News for hackers. Stuff that matters.

bikeshaving

Re:Official Claude Code extension compromise on Friday October 30, 2026 @09:37AM (#50303707)
Windows has a builtin keyboard shortcut to open LinkedIn. This is just how they do things.
Re:CorridorKey 2.0 on Monday October 26, 2026 @07:26PM (#50252625)
None of the “decompiled” projects you’re alluding are legitimately open-source. Just because you turn the gaze of your plagiarism machine onto strictly licensed software doesn’t mean the result is a “clean room” implementation or even something that you yourself could copyright.
Re:WebMCP Challenge – OpenAI on Wednesday August 26, 2026 @05:19PM (#49456092)
If you care about web standards, please for the love of god do not participate in this challenge. “WebMCP” is an extension to the `document` global under `document.modelContext`. The `document` object exists to represent the visual and structural node tree of an application. The `modelContext` extension is essentially an API gateway, and this proposal staples a global RPC registry with structured JSON payloads onto the DOM. It ignores the standard Request/Response API, and it does all of its work on the main thread. It forces developers into manual state-synchronization hell just to maintain a facade for a screen-scraping LLM, meeting them halfway so increasingly capable bots can “book flights on your website.” The API makes no considerations for API versioning, so any WebMCP tools you write are carved in stone.

I have no idea who at Google is advocating for this, but it’s a half-baked idea that goes against 20 years of web standard work. At least put this under the `window` or `navigator` global, goddamn.

Show HN: TermDOM – HTML, CSS and JavaScript (With a Real DOM) for TUIs and CLIs

https://github.com/bikeshaving/termdom

TermDOM renders a real DOM styled with real CSS to terminal cells. You build a document with createElement or innerHTML, or any frontend web framework, and it automatically produces colored ANSI output, with browser-style layout, text wrapping and flexbox included. The library can also be used to translate HTML to static ANSI.Full disclaimer: This project was started a year ago and written...

( Read More... | no comments | 2 points | on HN )
Re:Ask HN: What are you working on? (August 2026) on Sunday August 09, 2026 @04:20PM (#49235391)
TermDOM: A terminal renderer which used real DOM nodes, so you can write TUIs like web apps with HTML, CSS, and whatever framework you want. I didn’t really write this, more like spent intense weeks of effort where I product manage (yell at) Claude and did visual testing.

https://github.com/bikeshaving/termdom

Re:l: A new runtime for k and q on Tuesday July 07, 2026 @02:53PM (#48821996)
As someone who does not know what k4, qSQL, or q are, reading through the landing page of this website was giving me mild schizophrenia. And then I tried to search for these things in the old way, and received incredibly dry technical sites that still don’t tell me what it is, and all these names are wildly SEO unfriendly. So I had Claude give me context and it’s apparently the database Wall Street uses for tick data. Sounds cool but, jeez.
My favorite example of liminalism is Everything Empty Always Alone, a man on YouTube in his 40s who claims to be a time traveler and films himself walking and driving around empty metropolitan areas. He claims he’s recording from some sort of alternate universe, but it’s likely he’s just at these locations at odd hours. In any case, it’s fun outsider art. Or maybe it’s all true you never know.

https://www.youtube.com/@EverythingEmptyAlwaysAlone/videos

Re:Collaborative Editing in CodeMirror on Tuesday May 05, 2026 @05:56PM (#48029192)
I’ve tried to create the minimalist version of this with Revise.js. The main surface area is a custom element called a `<content-area>`. The OverType library you linked to uses a time-old technique where you essentially put a duplicate copy of the content over a `<textarea>` to highlight it but this doesn’t really work in mobile and it messes with the selection. I’ve tried to grapple with `contenteditable` directly with my solution, but it does try to use less JavaScript and it does try to be more minimal.

https://github.com/bikeshaving/revise https://revise.js.org https://revise.js.org/blog/introducing-revise/

Manual refresh(). This is something Crank does, and other frameworks like the new Remix one is picking it up as well. Being explicit has its advantages.
I’ve written about how Svelte, Vue, and Solid are all reactive and share common pitfalls due to their reactive solutions. My theory is that they all cause worse bugs than they prevent.

https://crank.js.org/blog/why-be-reactive/

Re:Meta's Omnilingual MT for 1,600 Languages on Saturday March 21, 2026 @11:41AM (#47468023)
I don’t own a car :)
Re:Meta's Omnilingual MT for 1,600 Languages on Saturday March 21, 2026 @11:35AM (#47467958)
I’m very wary of celebrating Meta’s language work when the company was credibly found to have contributed to the genocide against the Rohingya in Myanmar, and separately, to human rights abuses against Tigrayans during the conflict in northern Ethiopia. Be careful whose sins you’re laundering.

https://www.amnesty.org/en/latest/news/2025/02/meta-new-poli... https://www.amnesty.org/en/latest/news/2023/10/meta-failure-...

Show HN: Revise.js – Building blocks for contenteditable-based text editors

https://revise.js.org/blog/introducing-revise/

Hi HN. I've been working on this since 2018. Revise.js is a set of building blocks for contenteditable: a &lt;content-area&gt; web component that gives you a textarea-like .value for any contenteditable element, an Edit data structure with compose/transform/invert for OT inspired by the Xi editor, and a Crank.js integration for declarative editable components. At 32.8 KB gzipped (including the...

