frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Malicious Rust Crate Arrayref Runs a Build-Time Payload

https://safedep.io/arrayref-proc-macro1-rust-build-time-malware/
148•abhisek•1h ago•103 comments

AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint

https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html
385•emctech•4h ago•124 comments

Harvest hikes bills by 1500% after purchased by Bending Spoons

https://www.bbc.com/news/articles/clyq011414eo
51•jonathanlydall•45m ago•29 comments

Show HN: I trained a 125M model to autocomplete piano on-device

https://simedw.com/2026/08/20/midi-autocomplete/
199•simedw•2h ago•45 comments

Stwipe Acquires OpenWouter

https://stwipe.com/
98•eatonphil•58m ago•13 comments

DiffusionGemma Technical Report

https://arxiv.org/abs/2608.00146
41•gmays•1h ago•6 comments

Hacking with Claude on a $27 Smart Watch

https://www.mikekasberg.com/blog/2026/08/19/hacking-with-claude-on-a-27-smart-watch.html
22•speckx•55m ago•9 comments

Why the Ocean Cleanup Hasn't Solved the Plastic Pollution Crisis

https://therevelator.org/why-ocean-cleanup-has-not-solved-plastic-pollution/
23•sohkamyung•2h ago•13 comments

Slack Code

https://www.salesforce.com/introducing-slack-code/?bc=HL
7•trollied•42m ago•2 comments

Windows brings out the Rorschach test in everyone (2003)

https://devblogs.microsoft.com/oldnewthing/20030825-00/?p=42803
293•luu•8h ago•106 comments

Mojo is now open source

https://www.modular.com/blog/mojo-open-source
166•visheshdembla•1d ago•48 comments

Proof of Human (YC S23) Is Hiring a Member of Technical Staff

https://www.ycombinator.com/companies/proof-of-human/jobs/ZTZHEbb-member-of-technical-staff
1•timshell•3h ago

An American Mosaic (interactive map of ancestry census data)

https://www.nytimes.com/interactive/2026/07/01/us/america-ancestry-census-data-map.html
18•cckolon•3d ago•3 comments

An elliptic curve of rank ≥ 30

https://elliptic-rank.icarm.cloud/curve/273
11•robinhouston•48m ago•2 comments

Grok.bot – the epic domain lottery ticket

https://grok.bot/
7•bogdiyan•29m ago•2 comments

Xorg-Server 26.0.99.901

https://lists.x.org/archives/xorg-announce/2026-August/003741.html
15•st_goliath•2h ago•0 comments

Every Model Cheats

https://dreadnode.io/research/every-model-cheats-prompt-level-mitigation-of-cheating-on-offensive...
9•vga805•1h ago•3 comments

Seeing beyond BMI: Estimating cardiometabolic risk with smartphone imagery

https://research.google/blog/seeing-beyond-bmi-estimating-cardiometabolic-risk-with-smartphone-im...
39•leanderjanssen•4h ago•17 comments

Risk Engineering

https://risk-engineering.org/
47•throwaw12•4h ago•7 comments

Bun 1.4

https://bun.com/blog/bun-v1.4
52•meetpateltech•53m ago•16 comments

Router by Ramp

https://router.com
87•zackfield•19h ago•52 comments

CI jobs artifacts should not be difficult

https://deadsimpleci.sparrowhub.io/doc/job-artifacts
10•melezhik•1h ago•4 comments

Turns are Better than Radians (2022)

https://www.computerenhance.com/p/turns-are-better-than-radians
295•mayoff•13h ago•156 comments

AI didn't erase the junior engineer's value, it increased it it

https://franciscotrindade.me/blog/the-kids-are-really-alright/
52•franciscomt•3h ago•81 comments

A faster way to calculate the day of the week

https://www.benjoffe.com/fast-day-of-week
224•gavide•3d ago•62 comments

Bufo pulls the andon cord

https://hatchet.run/blog/andon-cord
7•abelanger•2d ago•2 comments

Don't paste the AI, please

https://dontpastetheai.com/
902•pjerem•6h ago•470 comments

Zellij 0.45.0: nested sessions, Kitty graphics, a fresh UI

https://zellij.dev/news/nested-sessions-kitty-graphics-new-ui/
13•peterhajas•2h ago•2 comments

Sol loves to cheat

https://jumploops.com/blog/sol-loves-to-cheat/
217•jumploops•1d ago•177 comments

Canonical Backs New Project to Translate Large C Codebases into Safe Rust

https://linuxiac.com/canonical-backs-new-project-to-translate-large-c-codebases-into-safe-rust/
28•datakan•1h ago•21 comments
Open in hackernews

Bun 1.4

https://bun.com/blog/bun-v1.4
51•meetpateltech•53m ago

Comments

cube00•36m ago
It's weird their promotional video repeats "you can do <million things> without installing dependencies", if I want headless browser testing is that wrong to install a project that offers that?

