News Nug
Show HN: JavaScript-free (X)HTML Includes

Published: 2025-08-22 | Origin: Hacker News

The content emphasizes the importance of user feedback and mentions that all input is valued. It provides a brief overview of using XSL for rendering web pages without server-side code, static site generators, or JavaScript, allowing for consistent theming across pages. Users can view the implementation by accessing index.xml or other XML files, which will load a specified template for rendering. More advanced examples of template definitions and nesting are available in a separate section. Additionally, there are loading error messages for the examples provided.

The first Media over QUIC CDN: Cloudflare

Published: 2025-08-22 | Origin: Hacker News

Cloudflare has announced the launch of its Media over QUIC (MoQ) CDN, marking a significant advancement in live media technology. MoQ is positioned as a potential successor to existing standards like WebRTC, HLS/DASH, and RTMP/SRT. This product is now available for testing on Cloudflare's extensive anycast network, allowing users to showcase its capabilities. The announcement includes a public endpoint for experimentation and encourages developers to utilize various libraries and tools to connect and publish live broadcasts.

Weaponizing image scaling against production AI systems - AI prompt injection via images

Published: 2025-08-22 | Origin: /r/programming

The blog post discusses a vulnerability in AI systems, specifically the Google Gemini CLI, related to image scaling attacks that can lead to data exfiltration. Attackers can exploit the scaling down of images to embed invisible prompt injections, which can trigger unexpected actions like extracting user data when the modified image is processed by the model. The post describes how these attacks can be executed on multiple platforms and offers guidance on mitigation. It also introduces Anamorpher, an open-source tool for creating and analyzing these manipulated

XSLT removal will break multiple government and regulatory sites across the world

Published: 2025-08-22 | Origin: /r/programming

The content expresses a strong commitment to considering user feedback and highlights issues related to a proposal for removing XSLT from specifications. It emphasizes that the proposal does not adequately address existing use cases beyond Chrome's statistical metrics. The text refers to Blink's principles of web compatibility, noting that even a small percentage of impacted page views can lead to significant user frustration. It points out that there are numerous web pages viewed monthly, and breaking even a tiny fraction could still result in user dissatisfaction. The author calls for

Help!Check the post generation

Published: 2025-08-22 | Origin: /r/ruby

Failed to fetch content - HTTP Error - Failed to open TCP connection to :80 (Connection refused - connect(2) for nil port 80)

Vibe Debugging: Enterprises' Up and Coming Nightmare

Published: 2025-08-22 | Origin: /r/programming

The author is grappling with serious issues on their meme stock valuation website, specifically related to erratic growth numbers that should be stable but instead fluctuate drastically. Attempts to debug the code are met with frustration as it is chaotic and difficult to understand. The author enlisted the help of an AI, Claude, to simplify the code, but this effort inadvertently resulted in the loss of a key feature. Recognizing the temptation to push boundaries during development, the author reflects on the challenges of maintaining disciplined coding practices while

Why is choral music harder to appreciate?

Published: 2025-08-22 | Origin: Hacker News

Failed to fetch content - HTTP Status - 403

Availability Models: Because “Highly Available” Isn’t Saying Much

Published: 2025-08-22 | Origin: /r/programming

The author expresses gratitude for reaching 3,000 subscribers and shares insights from a reliability glossary on distributed systems, specifically focusing on availability models in databases. They reference two whitepapers, one on Google’s Megastore and another on Amazon’s Dynamo, noting that while both claim to be "highly available," they define the term differently. The discussion highlights the complexity of availability, revealing that it includes response time, not just the ability to provide non-error responses. The CAP Theorem is mentioned for

Rage::Deferred is a new background job processor

Published: 2025-08-22 | Origin: /r/ruby

The content discusses Rage::Deferred, an in-process background job queue designed to improve request processing by offloading long-running tasks. It utilizes a write-ahead log to ensure tasks can be replayed after server crashes, waiting up to 15 seconds for in-progress tasks to complete during restarts. Tasks are executed using a fiber scheduler, making them more efficient than traditional thread-based processors. The default disk-based log allows for easy setup, with future support for Redis and SQL logs. Tasks are created by

It’s Not Wrong that "🤦🏼‍♂️".length == 7

Published: 2025-08-22 | Origin: /r/programming

The post critiques the common criticism of JavaScript's handling of string lengths, particularly concerning emojis. It highlights that a string containing an emoji may have a length greater than one (e.g., "🤦🏼‍♂️" has a length of 7 in JavaScript), leading some to mock the language. However, the author argues that this criticism lacks depth, and contrasts JavaScript’s approach with that of Swift and Python 3. While Swift's method isn't definitively superior, Python

