News for hackers. Stuff that matters.

feinte

Re:Neovim Pack on Thursday September 04, 2025 @02:33AM (#45124237)
A plugin can spawn arbitrary processes so if neovim is not started in a sandbox (container, namespace, firejail...) they can basically do whatever your user has the right to do.

Pretty big supply chain risks here.

Re:Show HN: I wrote my own RTS game engine in C on Wednesday May 12, 2021 @01:44PM (#27133069)
The devlog videos are great : https://github.com/eduard-permyakov/permafrost-engine#devlog

Thank you so much for making this in the open and documenting everything !

Re:SQLite the only database you will ever need in most cases on Thursday April 15, 2021 @03:46AM (#26817341)
Compiling it yourself from source is quite easy, you can find instruction here: https://www.sqlite.org/howtocompile.html

Here is an article from Julia Evans explaining it: https://jvns.ca/blog/2019/10/28/sqlite-is-really-easy-to-com...

Or if you are familiar with Docker, you can use a more recent Debian in a container and install sqlite inside it.

Re:51% of 4M Docker images have critical vulnerabilities on Thursday December 17, 2020 @08:57AM (#25455581)
The problem lies in baking entire distribution into an image.

Using distroless images or "FROM scratch" with statically compiled app reduces the risks.

You still have to watch for your app dependencies updates but that's less work than for an entire distribution.

Re:DIY Video Hosting on Monday July 20, 2020 @05:15AM (#23896117)
If you want your content to be accessible for most people you also need to transcode your video to several resolutions. This coupled with an adaptive bitrate player [0][1] will allow clients to choose the resolution they can afford (so that people with different bandwidth can access your content)

When dealing with more than 10s or 100s concurrent viewers the required bandwidth on your server will be high and putting a CDN in front may be required.

[0]: https://github.com/Dash-Industry-Forum/dash.js [1]: https://github.com/video-dev/hls.js

I feel that learning from (bad) past choices to build a better solution is a good engineering practice ? Sure the initial db choice didn't scale but they learned from it and they seem to be happy with how they built their new db now
Re:Ffcms – FFmpeg's -filter_complex made simple on Monday March 23, 2020 @08:01AM (#22663164)
This FFmpeg Python bindings [0] provides wrapper for filter_complex which simplifies its use a lot !

[0]: https://github.com/kkroening/ffmpeg-python

It appears to simply apply this CSS to the selected elements:

.___blur-blur { filter: blur(5px); }

Re:The 50% divorce rate stat is a myth, so why won’t it die? on Friday December 05, 2014 @07:38AM (#8704184)
We have more precise data about global warming. Sensors are good at measuring temperature or sea rising, less at measuring divorce rates.
Great website ! It's nice to see the different instructions while the animation is running.

I also use http://www.cs.usfca.edu/~galles/visualization/Algorithms.htm... when I want to visualize algorithms.