frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Apparently CodePen 2.0 sends data to their servers as you type

26•maxim-fin•1h ago
They send all typed into editor input to codepen.dev almost immediately (you would see in 1-2 sec after you typed your secret that it appears in respective Network/Response tab) even before one saved it. I tested this with a unique marker: after typing it into index.html, CodePen ran a build with "save:false", and the marker then appeared verbatim in the HTML served from the generated "*.codepen.dev preview". Thus, if you ever entered some secrets in there by mistake consider them compromized even if you did not publish/save the pen

Comments

keepo404•35m ago
because this is how autocomplete logic works i guess? Frontend cannot guess language and completions for you
embedding-shape•22m ago
Well, except for the cases when you happen to have the entire VM for your language running in the same tab where you program lives, and they both are all JS.

Probably harder, and wouldn't work equally well for everyone, but it would be possible to have "guess language and autocomplete" entirely client-side, especially when it comes to JavaScript of all languages.

bashy•32m ago
Sent to them to render the preview pane. Same as pasting secrets anywhere on a browser.

Wait until you find out copying content on a computer might sent it over Wi-Fi/Bluetooth for sharing on other devices.

tvink•27m ago
You're gonna be shocked how many input fields do this for various UX features :)
embedding-shape•20m ago
HotJar and similar services are (were?) popular as well, and those record your mouse pointer movements and clicks as well, then displays that as an overlay over the application, so it's essentially a "screen recording" of your session of the application.
pdyc•25m ago
i made my own html playground that is browser only and shares preview via url hash because of these useless shenanigans of codepen, its not as featureful but i mostly use it for sharing single page html files

https://easyanalytica.com/tools/html-playground/

cph123•18m ago
For basic previewing I like to use https://htmledit.squarefree.com which has been online for years and does it all client side.
nseskin•16m ago
There’s a detailed discussion of the same issue here https://www.reddit.com/r/webdev/comments/1rj1oac/i_planted_f...
cetinsert•8m ago
I built https://RTCode.io to escape their sluggish hell! CodePen has no place in today's world.

- everything is local until you deploy

- with first-class support for

  - connect your AI to playground

    - version-controlled deployments

    - full playground control

    - output viewport size, zoom, color scheme control

    - output eval for rapid development

    - output live capture and image-cropped element/region pins

    - output live stream picture-in-picture to watch your agents work

  - state preserving 2-way IO sync

  - multi-level open shadow root IO sync

  - service/edge workers in the playground (develop full-stack apps in one place)

    - example: https://post.rt.ht

    - example: https://kv.rt.ht/fs

    - examples: https://new.rt.ht
- enterprise-class global network: https://RTEdge.net

Too many features to list them all here!

I don't even code in https://RTCode.io myself, I connect Codex/Claude and let them build me full-stack apps live and deploy their work with commit messages!

For more info: https://elefunc.com/#code

Keep Our Servers Running

https://blog.archive.org/2026/09/01/keep-our-servers-running-your-recurring-donation-goes-3x-this...
600•sonicrocketman•8h ago•136 comments

Live map of public transport in Belgium

https://openbaarvervoerbelgie.be/
81•coinfused•3h ago•28 comments

Caltech Mathathon – first hackathon ever devoted to research level mathematics

https://mathathonchallenge.com/index.html
45•astroanax•2h ago•6 comments

Smartphone makers don't bother to comply with EU repairability requirements

https://www.theregister.com/personal-tech/2026/09/07/smartphone-makers-dont-bother-to-comply-with...
36•mdp2021•36m ago•1 comments

Speculative Decoding in vLLM on AMD GPUs

https://vllm.ai/blog/2026-08-23-speculative-decoding-amd-gpus
37•ankitg12•2h ago•10 comments

Impedance Matching (2017)

https://www.edge.org/response-detail/27238
27•muti•2h ago•6 comments

LG smart TVs caught logging audio with screen off and snooping on local devices

https://www.notebookcheck.net/LG-smart-TVs-caught-logging-audio-with-screen-off-and-snooping-on-l...
341•chris_overseas•5h ago•189 comments

