frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

OSS, security and Funding: libjpeg-turbo

4•ternaus•50m ago
libjpeg-turbo is behind nearly every image you see on your computer, phone or any other digital screen.

I also use it during computer vision model training. Every image that goes through my model, should be decoded.

At some point I did a benchmark of python libraries that decode JPEG images https://github.com/ternaus/imread_benchmark

All top libraries use libjpeg-turbo.

The library is heavily optimized => I made a PR with a small improvement of 3%. Not groundbreaking, but small is better than nothing.

The PR was refused.

> That is not compelling enough to justify the potential disruption. Huffman decoding and partial image decompression have been the source of a disproportionate number of security issues found in the library over the years.

> Google contributed the partial image decompression feature in 2015, but I continue to have to spend unpaid hours fixing it 11 years later (including 18 unpaid hours fixing #915 a few weeks ago) while Google is ghosting me on a security patch rewards payment I earned six months ago.

> Meanwhile, the libjpeg-turbo General Fund is so far in debt that it will take until 2028 before it is replenished at the current rate of replenishment, and that assumes that I don't have to spend a lot more unpaid hours fixing newly discovered bugs.

> Playing at the margins like this unfortunately isn't a good fit for a project like libjpeg-turbo that is so heavily scrutinized and chronically underfunded.

----

I.e. Nearly everyone who uses internet uses libjpeg-turbo every day, but very impactful work goes unpaid.

P.S. Looked for a way to donate some money via GitHub sponsors, but did not find such an option.

P.P.S. And now, when rewriting other people's software with LLMs became easy... Long live OSS.

Comments

ternaus•49m ago
https://github.com/libjpeg-turbo/libjpeg-turbo/issues/918#is...
socialnewss•44m ago
great

We reviewed package-manager ambiguity in 10 public repos

https://www.zfinia.com/research/crosscheck-field-validation
1•Aussie155•1m ago•0 comments

A folding stepladder from fence timber

https://blog.oxplot.com/a-folding-stepladder-from-fence-timber/
1•oxplot•2m ago•0 comments

You could have built Jev

https://sgnt.ai/p/jev/
1•andsoitis•3m ago•0 comments

What Sun Got Wrong

https://bcantrill.dtrace.org/2026/09/20/what-sun-got-wrong/
1•tosh•4m ago•0 comments

How Notion handles concurrent editing with CRDTs

https://www.notion.com/blog/how-notion-handles-concurrent-editing-with-crdts
2•signa11•8m ago•0 comments

Faraday Learns to Reason

https://medium.com/@vektormemory/vektor-v1-9-4-real-tools-for-desk-chat-faraday-learns-to-reason-...
2•vektormemory•11m ago•0 comments

Far-left party wins Berlin election, pledging to nationalise housing

https://www.reuters.com/world/far-left-party-wins-berlin-election-pledging-nationalise-housing-20...
2•theanonymousone•14m ago•0 comments

AurionMail: E2EE suite (CryptPad and Mail) with user-friendly single-password UX

https://aurionmail.github.io/docs/
1•polo46•18m ago•0 comments

Polars 2.0.0rc2

https://pypi.org/project/polars/2.0.0rc2/
1•vismit2000•20m ago•0 comments

Show HN: I wrote the code and let an LLM review it

https://blog.jaysinh.dev/2026/09/20/i-wrote-the-mcp-server-and-let-an-llm-review-it.html
1•jaysinhp•23m ago•0 comments

Where Motion Is Mistaken for Movement

https://medium.com/@gurvinder372/article-21-where-motion-is-mistaken-for-movement-396f1628874b
1•gps372•24m ago•0 comments

DeltaTensors: Git for model fine-tunes that also saves you storage

1•AaravGaur•24m ago•0 comments

Compsci grads facing recession-like job prospects thanks to AI

https://www.theregister.com/ai-and-ml/2026/09/18/compsci-grads-facing-recession-like-job-prospect...
1•pjmlp•26m ago•0 comments

A Cute Proof That Makes e Natural

https://poshenloh.com/e
2•andsoitis•30m ago•0 comments

Proof That Computers Can't Do Everything (The Halting Problem) [video]

https://www.youtube.com/watch?v=92WHN-pAFCs
2•suopspaces•30m ago•0 comments

Lithography Machines (Proposal)

https://drive.google.com/file/d/1KFCqKrN5tmhv_GLbPZZ1Y44OcP_5UUrG/view?usp=drivesdk
2•Maquinasdelitog•33m ago•0 comments

Turn any Llama-server into a jev system one endpoint

https://github.com/khimaros/verdict
2•khimaros•37m ago•0 comments

GSoC 2026: Port the Enlightenment desktop environment to NetBSD, part 2

https://blog.netbsd.org/tnf/entry/gsoc2026_enlightenment_2
2•jaypatelani•40m ago•0 comments

TXR: An Original, New Programming Language for Convenient Data Munging

https://www.nongnu.org/txr/
2•andsoitis•41m ago•0 comments

Meta's Muse Is Better at Surveilling Than Helping Me

https://www.wired.com/story/metas-muse-is-better-at-surveilling-than-helping-me/
3•sbulaev•43m ago•0 comments

OSS, security and Funding: libjpeg-turbo

4•ternaus•50m ago•2 comments

Grit your teeth and ship it

https://www.seangoedecke.com/grit-your-teeth-and-ship-it/
4•sph•51m ago•1 comments

GoldenEye 007 Native PC Port

https://jkdansereau.github.io/goldeneye-pc-port/
3•shscs911•51m ago•0 comments

Covert Caches: When Is a Cache, a Cache?

https://parallelprogrammer.substack.com/p/covert-caches
2•matt_d•1h ago•0 comments

Mini-AGI – dynamic continual learning model trained from scratch on 8GB VRAM

https://github.com/volotat/mini-AGI/
4•volotat•1h ago•1 comments

A build graph that rolls dice

https://fzakaria.com/2026/09/20/a-build-graph-that-rolls-dice
2•ghuntley•1h ago•0 comments

Hawking by Graham Farmelo review – the dark side of genius

https://www.theguardian.com/books/2026/sep/07/hawking-by-graham-farmelo-review-the-dark-side-of-g...
2•SLHamlet•1h ago•1 comments

Investment Seer: Agentic AI-Powered Stock and Crypto Analyst

https://investmentseer.com/
2•fooctrl•1h ago•0 comments

Ant Mill

https://simple.wikipedia.org/wiki/Ant_mill
3•red369•1h ago•0 comments

Heretic removes restrictions from language models

https://heretic-project.org/
4•Bluestein•1h ago•1 comments