( Read More... | no comments | 3 points | on HN )
Re:Microsoft Creative Writer (1993) on Monday March 02, 2026 @07:41PM (#47226381)
I must tell you, it is an incredible relief to learn that McZee was not a figment of my imagination.
Re:Microsoft Creative Writer (1993) on Monday March 02, 2026 @06:05PM (#47225537)
Just found the text editor from my childhood
Re:MCP is dead. Long live the CLI on Sunday March 01, 2026 @03:40PM (#47210441)
I’ve found that humans are pretty good at reading through the output of bash commands. And Claude Code keeps insisting on truncating the output for some reason.
Re:MCP is dead. Long live the CLI on Sunday March 01, 2026 @01:10PM (#47209144)
I keep asking why the default Claude tools like Read(), Write(), Edit(), MultiEdit(), Replace() tools aren’t just Bash() with some combination of cat, sed, grep, find. Isn’t it just easier to pipe everything through the shell? We just need to figure out the permissions for it.
Re:We deserve a better streams API for JavaScript on Friday February 27, 2026 @04:39PM (#47186012)
Yes, the callable promise abstraction is just a bit of effort:

  let resolveRef;
  const promise = new Promise((res) => { resolveRef = res; });
  
  const callback = (data) => {
    // Do work...
    resolveRef(data); // This "triggers" the await
  };

  Object.assign(callback, promise);

There’s a real performance cost to awaiting a fake Promise though, like `await regularPromise` bypasses the actual thenable stuff.
Re:We deserve a better streams API for JavaScript on Friday February 27, 2026 @03:11PM (#47184929)
Not accepting PRs for this. I think the logic is sound (Easter Eggs should be difficult to trigger).
Re:We deserve a better streams API for JavaScript on Friday February 27, 2026 @10:53AM (#47181953)
A long time ago, I wrote an abstraction called a Repeater. Essentially, the idea behind it is, what would the Promise constructor look like if it was translated to async iterables.

  import { Repeater } from "@repeaterjs/repeater";
  
  const keys = new Repeater(async (push, stop) => {
    const listener = (ev) => {
      if (ev.key === "Escape") {
        stop();
      } else {
        push(ev.key);
      }
    };
    window.addEventListener("keyup", listener);
    await stop;
    window.removeEventListener("keyup", listener);
  });
  const konami = ["ArrowUp", "ArrowUp", "ArrowDown", "ArrowDown", "ArrowLeft", "ArrowRight", "ArrowLeft", "ArrowRight", "b", "a"];
  (async function() {
    let i = 0;
    for await (const key of keys) {
      if (key === konami[i]) {
        i++;
      } else {
        i = 0;
      }
      if (i >= konami.length) {
        console.log("KONAMI!!!");
        break; // removes the keyup listener
      }
    }
  })();
https://github.com/repeaterjs/repeater

It’s one of those abstractions that’s feature complete and stable, and looking at NPM it’s apparently getting 6.5mil+ downloads a week for some reason.

Lately I’ve just taken the opposite view of the author, which is that we should just use streams, especially with how embedded they are in the `fetch` proposals and whatever. But the tee critique is devastating, so maybe the author is right. It’s exciting to see people are still thinking about this. I do think async iterables as the default abstraction is the way to go.

I was thinking using ZWJ because the staff is always implied by the usage of Cistercian numerals. I was also wondering if we could reuse CISTERCIAN 1-9 for each significant digit rather than having to encode all 4 separately, though at the end of the day it’s only 36 separate code points.

Adding the staff is 37 codepoints versus 36, but I think using ZWJ would at least have each numeral independently renderable so it degrades gracefully. I’m not too sure about how combining characters degrade.

Essentially it boils down to whether you think the staff and the digit flag part of the numeral are independent or not.

Can anyone who works with the Unicode consortium explain why Cistercian numerals aren’t just part of Unicode? There’s Aegean numbers, counting rod numerals, Mayan numerals, Roman numerals (beyond the Latin letter aliases), cuneiform numbers, and plenty of other historical numeral-only systems.

The 4-stave system is interesting but can almost certainly be done using ZWJ hacks maybe.

Thanks for the kind words! Let me know your thoughts if you end up exploring.

Show HN: Shovel.js – A portable meta-framework built on web standards

https://shovel.js.org/blog/introducing-shovel/

I recently built a CLI and set of libraries for running Service Workers as application servers. The idea: instead of inventing new APIs, use the ones browsers already have (Cache API, FileSystem API, CookieStore, URLPattern, AsyncContext) and shim them for Node, Bun and Cloudflare when missing. The result is portable code that runs anywhere and follows rigorous specifications which coding...

( Read More... | 2 comments | 2 points | on HN )
Re:Ask HN: What Are You Working On? (February 2026) on Sunday February 08, 2026 @07:53PM (#46940286)
I’ve just published the first public release of a new open source project Shovel.js, replacing tools like Express, Fastify, Next.js, Vite. It’s a full-stack/meta server framework which implements the full Service Worker specification but in Node, Bun, Cloudflare. It leans into using web standards to do things like accessing the filesystem, reading cookies, create client-side bundles rather than inventing new APIs. You can read about the process of making Shovel with AI in the introductory blog post.

https://shovel.js.org/blog/introducing-shovel/

https://github.com/bikeshaving/shovel

Older »