59m ago•0 comments

We are not scared of AI, we are scared of irrelevance

https://adlrocha.substack.com/p/adlrocha-we-are-not-scared-of-ai
1•adlrocha•1h ago•0 comments

Quartz Crystals

https://www.pa3fwm.nl/technotes/tn13a.html
2•gtsnexp•1h ago•0 comments

Show HN: I built a free dictionary API to avoid API keys

https://github.com/suvankar-mitra/free-dictionary-rest-api
2•suvankar_m•1h ago•0 comments

Show HN: Kybera – Agentic Smart Wallet with AI Osint and Reputation Tracking

https://kybera.xyz
3•xipz•1h ago•0 comments

Show HN: brew changelog – find upstream changelogs for Homebrew packages

https://github.com/pavel-voronin/homebrew-changelog
1•kolpaque•1h ago•0 comments

Any chess position with 8 pieces on board and one pair of pawns has been solved

https://mastodon.online/@lichess/116029914921844500
2•baruchel•1h ago•1 comments

LLMs as Language Compilers: Lessons from Fortran for the Future of Coding

https://cyber-omelette.com/posts/the-abstraction-rises.html
3•birdculture•1h ago•0 comments

Projecting high-dimensional tensor/matrix/vect GPT–>ML

https://github.com/tambetvali/LaegnaAIHDvisualization
1•tvali•1h ago•1 comments
Open in hackernews

Ask HN: Open framework for generating thumbnails on untrusted files?

2•dafelst•3mo ago
Hi HN - for part of a project I'm working on, I need to generate previews/thumbnails of files that may be untrusted. This would be across a variety of file types (the usual suspects like graphics files, documents, video), but also ideally is easily extended with downloadable "handlers" such that more obscure file types can be handled at run-time. Ideally the result is cross-platform in that it can be run on windows/linux/osx clients, but also on server infra (e.g. cloudflare workers).

I have searched the web and github (and had ChatGPT do that too) and while there are some frameworks out there like `preview-generator` in the python ecosystem and `thumbnailator`, they all seem to shell out to native handlers. While native handlers are all well and good and there are good examples for extensible plugin systems with native code, it does complicate things for runtime extensibility.

My initial thought was to define a simple function API and have the "handlers" implemented in WebAssembly such that they can be loaded and runtime and effectively sandboxed, one shot stream processors.

Does anyone know if anything project like this already exists, or does anyone have any advice?

Comments

fsflover•3mo ago
Perhaps you may be interested in Qubes OS, security-oriented OS, which allows to convert untrusted images to trusted ones using a disposable VM: https://github.com/QubesOS/qubes-app-linux-img-converter/blo...
dafelst•3mo ago
This is very cool, thank you. Spinning up a dedicated VM for this seems very heavyweight though, especially on client machines.
fsflover•3mo ago
https://roscidus.com/blog/blog/2021/03/07/qubes-lite-with-kv...
coobird•3mo ago
Hi, author of Thumbnailator here.

Just FYI, Thumbnailator itself doesn't delegate processing to native processing -- it's just a wrapper around Java's Image I/O[1] functionality. In other words, it delegates the compression/decompression to loaded Image I/O plugins, hence, whether native processes are used depends on those plugins.

In terms of cross-platform support, the default Image I/O plugins that come with Java shouldn't be much of a concern. For 3rd party ones, IIRC there are some that will use native libraries, while others are pure Java. One good library on the Image I/O plugins front is TwelveMonkeys ImageIO[2], which provides plugins to support a wide variety of image formats.

1: https://docs.oracle.com/javase/8/docs/technotes/guides/image...

2: https://github.com/haraldk/TwelveMonkeys