frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

NocoBase sandbox escape to root RCE via console object prototype chain

https://anonhaven.com/en/news/ocobase-sandbox-escape-rce-cve-2026-34156/
1•anonhaven•59s ago•0 comments

Raspberry Pi profit surges as AI boom lifts demand

https://www.ft.com/content/5c167591-80bb-4290-ae66-7d04112cbd1c
2•constantinum•2m ago•0 comments

Building More Resilient Local-First Software with ATProto

https://jakelazaroff.com/words/building-more-resilient-local-first-software-with-atproto/
1•kurinikku•3m ago•0 comments

Estimating ISS speed from images using OpenCV (~2–3% error)

https://github.com/BabbaWaagen/AstroPi
1•BabbaWaagen•3m ago•0 comments

Krazam – Offsite Karaoke [video]

https://www.youtube.com/watch?v=s-x_bXO7nzA
1•tart-lemonade•4m ago•0 comments

Strengthening GitLab.com security: Mandatory multi-factor authentication

https://about.gitlab.com/blog/strengthening-gitlab-com-security-mandatory-multi-factor-authentica...
1•tcfhgj•5m ago•0 comments

Nesion – a KV-Cache eviction engine

https://nesion.net
1•CarlosCosta_•5m ago•0 comments

Conductor raises $22M Series A

https://www.conductor.build/blog/series-a
1•Charlieholtz•5m ago•0 comments

Spacecraft Heat Shields Could Violently "Burst" in Alien Atmospheres

https://www.universetoday.com/articles/spacecraft-heat-shields-could-violently-burst-when-plungin...
1•gostsamo•6m ago•0 comments

Show HN: SkillForge – Turn code and docs into instructions AI agents can follow

https://github.com/armelhbobdad/bmad-module-skill-forge
1•tigoo•7m ago•0 comments

Fine Tuning Services Benchmark

https://vintagedata.org/blog/posts/fine-tuning-as-service
2•ydetrois•9m ago•1 comments

AI native Slack/teams: Turning conversations to context

https://venturebeat.com/data/imagine-if-your-teams-or-slack-messages-automatically-turned-into-se...
1•tango12•9m ago•0 comments

Show HN: I Made an Android App to Bridge Google Health Connect to Webhook

https://github.com/mcnaveen/health-connect-webhook/
1•mcnx097•9m ago•0 comments

A Couple Million Lines of Haskell: Production Engineering at Mercury

https://blog.haskell.org/a-couple-million-lines-of-haskell/
1•constantinum•9m ago•0 comments

Using LLMs to amplify human labeling and improve Dash search relevance

https://dropbox.tech/machine-learning/llm-human-labeling-improving-search-relevance-dropbox-dash
1•softwaredoug•10m ago•0 comments

Claude Code Internals: An AI-Assisted Analysis of the Leaked Source

https://victorantos.com/posts/i-pointed-claude-at-its-own-leaked-source-heres-what-it-found/
1•victorbuilds•10m ago•0 comments

Show HN: Margo – Find the font your brain reads fastest

https://margo.fyi/
1•theseidel•12m ago•0 comments

Global Ban on Digital Duties Expires After Stalled Talks at WTO Meeting

https://www.nytimes.com/2026/03/31/business/economy/digital-tax-world-trade-organization.html
1•donohoe•12m ago•0 comments

Show HN: TraceHouse – ClickHouse Monitoring

https://dmkskd.github.io/tracehouse/
1•xxdd2ea•13m ago•0 comments

Some of the most popular graduate degrees don't pay off financially, study finds

https://www.washingtonpost.com/education/2026/03/31/graduate-degree-earnings-study/
2•dberhane•13m ago•1 comments

Show HN: Agent Wellbeing Kit – boundary protection for humans running AI agents

https://github.com/joozio/agent-wellbeing-kit
1•joozio•13m ago•0 comments

The Download: AI health tools and The Pentagon's Anthropic culture war

https://www.technologyreview.com/2026/03/31/1134934/the-download-testing-ai-health-tools-pentagon...
1•joozio•13m ago•0 comments

Ask HN: How do you handle strict rate-limiting on stateless edge workers?

1•rwasimsk•14m ago•1 comments

Explore data across 903 variables about sex, kink, personality and relationships

https://bigkinksurvey.com
1•embedding-shape•14m ago•0 comments

Devil in the grooves: The case against forensic firearms analysis (2023)

https://radleybalko.substack.com/p/devil-in-the-grooves-the-case-against
1•hn_acker•14m ago•0 comments

'Euro-Office': OnlyOffice accuses of license violations

https://www.heise.de/en/news/Euro-Office-OnlyOffice-accuses-of-license-violations-11241334.html
2•76rp•14m ago•0 comments

Autodebug: Telemetry-Driven Inference Optimization Loop

https://graphsignal.com/blog/autodebug-telemetry-driven-inference-optimization-loop/
1•npgraph•15m ago•0 comments

The Spectacle of War and the Struggle to Protest

https://www.newyorker.com/news/fault-lines/the-spectacle-of-war-and-the-struggle-to-protest
1•petethomas•15m ago•0 comments

Claude Code Spinner Verbs

https://github.com/chatgptprojects/claude-code/blob/642c7f944bbe5f7e57c05d756ab7fa7c9c5035cc/src/...
1•oelmgren•17m ago•0 comments

Shifting to AI model customization is an architectural imperative

https://www.technologyreview.com/2026/03/31/1134762/shifting-to-ai-model-customization-is-an-arch...
1•joozio•17m ago•1 comments
Open in hackernews

Tell HN: Chrome says "suspicious download" when trying to download yt-dlp

167•joering2•1h ago
On a newest version, I attempted to download newest yt-dlp only to be warned of "Suspicious Download". No explanation what that means was provided.

