Hacker News new | past | comments | ask | show | jobs | submit | jerrygenser's comments login

Is there any security risk to use as project with an embedded .wasm binary? Is there a build process for this that we can reproduce, or is there a way to bring our own if it's a generally available asset?

Referring to this file: https://github.com/embedpdf/embed-pdf-viewer/blob/main/packa...


Quick update: I just added a new option where you can set a custom wasmUrl when initializing the snippet. This way you can host your own .wasm build if you want to be 100% sure it hasn’t been modified.

Here’s the commit: https://github.com/embedpdf/embed-pdf-viewer/commit/ff928377...

Thanks again for raising the point — really good feedback!


Good question. You can fully reproduce the build. We have a Dockerfile here that handles the process: https://github.com/embedpdf/embed-pdf-viewer/blob/main/packa...

Also, if you look in the package.json, there is a wasm script set up. Running pnpm run wasm will build the .wasm file inside Docker, so you get a clean, repeatable build.


If you have small hands and you are stretching for delet/backspace and a small kb allows you to hit this key without strain, it absolutely helps with strain on fingers.

I tried many things over the years including other ergonomics and gym etc.

Changing to a smaller split keyboard helped the most and I have not had pain since.

Granted mine has about 50 keys or so so it's not as extreme.


Zellij is a good example of a tui with shortcuts in the UI. Helped me learn them way better than I would have otherwise


Yes! GUI menus with keyboard shortcuts written on the menu items are a great way to explore and learn new software.


Ok so a better example of what you describe might be vscode.


What existing open standard did vscode Embrace? I thought Microsoft created v0 themselves.

A classic example is ActiveX.


> A classic example is ActiveX.

Nah, even that was based on earlier MS technologies - OLE and COM

A good starter list of EEE plays is on the wikipedia page: https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...


Funny you linked that page because that’s where I got activex from :D

> Examples by Microsoft

> Browser incompatibilities

> The plaintiffs in an antitrust case claimed Microsoft had added support for ActiveX controls in the Internet Explorer Web browser to break compatibility with Netscape Navigator, which used components based on Java and Netscape's own plugin system.


ah ok, sorry. I thought you were saying that they tried an EEE play on ActiveX.

You meant they used ActiveX in an EEE play in the browser wars.


Honestly I kept it vague because I didn't actually know so your call-out was totally valid. I know it better now than without your clarification so thanks :+1:


Microsoft "embraced" open-source ecosystems with an "open-source" editor, extended it with proprietary extensions DRMed to binary blobs hidden in VS Code binary builds, and used it to extinguish SSH, Python, C++, etc. development in open-source and derivative works of VS Code.


VSCode displaced Atom, pre-GitHub acquisition, by building on top of Atom's rendering engine Electron.


You can absolutely change the keybindings, vim is programmable.


Yes, but I meant that in the sense that when you change vim, it's no longer the vim that ships with Linux distros. It stops being the universal tool and starts becoming your custom text editor,and to me the biggest advantage of vim is how you're going to encounter it everywhere.


Doesn't everyone customise their editor(s), to a lesser or greater extent?


Okay, but that's true of anything? If you customize the shortcuts in an IDE, then you are also no longer running the defaults.


Exactly. See .vimrc.


It's not flagged. Is it shadow banned? Is that a thing in hacker news?


I hope not. It would be such a disappointment.


It is a thing though


Dang and other editors manually tweak things regularly to make sure stuff like this is not on the front page and consider that to be a feature not a bug and are not at all interested in listening to any criticism that maybe that’s not the right move in 2025.


This is false.

This story spent 18 hours on the front page seven days ago, and attracted over 1100 upvotes and over 600 comments. It also attracted dozens of community flags, but we turned off the flags in order to give the story full visibility.

https://news.ycombinator.com/item?id=43691142


> It also attracted dozens of community flags

I've noticed that a lot of the articles describing various Trump admin abuses (be it DOGE, or Trump crypto scams, or whatever) get flagged a lot. (While they're very relevant, nobody can tell me SBF crypto drama scams are relevant to HN, but Trump crypto scams are not). It's concerning that there are people on HN who prefer to silence such discussions...


Are you really telling me with a straight face that there isn’t manual intervention every day to deemphasise political content? Like we are all watching it happen in real time. Every day the gap between what people are ACTUALLY voting for that’s only available on a hidden page (https://news.ycombinator.com/active) not linked to from anywhere on the website as far as I can tell and what is presented as the most popular content is considerable.


Dang has written about this at length several times over the years and did so again just three days ago:

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

We don't manually intervene to deemphasise content just because it's political, and indeed we often manually intervene to restore political stories to the front page when they have been automatically downweighted due to flags or flamewars.

We moderate to optimize for intellectual curiosity, nothing more.


It’s an awfully convenient bit of wording where nobody can pin you down on exactly what that means but only on what actions get taken.