Why would I want everything reimplemented in this massive binary? Why would Bun be anymore in touch with nuances of all these different technologies then individual projects dedicated to their own speciality?

JS Runtime, Package Manager, Test Runner (both unit and headless browser), Bundler, JSX, PosgreSQL/MySQL/SQLite drivers, S3 client, Redis client, Formatter, Linter, etc.

Not to mention parsers for YAML, TOML, Markdown which are easily three separate projects worth of complexity in their own right.

I guess one clear downside is to get all these great features they're pushing for 1.4 you needed to wait until everything was ready. Given 1.3 was pushed out in October 2025, a 10 month release cycle across so many large technologies is tough. Before you give a pass because of the Rust rewrite Bun 1.2 was released in January 2025

I have to respect Jarred knows how to work the algorithm, 10 carefully crafted X teaser posts for this release spaced out over 72 hours https://xcancel.com/jarredsumner

Jcampuzano2•28m ago
Its strange how flip floppy the JS ecosystem is, because go back literally 1-3 years or so and the BIGGEST complaint was the lack of a standard library and having to use a package for everything.

But now that Bun is actually doing it its somehow bad? Its also still open source, so those implementations you mention need dedicated teams can still get the attention they need by the community if needed.

I'm on the side that I'd actually prefer if node included more out of the box and we could drastically cut down on the number of packages we need due to the amount of supply chain attacks that happen on packages in the node ecosystem.

optionalsquid•24m ago
Is that flip-flopping or just different developers having different preferences? Those who complain now would have had no reason to complain back then, and vice versa
pier25•21m ago
I agree and I also wish Node did more.

Otoh should a standard lib give you absolutely everything? Probably not. There needs to be a line somewhere.

Right now Bun’s policy on this seems to be "whatever Jarred feels like should be in there".

erlich•4m ago
> "whatever Jarred feels like should be in there"

This is the main draw. Everything he implemented was fast and minimalist and he usually implements a standardized api (web apis, esbuild bundler api).

The opinionated stuff is usually very common sense.

Most of the libraries OC mentions are things you would just like to be as fast as possible above all else.

evilrabbit99•4m ago
wasn't that complaint mostly about those tiny dependencies like `is-even` or `is-array`?

I feel like nobody complained that you needed to install a dependency to do headless browser testing for example.

tempaccount420•26m ago
It's faster to have it in the runtime in native code.

You have more options, not less, you can still use the external dependencies.

cnqso•11m ago
I personally do not feel limited by the ~100mb binary size. We're working in Javascript after all.
preommr•9m ago
> Why would I want everything reimplemented in this massive binary? Why would Bun be anymore in touch with nuances of all these different technologies then individual projects dedicated to their own speciality?

It's funny because the top article on HN is about a malicious rust crate package, and people keep making comparisons to js/npm and how both language suffer from frequent security issues because they have weak std libs.

maherbeg•7m ago
Some of these feel like solved problems effectively, so having them in the standard library is nice (at the expense of keeping these forever for backwards compatibility once a new tech replaces it). I do think having a larger standard library for common things (like golang) is the way to go. If a dependency seems to basically be installed by default everywhere, maybe it should go in the standard library.
andsoitis•26m ago
Congratulations to the Bun team!
mjmas•14m ago
This blog post / changelog is extremely long. Around 50 metres long on mobile.
evolve2k•5m ago
They recently used AI to rewrite the whole app in rust. Expect the slop fest to continue for some time yet.

A year from now folks will be; I can’t use it anymore it’s too unreliable but for now keep looking the other way.

sunsetSamurai•10m ago
I recently pivoted to Rust for the backend development, after getting tired of the nodejs ecosystem fragmentation and how fragile things feel. Bun seems very interesting since it allows you to do so many things without pulling in 3rd party libraries and bundlers? Is anybody using it instead of nodejs? how's the experience so far? I might have to give it a try.

Yes, I know there's probably better options than Rust for building APIs, but I wanted to learn it, so why not?

luciana1u•6m ago
every couple years someone rewrites the whole toolchain and we collectively agree the last one was the mistake. good to know the cycle still works.
preommr•4m ago
omfg, that's a long post.

How is this even possible?

I know we're all using AI, but Bun seems like the one singular project where there's just been a crazy increase in the amount of output, a 10x on the 10x.

How are they doing this?