Comments

ompogUe•1h ago
So, Google's browser says downloading a tool to download files from Google's servers is "Suspicious"? Not surprising.
schiffern•1h ago
By the same standard, Chrome itself is "a tool to download files from Google's servers." Chrome doesn't only download from Google's servers, but the same thing applies to yt-dlp.

I'm equally not "surprised" by their bad behavior, but that shouldn't stop us from condemning Google for unethically misleading people and engaging in browser monopoly abuse.

---

EDIT: holding up (hilariously) RIAA lawyers as ethical role models only proves my point, thanks.

waffletower•1h ago
I am sure that RIAA lawyers would rofl at this yt-dlp labelling being an example of Google "... unethically misleading people and (committing) browser monopoly abuse". I want to live in that fantasy world with you though.
ddtaylor•35m ago
Come to our fantasy Linux land anytime you want. We circumvent all of the strange things both RIAA, MPAA, Google and many other companies do to attempt to lock information into a box with only one hole they allow you to look through.

Our fantasy land gets better every time your reality gets worse.

dryarzeg•1h ago
> Chrome itself is "a tool to download files from Google's servers."

...legitimately. While Google (I will reinforce: Google, not everyone) sees downloading of the videos and other content from the YouTube by third-party services as illegitimate because of YouTube's ToS. After all, they're making money from the YouTube Premium and "Download" option provided by it, so things like that are kinda expected to happen.

And no, I don't agree that it's right. While I can understand the position of Google, the method they (allegedly) used here... Well... I don't even know what to say. That's plainly wrong, in my opinion. After all, "download" is defined as "To transfer (data or a program) from a central computer or website to a peripheral computer or device." by The American Heritage Dictionary of the English Language (5th Edition), so when you just watch videos, you download them already, don't you? What about watching them in browser, somewhere in embed on some website? Does that constitute a legitimate client (I guess so, because most of embeds still use YouTube Player after all)? That just makes me laugh : )

Habgdnv•1h ago
Actually that is what they want you to believe. Behind the scenes, secretly Chrome is mostly "a tool to upload files to Google's servers" but because it does not require any actions from the user to do that, many people miss that part.
ddtaylor•38m ago
Oops we accidentally stole, indexed and resold all your data. Sorry.
rdevilla•1h ago
It's over. The internet culture of the 20th and early 21st century has been appropriated for profit.
josteink•1h ago
We built it on enthusiasm for enthusiasts and for that reason alone, it became something great.

Then they stole it all for profit.

Probably not the first time in history this has happened.

recursive•1h ago
And hopefully not the last
izzydata•1h ago
The amounts of times someone invented something that was important to them and then never make any money from it only for some other entity to make tons of money from it is way too high.
thesuitonym•1h ago
No it's not, and no it hasn't. That old Internet is still there, you just stopped going to it.
rdevilla•1h ago
You going to assume my gender and race next? The bulk of my output on the internet is not on port 443.
throwaway_19sz•1h ago
You are not under attack. It’s just someone disagreeing with you. Please keep things civil.
rdevilla•1h ago
Where is the incivility? If anything it's coming from those who project their simplistic ideas of others unto the complexity of others' persons to pigeonhole them into their own idiosyncratic mental categories.
jddecker•1h ago
The binaries they offer are complied using PyInstaller, which can give false positives in anti virus software.
TheSkyHasEyes•46m ago
Why would a browser(be designed to) care about this?
g947o•41m ago
You could also ask why Android care about banning side loading to "prevent scams and spyware", and I honestly don't have an answer at all.
reactordev•40m ago
To protect the normies from harmful malware… not on their approved vendor list.
gruez•39m ago
Because people download viruses from the internet all the time? "Common sense antivirus" might work fine if you're technically inclined, but that's not the case for everyone.
rcakebread•38m ago
Because Google owns Youtube.
ddtaylor•39m ago
Google has been anti yt-dlp before it was forked. They also have rules that carve out tools like this from their extension store and at Android, except enforcement is lacking sometimes.