'You Can See Everything' Review: Nathan Fielder's Doc About Elizabeth Holmes

https://variety.com/2026/film/reviews/nathan-fielder-surprise-film-telluride-elizabeth-holmes-123...
102•cianmm•2h ago•50 comments

I Connected My Withings Body+ to Home Assistant with an ESP32

https://didac.dev/blog/i-made-my-withings-scale-sync-to-home-assistant-without-the-cloud
18•sabatesduran•3d ago•3 comments

Making a Python interpreter in 1024 bytes

https://austinhenley.com/blog/python1024.html
251•azhenley•13h ago•88 comments

Apparently CodePen 2.0 sends data to their servers as you type

28•maxim-fin•1h ago•11 comments

Ask HN: How do you manage skills files?

171•imadtaieber•16h ago•149 comments

It took a year to ship WebAssembly in Anubis

https://anubis.techaro.lol/blog/2026/anubis-wasm/
293•xena•15h ago•139 comments

Tiny $70 Xteink X3 e-reader puts Silicon Valley to shame

https://www.theatlantic.com/technology/2026/09/xteink-e-reader-best-technology-years/688539/
26•samizdis•1h ago•9 comments

Ask HN: Fable hacked my piano, can I release the results?

184•jmpman•1d ago•112 comments

GrapheneOS Overhauled Default Apps and Secure Clipboard

https://grapheneos.social/@GrapheneOS/117225539756835649
319•Cider9986•15h ago•220 comments

Show HN: GET Together – A social network where you don't need POST to Post

https://gettogether.dev
74•nchudleigh•10h ago•33 comments

Why are there no flow batteries with symmetric ferrocyanide electrolytes?

https://chemisting.com/2026/09/02/why-are-there-no-flow-batteries-with-symmetric-ferrocyanide-ele...
30•DamonHD•5d ago•16 comments

Nitter and XCancel resume service after legal advice

https://github.com/zedeus/nitter/commit/1428b4c2b4246f92a7e5b2673438e5fb39fcc4a3
782•zImPatrick•18h ago•343 comments

Show HN: Think Turing Complete, but you write the circuits in TypeScript (WIP)

https://play.simten.dev
9•charlesfrisbee•4d ago•3 comments

Is mathematics about to enter the conservatory?

https://mbmccoy.dev/posts/mathematical-conservatory/
74•_alternator_•13h ago•84 comments

Show HN: Engrim – A universal, local-first SQLite memory engine for AI CLIs

https://github.com/timgordontg/engrim
48•timgordontg•7h ago•11 comments

Harnessing the Universal Geometry of Embeddings

https://arxiv.org/abs/2505.12540
89•ur-whale•15h ago•31 comments

TiVo to charge money for skipping commercials in your own recordings

https://cordcuttersnews.com/tivo-plans-to-end-free-automatic-commercial-skipping-in-november-test...
112•dmitrygr•7h ago•60 comments

Has anybody seen my keys? A key-hierarchy strategy for rack-level security

https://rfd.shared.oxide.computer/rfd/0301
40•cyb0rg0•10h ago•3 comments

Switzerland's Federal Government Is Replacing Microsoft on 3k Computers

https://itsfoss.com/news/switzerland-replace-microssoft-pilot/
219•ivell•6h ago•182 comments

Asahi Linux on M3

https://asahilinux.org/2026/09/m2-episode-1/
509•mdp2021•22h ago•309 comments

Research acceleration: The view inside OpenAI

https://openai.com/index/research-acceleration-view-inside-openai
186•iamsyr•21h ago•136 comments

Programming is Art

https://orchidfiles.com/programming-is-art/
102•theorchid•4h ago•107 comments

An Alien Mind

https://openai.com/index/an-alien-mind/
426•tosh•19h ago•395 comments