frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open-Source AI-Native Web Server

https://github.com/okba14/NeuroHTTP
1•el_hacker•42s ago•0 comments

Secure Boot bypass risk threatens nearly 200k Linux Framework laptops

https://www.bleepingcomputer.com/news/security/secure-boot-bypass-risk-on-nearly-200-000-linux-fr...
1•cheschire•2m ago•0 comments

Are AI coding tools fundamentally changing Agile/team software development?

1•justdep•3m ago•0 comments

Athlete-Owned Media: Owning the Narrative

https://www.mediaimpactproject.org/sports.html
1•PaulHoule•3m ago•0 comments

Synthetic kratom is exploding in California

https://www.sfgate.com/bayarea/article/synthetic-kratom-addiction-and-ban-california-21076514.php
1•tqi•3m ago•0 comments

Bare Metal (The Emacs Essay)

https://waxbanks.wordpress.com/2025/08/01/bare-metal-the-emacs-essay/
1•hpaone•5m ago•0 comments

Show HN: BuzEntry – your apt buzzer answers itself

1•deephire•5m ago•0 comments

The state of the US econonomy hinges on rare earth minerals from China

https://prospect.org/world/2025-10-14-china-trump-tariffs-rare-earth-minerals/
2•jbrins1•6m ago•0 comments

Claude Commands: Build Predictable AI Coding Workflows

https://www.msthgn.com/articles/closing-the-loop-claude-commands-for-predictable-ai-workflows
2•msthgn•9m ago•0 comments

Governor vetoes California bill banning cookware with PFAS

https://www.theguardian.com/us-news/2025/oct/14/california-pfas-ban-gavin-newsom
1•Jimmc414•10m ago•0 comments

The data model behind notion

https://www.notion.com/blog/data-model-behind-notion
1•olayiwoladekoya•11m ago•0 comments

An angry rant about locales and filenames in libarchive

https://github.com/mpv-player/mpv/commit/1e70e82baa9193f6f027338b0fab0f5078971fbe
1•fanf2•13m ago•0 comments

Nextcloud withdraws European Commission OneDrive complaint

https://www.theregister.com/2025/10/09/nextcloud_withdraws_ec_onedrive_bundling/
2•raybb•16m ago•0 comments

Field Guide to TSL and WebGPU

https://blog.maximeheckel.com/posts/field-guide-to-tsl-and-webgpu/
1•barremian•17m ago•0 comments

Do You Have to Stop Using Windows 10?

https://www.wired.com/story/do-you-really-have-to-stop-using-windows-10/
2•01-_-•17m ago•0 comments

I Managed to Grow Countable Yeast Colonies

https://chillphysicsenjoyer.substack.com/p/i-managed-to-grow-countable-yeast
2•crescit_eundo•19m ago•0 comments

Surveillance Secrets

https://www.lighthousereports.com/investigation/surveillance-secrets/
3•_tk_•19m ago•0 comments

The .NET Security Group

https://devblogs.microsoft.com/dotnet/announcing-dotnet-security-group/
4•mikece•21m ago•0 comments

Key Analyst Says U.S. Is 'Going Broke' Under Trump

https://www.thedailybeast.com/key-jpmorgan-analyst-david-kelly-says-us-is-going-broke-under-trump/
4•mdhb•22m ago•0 comments

Why Is SQLite Coded in C and not Rust

https://www.sqlite.org/whyc.html
7•plainOldText•23m ago•0 comments

Show HN: Pathwave.io – MCP and mobile app to manually approve AI actions

https://web.pathwave.io/docs
1•felipe-pathwave•24m ago•0 comments

Certain processed foods and beverages linked to declines in brain health

https://news.vt.edu/articles/2025/09/clahs-food-cognition-research.html
1•01-_-•25m ago•0 comments

Echoes of Humanity: A Glimpse of a Hopeful Tomorrow

https://www.denoise.digital/echoes-of-humanity-a-glimpse-of-a-hopeful-tomorrow/
1•RevillWeb•27m ago•1 comments

U.S. Sanctions Cambodian Conglomerate, Citing Role in 'Pig-Butchering' Scams

https://www.wsj.com/business/u-s-sanctions-cambodian-conglomerate-citing-role-in-pig-butchering-s...
3•paulpauper•27m ago•0 comments

Tesla FSD will drive straight into the path of a oncoming train

https://bsky.app/profile/realdanodowd.bsky.social/post/3lz6hi4isik2y
3•Veserv•29m ago•0 comments

Show HN: Nofan Framework 16 Fan Controller

https://github.com/laktak/nofan
2•laktak•31m ago•0 comments

How everyday tech is training us to accept constant surveillance Seattle

https://www.axios.com/local/seattle/2025/10/14/surveillance-normalization-privacy-law-doorbell-ca...
5•rbanffy•31m ago•1 comments

What Declining Cardboard Box Sales Tell Us About the US Economy

https://www.bloomberg.com/news/articles/2025-08-14/cardboard-box-sales-fall-in-worrying-sign-for-...
3•susiecambria•33m ago•2 comments

JerryRigEverything: My Pixel 10 Pro Fold Exploded – Caught Live on Camera[video]

https://www.youtube.com/watch?v=8uS90jakOuw
2•Ralfp•33m ago•0 comments

Signed Backdoor Hiding in Plain Sight on Framework Devices

https://eclypsium.com/blog/bombshell-the-signed-backdoor-hiding-in-plain-sight-on-framework-devices/
5•jovial_cavalier•33m ago•0 comments
Open in hackernews

Ask HN: Open framework for generating thumbnails on untrusted files?

2•dafelst•3h ago
Hi HN - for part of a project I'm working on, I need to generate previews/thumbnails of files that may be untrusted. This would be across a variety of file types (the usual suspects like graphics files, documents, video), but also ideally is easily extended with downloadable "handlers" such that more obscure file types can be handled at run-time. Ideally the result is cross-platform in that it can be run on windows/linux/osx clients, but also on server infra (e.g. cloudflare workers).

I have searched the web and github (and had ChatGPT do that too) and while there are some frameworks out there like `preview-generator` in the python ecosystem and `thumbnailator`, they all seem to shell out to native handlers. While native handlers are all well and good and there are good examples for extensible plugin systems with native code, it does complicate things for runtime extensibility.

My initial thought was to define a simple function API and have the "handlers" implemented in WebAssembly such that they can be loaded and runtime and effectively sandboxed, one shot stream processors.

Does anyone know if anything project like this already exists, or does anyone have any advice?

Comments

fsflover•2h ago
Perhaps you may be interested in Qubes OS, security-oriented OS, which allows to convert untrusted images to trusted ones using a disposable VM: https://github.com/QubesOS/qubes-app-linux-img-converter/blo...