frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

CVE-2026-111943: Compromised Intermediate Certificate Authority

https://nvd.nist.gov/vuln/detail/cve-2026-111943
285•keks24•5h ago•89 comments

What Is Gridifcation

https://musicalform.substack.com/p/what-is-gridifcation
104•gumby•3d ago•25 comments

Jailbreaking the Switch 2

https://pepsipu.com/blog/2026-10-switch2-jailbreak-ns2jb/
287•ledoge•5h ago•97 comments

Faster than earcut: triangulating 3.7M map polygons in 489 ms

https://globus.software/blog/2026/10/16/cutting-map-polygons/
110•molind•4h ago•19 comments

Woman faces six years in prison over Cash App account she never opened

https://www.techspot.com/news/114296-woman-spends-three-nights-jail-faces-six-years.html
71•oidar•40m ago•27 comments

eMudhra to Exit Global SSL/TLS Certificate Business;

37•parimm•34m ago•10 comments

WorldTUI: I trained a 360M model to pretend to be a terminal

https://simedw.com/2026/10/21/world-model-terminal/
344•alphax314•11h ago•108 comments

Startup taps underwater volcano as energy source in "proof point" test

https://arstechnica.com/science/2026/10/startup-taps-underwater-volcano-as-energy-source-in-proof...
51•wffurr•2d ago•19 comments

Several Linux kernel vulnerabilities accidentally posted to public mailing list

https://www.phoronix.com/news/LKML-New-Trend-Vulnerabilities
125•mrkn1•2h ago•28 comments

Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure

https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitatio...
96•cubefox•2h ago•20 comments

The recently proposed o(n log n) integer multiplication algorithm [pdf]

https://web.maths.unsw.edu.au/~davidharvey/research/subnlogn.pdf
246•craigcitro•11h ago•195 comments

The painter behind Manhattan’s Gilded Age interiors

https://engelsbergideas.com/notebook/the-unknown-painter-behind-manhattans-gilded-age-interiors/
12•hoffmannesque•1d ago•0 comments

Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
525•passenger•15h ago•303 comments

Claude Duet

https://claude.com/product/claude-duet
465•kuberwastaken•18h ago•431 comments

No more icons in every menu by default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
388•riffraff•2d ago•224 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
556•abhisek•23h ago•182 comments

Rust Style Guide

https://google.github.io/styleguide/rustguide.html
343•kaycebasques•18h ago•202 comments

GitLab critical patch release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
375•artooro•18h ago•87 comments

Using LLM for confidence scoring is a bad idea

https://rumple.github.io/blog/2026/10/20/asking-llm-for-confidence.html
130•jimauthors•1d ago•78 comments

The Robot I Didn't Expect to Build

https://spectrum.ieee.org/agility-robotics-digit-5-redesign
37•bojackh•2d ago•26 comments

OpenAI CLI

https://github.com/openai/openai-cli
175•armcat•8h ago•85 comments

Eigenmoon: linear algebra puzzles by moonlight

https://eigenmoon.vercel.app/
15•jessicarumbelow•2d ago•5 comments

What Is the Karakoram Anomaly?

https://nsidc.org/learn/ask-scientist/karakoram-anomaly-it-real
58•thunderbong•2d ago•11 comments

PingCap TiDB Leaks

https://fulcrumsec.vg/pingcap/
385•swyx•1d ago•65 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
245•bryanrasmussen•2d ago•56 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
614•cbg0•20h ago•347 comments

Code is clay now

https://www.albertodenia.com/writing/code-is-clay-now
213•albertodenia•2d ago•140 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
310•armcat•1d ago•134 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
441•nnx•23h ago•59 comments

mitmproxy adds --emudhra option

https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
541•ahlCVA•14h ago•131 comments
Open in hackernews

Show HN: Convert Large CSV/XLSX to JSON or XML in Browser

https://csvforge.com
41•Botlabs•1y ago
Hello HN, I'm excited to share a project I've been working on: A simple, fast way to process huge CSV and XLSX files directly in your browser and export them as clean JSON or XML