Google is terrified of users having access users control to their video content.

nslsm•20m ago
yt-dlp breaks YouTube’s DRM. They could easily get the repo removed under the DMCA. They don’t.
eis•1h ago
Which link exactly did you try to use? Or what specific version on the Github releases page? I checked both the latest windows and macos versions against Google Safe Browsing and all were fine.
owlninja•1h ago
I can't reproduce this either, OP is light on details.
matheusmoreira•1h ago
Which is why I download it from my Linux distribution's package manager. It's available on Termux too.
waffletower•1h ago
Chrome for work, Safari or Arc for everything else. I envy you if your use of yt-dlp is work related.
iririririr•1h ago
you almost got it rigth. safari and arc are as bad as chrome. arc is just stable-chrome (it will have the same nonsense with a custom ui next release)

firefox sadly is still what you should use.

LollipopYakuza•1h ago
I started giving a try to Zen (based on firefox) a few days ago. I like it especially while heavily relying on a tiling window manager.
jrajav•1h ago
I daily drove Zen for months. The design and implementation are overall fantastic. Unfortunately it still has chronic performance issues, gobbling up CPU randomly - and they don't seem to be too focused on despite it being a commonly reported issue.

I don't want to burn out my battery quicker than usual, so I was forced to switch off. I'm currently trying Orion instead and have been loving it - aside from several poorly implemented websites just not working on it. And the Cloudflare false positives, but that's as much or more an issue on Zen.

johnthedebs•55m ago
Agree with sibling comment as someone who used Zen for many months, maybe as long as a year or two. It constantly breaks and often stays broken in small but fundamentally important ways, to the point that I just switched back to FF last week and am glad to be off the roller coaster. Before Zen I had tried Arc and left for a lot of the same reasons.

For all of the (valid) criticism against FF, it's still the best available browser that's not just an experiment IMHO.

Edit to add: part of the switch back is that FF now supports, to some degree, all the features I was using Zen for: vertical tabs (needs customization but works well enough), custom search "engines" (ie, shortcuts), split view, not-Chrome

jrajav•1h ago
Why is Safari as bad as Chrome?
bigyabai•34m ago
Website compatibility is inconsistent, extension compatibility is a slog, the desktop UI is confusing and nonstandard, WebKit itself is woefully incomplete, and on non-Apple platforms WebKit barely works covers conformance tests even with hardware acceleration disabled.

I don't use macOS anymore, but when I did I used Firefox without missing out on anything Safari would have given me. Now that I've abandoned macOS I don't think I can name one advantage of installing a WebKit browser on my system versus something Chromium-based.

john_strinlai•1h ago
for what it is worth, when downloading the latest .exe from github, firefox says "this file is not commonly downloaded" and i have to select "allow download".

scans of it are fine.

probably just a heuristic-based false-positive, and not a news-worthy story of chrome abusing their monopoly or whatever.

miki_oomiri•46m ago
Isn’t firefox using Google “safe browsing” database ?
NiloCK•1h ago
Interesting to inspect any telemetry on this. Could end up on a list.
alsetmusic•1h ago
Reminds me of how Bing search for Google takes people to a page meant to resemble Google.com. Can't trust huge companies.

But as others have pointed out, it's probably a coincidence in this case. But who knows.

ddtaylor•42m ago
"Never let a good tragedy go to waste"
jesse23•1h ago
`brew install yt-dlp` or `scoop install yt-dlp` :)
bigyabai•1h ago
Yep. Never send a web browser to do a package manager's job.
faangguyindia•57m ago
It's funny such a big corporations can't let such a small tool live.

Google is such an evil company, it is not even provided anything great anymore.

Anti-gravity paid plans suck, GCP is billing heavy. Today google sucks at most things

Their Android playstore hardly updates statistics once a day, so much for such a big data company with unlimited sources lol

asveikau•50m ago
The heuristics powering this, as well as the Windows Defender whitelisting, are terrible.

My understanding is that a specific binary needs to become popular for it to stop being flagged. This creates a chicken and egg problem. Users are not incentivized to use the program with the warning. But removing the warning requires many people to ignore the warning.

This is a big problem for anyone writing Windows software. An indie developer or small open source project is not going to do well with this.

Frotag•29m ago
Conveniently M$ lets you buy a signing certificate to fix this.

https://stackoverflow.com/questions/48946680/how-to-avoid-th...

asveikau•26m ago
Last I checked they can still quarantine your binary if it's properly signed and they decided it hasn't gained traction.
gruez•16m ago
>My understanding is that a specific binary needs to become popular for it to stop being flagged. This creates a chicken and egg problem.

Given the recent npm axios compromise this sounds like a pretty smart move?

ddtaylor•43m ago
Linux user here unaffected as I get it straight from my command line.
sleepybrett•41m ago
break this shit up, break all of this shit up.

Google needs to be at least what four companies.. gcp, youtube, search, workspaces...

Apple needs to be at least two hardware/os, music/tv+

Microsoft, meta, etc, Monopolies are bad and our SEC/FTC/Government is doing a poor job of controlling them. At least as equally trecherous are these businesses that overly vertically integrate... anyways, we're fucked.

nnevatie•36m ago
You wouldn't download a downloader.
throwaway85825•35m ago
Clear conflict of interest enabled by anti trust not being enforced.
fortran77•21m ago
Firefox gives a similar warning.