It’s what I’m referring to when I say that I’ve never once seen a moderator once consider their own judgement when presented with feedback. It’s always the same line. Things are running exactly as intended from your point of view it would seem.


I mean not to be difficult: just to try and understand exactly what your claim is.

If you have an example of a moderation action that you disagreed with (E.g., a particular story about DOGE or the administration that wasn't adequately discussed on HN), please share a link or something else concrete and we'll explain it or investigate it. You can post it here or email us (we have had email threads going back years with users who want to share feedback and learn about how we think about these things [1]).

There are plenty of ways of examining the data:

- https://github.com/HackerNews/API

- https://news.ycombinator.com/item?id=40644563

- https://hn.algolia.com/

- https://news.ycombinator.com/front

If you have concerns about any future stories being hidden, you could set up your own API listener, monitor for new stories and then see which ones are flagged or killed.

For the record, I routinely undertake practices for evaluating and improving my own judgement, and am happy to do so regarding any specific case. But you haven't provided me with any specific feedback to respond to.

[1] https://www.newyorker.com/news/letter-from-silicon-valley/th...


At the peak period of DOGE activity when it was the biggest political news story, I never once saw stories about it on the front page here. Someone relying on HN as their primary news aggregator would be entirely clueless to what was going on in Washington. I actually tried searching for them at last, because it seemed implausible to me that nothing was being posted and gaining traction and it was only then that I realized that there were tonnes of stories, but they were being flagged and buried.

I don't necessarily know that it's moderator malfeascence so much as people abusing HN tools to bury stories that they don't like, but I do think that there should be some consideration about how those tools are being abused and how that abuse can be effectively countered.

I get the impression that an effort is being made to correct the situation, but I've given up on the front page and only visit /active now, so I might be completely wrong.


Guys, I want to investigate this claim, but people keep making it without giving me any details to look into. If you give us a specific news item or date range, we can look at the data and see what was happening (we have access to internal and external tools that show where each story was ranked at different times).

Also: any time you know of an important story that you think should be on the front page, you can email us to let us know - hn@ycombinator.com. We'll either address it or explain why we're doing something other than what you're asking for.

> Someone relying on HN as their primary news aggregator

Who are these people who look only at HN and nothing else, expecting to be fully informed about everything that's important in the world? :)


It's currently showing up as flagged as a dupe and isn't anywhere on the first 3 pages.


Because today’s post is a repeat/dupe of the same story that was on the front page for 18 hours a week ago and attracted 1100 upvotes and 600+ comments. It was one of the biggest stories all year on HN:

https://news.ycombinator.com/item?id=43691142

It's bog standard HN moderation to remove duplicate stories.


What is even the logic here? I understand the concept that when you have multiple threads going on about one article or story AT THE SAME TIME… then sure, the dupe option makes sense.

When you are manually putting a dupe tag on a story because someone posted it a week ago I think people feel very differently about that.

This is very literally the kind of behaviour people are referring to when they make the accusation that the mods are actively interfering with what people want to talk about.

This idea that you’re here telling me and others with a straight face that everything is above board while also doing this just doesn’t pass the credibility test, the logic makes no sense.


This is the way HN has always been moderated. Well, for at least 10 years. It's in the FAQ [1]

If a story has not had significant attention in the last year or so, a small number of reposts is ok. Otherwise we bury reposts as duplicates.

It's nothing to do with it being political. It's simply to do with being a duplicate of a story that has already been heavily discussed, just a week ago.

It's a well established convention that a topic is only eligible for further front page exposure when there is "significant new information" (SNI) [2].

There have been many instances of SNI with respect to DOGE this year, which is why there have been (I believe) more front-page stories about it on HN than anything else [3].

[1] https://news.ycombinator.com/newsfaq.html

[2] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

[3] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...


The krebs on security detail was published just yesterday. While it's the same event, krebs is an authoritative source which has more detail than the npr source.


The threshold is Significant New Information ("SNI"), where "significant" implies that it's material enough to alter the dimensions of the story. I don't think many people were left uncertain by the NPR story.


Try aider.chat - it is a cli you can add files for context and it will make edits to the code directly via a commit.


Portfolio diversification


What we did was mock it to make the http request blocking.

Alternatively you can use ngrok(or similar) and a test task queue that is calling your service running on localhost tunneled via ngrok.


This is a regressive tax that hurts low skill and low wage workers proportionately more since basic necessities of life are going to increase in price - it will be a much larger share of wallet than rich. This will not materially change purchasing behavior of very rich (save maybe waiting to buy a car due to increased pricecs)

It would be beneficial to increase taxes on the massive service economy and use the proceeds to subsidize lower wage industries.

In trumps first term after tariffs affected farmers, they had to subisidize them to keep them afloat. It didn't quite work the way it was intended. The trade war relief program in the first term spent $30bn keeping farmers afloat.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: