News Nug
Building a Typed Dataflow System for Workflow Automation (and why it's harder than it looks)

Published: 2025-12-12 | Origin: /r/programming

The content emphasizes that all feedback is valued and taken seriously. It introduces a visual automation builder for creating, scheduling, and managing automation workflows with secure credential management. Key features include an Electron-based application with a visual node-based editor, a modular main process, a React-based UI, and robust type definitions for enhanced type safety. The application offers helpers for variable initialization and conditional execution, allows users to select CSS selectors interactively, and automatically detects types. Comprehensive documentation is available, including setup instructions and example

AI Can Write Your Code. It Can’t Do Your Job.

Published: 2025-12-12 | Origin: /r/programming

In May, OpenAI attempted to acquire Windsurf (formerly Codeium) for $3 billion, but the deal ultimately fell through. Recently, Anthropic acquired Bun, an open-source JavaScript runtime, although they could have built on it for free. This move suggests that companies in the AI sector are seeking to acquire engineering talent rather than replace them, contradicting the narrative that programming jobs are dying due to AI. The author argues that while AI has the potential to automate many programming tasks, the

Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited | Wiz Blog

Published: 2025-12-12 | Origin: /r/programming

Wiz Threat Research has detected exploitation of a zero-day vulnerability (CVE-2025-8110) in Gogs, a widely used self-hosted Git service, during an investigation of a malware infection. This symlink bypass vulnerability allows authenticated users to overwrite files outside the repository, potentially leading to Remote Code Execution (RCE). Currently, over 700 publicly exposed Gogs instances are compromised, with ongoing exploitation and no available patch as of December 1, 2025. The vulnerability

“Are you the one?” is free money

Published: 2025-12-12 | Origin: Hacker News

The content discusses a reality TV show called "Are You the One?" on MTV, which revolves around a group of men and women who have pre-determined perfect matches. The contestants aim to identify these matches to win a cash prize of $1 million. Each contestant is unaware of their match initially, and they can gather information through "truth booths," which confirm whether specific pairs are matches, and through group match-ups that reveal how many correct pairs they have guessed. The author notes the dramatics of

CRISPR fungus: Protein-packed, sustainable, and tastes like meat

Published: 2025-12-12 | Origin: Hacker News

Researchers have developed a new strain of the fungus Fusarium venenatum using CRISPR gene editing, enhancing its efficiency, nutrition, and sustainability compared to its natural variant. This fungal strain, known for its meat-like flavor, was modified by removing two specific genes: one that thickened the cell walls, improving digestibility, and another that optimized its metabolism. The resulting strain, FCPD, produces protein 88% faster and uses 44% less sugar. This innovation significantly lowers greenhouse gas

Nokia N900 Necromancy

Published: 2025-12-12 | Origin: Hacker News

The author details the process of reviving a classic Nokia N900 smartphone sent by a friend, Dima. The phone's old battery was non-functional, so the author created a prototype to replace the battery with a supercapacitor setup. They cut and soldered components to emulate battery behavior, connecting several compact supercapacitors to the device. After successful booting, they noted the capacitors were heating up, indicating potential issues with their soldering. During the process, a mishap led

Denial of service and source code exposure in React Server Components

Published: 2025-12-11 | Origin: Hacker News

On December 11, 2025, the React Team announced the discovery of two new vulnerabilities in React Server Components while investigating prior security patches. These vulnerabilities do not enable Remote Code Execution, and the existing patch for the React2Shell exploit remains effective. Users are urged to upgrade immediately due to the severity of these new vulnerabilities, especially if they have already updated to versions 19.0.2, 19.1.3, and 19.2.2, as these updates are

An SVG is all you need

Published: 2025-12-11 | Origin: Hacker News

The content discusses the potential of SVGs (Scalable Vector Graphics) as a versatile tool for creating interactive, vector-based visualizations in scientific publishing. It reflects on Anil's concept of making scientific papers more interactive by allowing readers to explore data and experiments directly, which is possible for many fields, especially computer science. The author reminisces about a project from 20 years ago involving an SVG visualization tool that successfully displays data from a fungal network experiment and notes that it still functions well in modern browsers

Rivian Unveils Custom Silicon, R2 Lidar Roadmap, and Universal Hands Free

Published: 2025-12-11 | Origin: Hacker News

Rivian is encouraging customers to order their vehicles using the code JOSE1715716 for rewards, including 250 points and three months of free RAN charging. During the inaugural Autonomy and AI Day, Rivian showcased its commitment to leading the future of autonomy with a focus on compute power, custom hardware, and AI systems. Key announcements included the introduction of the RAP1 processor, Rivian's first in-house chip, which delivers high performance for the new Gen 3 Autonomy

Programmers and software developers lost the plot on naming their tools

Published: 2025-12-11 | Origin: Hacker News

The content discusses a talk by Richard Stallman during EmacsConf in December 2022, where he emphasized the importance of "memorable names" for software packages. He criticized the trend in modern software development of using whimsical or obscure names instead of descriptive ones, which can lead to confusion for users trying to understand their function. The author reflects on a conversation with a friend discussing various software tools, noting that many of their names were not informative, making it difficult to grasp their purposes without additional research

GPT-5.2

Published: 2025-12-11 | Origin: Hacker News

Failed to fetch content - HTTP Status - 403

Litestream VFS

Published: 2025-12-11 | Origin: Hacker News

Ben Johnson works on Litestream at Fly.io, which is an open-source backup/restore system for SQLite. He describes how Litestream can back up a SQLite database of sandwich ratings to an S3 bucket. By loading AWS credentials and specifying an S3 path, users can run queries directly on the remote database without downloading it. He highlights the concept of Litestream VFS, which allows for querying SQLite databases from object storage URLs. This feature enables instantaneous point-in-time recovery (PITR)

VA Linux: The biggest dotcom IPO

Published: 2025-12-11 | Origin: Hacker News

VA Linux was a notable startup during the dotcom era, benefiting from the boom of Linux technology. Its IPO on December 9, 1999, was record-breaking, with a stock price increase of 698%, raising $132 million and achieving a market cap of $9.5 billion, far surpassing Microsoft’s early market value. Although it was hailed as the most successful Linux startup of the period, the company had not yet turned a profit. Founded in 1993 by Larry August

Incomplete list of mistakes in the design of CSS

Published: 2025-12-11 | Origin: Hacker News

The statement humorously suggests that if a time machine were invented, any mistakes or issues should be rectified.

Patterns.dev

Published: 2025-12-11 | Origin: Hacker News

The content introduces "Patterns.dev," a free online resource focused on design, rendering, and performance patterns for creating effective web applications using vanilla JavaScript or modern frameworks. It covers several topics, including various design patterns such as sharing global instances, controlling interactions, and using observables. The resource emphasizes best practices like breaking down code into reusable pieces, leveraging factory functions, and optimizing application loading sequences. Additionally, it discusses techniques for efficient resource loading, animating page transitions, and managing dependencies through module imports

Nature's many attempts to evolve a Nostr

Published: 2025-12-10 | Origin: Hacker News

The typical architecture of apps relies on a centralized server in the cloud that holds total control over users, their data, and the cryptographic keys essential for security and privacy. This system creates a feudal dynamic where users, likened to peasants, must "sign in" to access their data, which the server can restrict at any time. This centralization allows a single entity to control and extract value from services, leading to powerful network effects that stifle competition. The decline of platforms like the

Getting a Gemini API key is an exercise in frustration

Published: 2025-12-10 | Origin: Hacker News

The author, a reader and writer who enjoys programming, has recently started a side project using React. To streamline the coding process, they decided to use an AI coding assistant, settling on Claude Code but intrigued by Google’s Gemini 3 Pro despite a general aversion to Google products. They sought to upgrade from Gemini CLI, which limited access to Gemini 2.5, to Gemini 3 Pro without encountering rate limits. However, the author encountered confusion due to the various products associated with the

Super Mario 64 for the PS1

Published: 2025-12-10 | Origin: Hacker News

The content emphasizes the importance of user feedback and indicates that all input is taken seriously. It refers to documentation for available qualifiers and mentions a work-in-progress (WIP) port of the Super Mario 64 game for the PlayStation 1. The repository does not contain all the necessary assets for compiling the game, and users must have an original copy to extract these assets. It encourages pull requests but advises discussing significant changes through an issue first. Additionally, there is a note about a loading error,

Auto-grading decade-old Hacker News discussions with hindsight

Published: 2025-12-10 | Origin: Hacker News

The author discovered an HN thread discussing Gemini Pro 3's predictions about the HN front page in 10 years, which led them to reflect on the past discussions from December 2015. They found that using ChatGPT 5.1 Thinking provided a more insightful analysis of those discussions than their own assessment. Inspired, they decided to create a project using the recently released Opus 4.5 to compile and analyze articles from Hacker News for all of December 2015. They spent

Size of Life

Published: 2025-12-10 | Origin: Hacker News

Failed to fetch content - HTTP Status - 403