Here's a few things that makes this converter different: - runs in the browser - all parsing and conversion is client side can handle data any size data - automatically detects delimiters, encodings, and data types as it parses - Live preview with column renaming, search/replace, and data cleanup - Export to JSON or XML — clean, structured output that can be used for API or Databases

backstory: I built this tool for myself. I work with massive CSV and TXT files, some over 10GB, and opening them in Excel would freeze my laptop, some of the online converters only limits to a certain size, so I started learning Python and pandas but ended up wasting so much time trying different delimiters or fixing badly structured data just to make it usable, and I thought this would be a really fun project to build

I'd love some feedback. Thank you

URL: https://csvforge.com

Comments

sverhagen•1y ago
"Runs in the browser" and "client side" isn't as much of a selling point to me as it's made out to be. It's a claim that I can't really validate until it's too late. If it's a commercial service I'm going to have to pay for, then maybe you should go all the way in gaining my trust with whatever safeguards it takes, so that I no longer care if I upload my data to your server or not.
rustc•1y ago
> then maybe you should go all the way in gaining my trust with whatever safeguards it takes

What kind of safeguards are possible with a web app?

sverhagen•1y ago
I think this comes down to legally-enforceable contracts with some teeth. A lot of business seem okay to trust Google's cloud products, or Microsoft's? I think as private person with limited means for litigation, you're likely sol.
hahn-kev•1y ago
Yeah I really wish there was a way for this to be enforced by the browser that the end user could trust. It would have to be a standard, but outside of opening dev tools and toggling offline mode there's no way to be sure.

The funny thing is that it feels safer to download a desktop app and give it the same data even though it's usually much harder to validate if it's shipping your data somewhere else.

strogonoff•1y ago
There’s a cheap trick to make sure a website that claims to do everything client-side actually does everything client-side:

1. Open the site in an incognito window.

2. Turn off your Internet.

3. Do what you’ve got to do.

4. Close browser window.

As a bonus, and this makes it better than just flipping the offline switch in developer tools, if you turn off Internet in a way that keeps the browser thinking it’s online, you can also peek at whether any network requests are made (for pathological cases where the app does everything locally but phones home anyway).

Botlabs•1y ago
Sure, but you can validate it dev tools exist for a reason. Honestly, I just can’t afford the storage costs if users are uploading 50GB+ CSVs. It’d be a huge strain on any server, not to mention painfully slow for users. Running everything client side was the easiest and most practical way to build this MVP at least for me thanks for the feedback
o11c•1y ago
"Large" generally means "bigger than RAM"; 10GB is medium-sized these days since it fits in most people's RAM. Does the browser actually have the (web worker?) APIs needed to stream and "upload" and "download"?
shubhamjain•1y ago
I don't get it. Are JSON and XML files more friendly to import vs CSV files? I always assumed CSVs were the standard. Any reasons to prefer structured formats?

Shameless plug: I am working on a similar problem of Excel not being a great tool for large datasets. My desktop app[1] lets you import raw data files and query them using SQL. (The website needs to be updated, the app looks much better than the current screenshots).

[1]: https://textquery.app

Botlabs•1y ago
yes they are a lot easier to work with when inserting into the database
snappr021•1y ago
This type of thing is fairly trivial to create with ChatGPT running entirely locally in HTML.

A couple of kb of open standard vanilla js that does some simple things faster than legacy spreadsheets etc ever could.

Even to the point of creating invoices, reports etc based on standard filters stored in local storage…

oschvr•1y ago
Looks like you made it in lovable. It has that characteristic UI.

If so, how much time did it take you?

Botlabs•1y ago
thanks for your comment, it took me almost 3 weeks to build this
constantcrying•1y ago
I think it should go without saying, but never use this with anything more relevant than a hobby project.

Doing this with any kind of data you don't fully own (e.g. data from your company) is a terrible idea, from so many standpoints. That it is "allegedly" running locally is not making it much better.

I think my question to OP is, who is this for. Any developer can write up a convert for his own datasets, in basically any case I can think of where you are handling large amounts of data you are building a pipeline to do cleanup, renaming, conversion, etc. Who wants to have a part of that pipeline be uploading the data into the browser?