Redis streams: a different take on event-driven

Published: 2025-08-22 | Origin: /r/programming

Redis Streams is a data structure within Redis designed for managing real-time, high-throughput event data, ideal for applications such as event sourcing and sensor data collection. It operates as an append-only log with unique, time-based IDs for each entry and allows random access in constant time. Notable features include: - **Append-only**: Data, once written, cannot be modified. - **Immutable Entries**: Each entry consists of key-value pairs identified by a unique ID. - **Real-time Synd

Tsinghua University Breaks a 65-Year Limit: A Faster Alternative to Dijkstra’s Algorithm

Published: 2025-08-22 | Origin: /r/programming

Researchers at Tsinghua University introduced a groundbreaking algorithm in 2025, surpassing Dijkstra’s algorithm, which had been the go-to method for solving the single-source shortest path (SSSP) problem for decades. Dijkstra's algorithm has a complexity of O(m + n log n), relying heavily on sorting operations within a priority queue. The Tsinghua team, led by Professor Duan Ran, achieved a theoretical runtime of O(m · log^(2/3) n) by circumvent

Io_uring, kTLS and Rust for zero syscall HTTPS server

Published: 2025-08-22 | Origin: Hacker News

The text discusses the evolution of web server architecture and performance optimizations, focusing on the increasing need for high-capacity servers around the turn of the century, particularly related to the C10k problem. Initially, web servers handled requests by pre-forking processes for efficiency, as creating a new process for each request was common at the time. As technology evolved, the use of threads became prevalent, followed by techniques like poll() and select() to minimize the overhead of process/thread creation and context switching

Everything Is Correlated

Published: 2025-08-22 | Origin: Hacker News

The content discusses the principle that all real-world variables are correlated, which has significant implications for statistical theory, particularly concerning null hypothesis significance testing. It highlights the idea that non-zero correlations exist between measured variables, even if they seem independent, and that these correlations are not mere artifacts of sampling error. This observation challenges the validity of the null hypothesis, suggesting that it will always be rejected with sufficiently large datasets, meaning a failure to reject it only indicates insufficient data rather than support for a theory. The piece

Introducing Top Secret

Published: 2025-08-22 | Origin: /r/ruby

The thoughtbot team is currently engaging with clients in a live collaboration, inviting questions from viewers. They discuss challenges related to logging sensitive information during network requests, particularly when dealing with free text rather than parameters. Since regex filtering has limitations, especially for unstructured data, they recommend using named-entity recognition (NER) to identify sensitive information such as personal details. The tool, Top Secret, combines regex and NER to effectively filter this information. In scenarios like chatbots that handle user data, it's

Control shopping cart wheels with your phone (2021)

Published: 2025-08-22 | Origin: Hacker News

Of course! Please provide the content you'd like me to summarize.

Decided to make something simple and cool opensource!

Published: 2025-08-21 | Origin: /r/ruby

The content promotes a downloadable software called "Stars," compatible with Windows, macOS, Linux, and Android. It is designed as a simple and cool Ruby project for beginners. Users are encouraged to join a Discord server and follow the creator. Instructions include uploading the file to the software and logging into itch.io to leave comments.

From GPT-4 to GPT-5: Measuring progress through MedHELM [pdf]

Published: 2025-08-21 | Origin: Hacker News

The content appears to be a portion of a binary-encoded PDF file (version 1.7). It includes various compressed streams that typically represent textual or graphical content, but the actual data is unreadable in its current form due to compression and encoding. To summarize or extract meaningful information from it, you would need to decode or decompress the PDF using appropriate software. If there's specific information or a certain section of the PDF you're looking for, please provide more details.

Open Source Maintenance Fee business model example from WiX Toolset

Published: 2025-08-21 | Origin: Hacker News

The WiX Toolset is a set of build tools designed to create Windows Installer packages using standard build concepts. It allows for the compilation and linking of source code into various formats, including executable setup bundles (.exe), installation packages (.msi), merge modules (.msm), and patches (.msp). WiX supports integration with automated build systems and uses MSBuild with various development environments like Visual Studio. The toolset includes extensions for additional functionalities, such as installing IIS websites and managing SQL Server databases

Rolling the dice with CSS random()

Published: 2025-08-21 | Origin: Hacker News

On August 21, 2025, Jon Davis, Jen Simmons, and Tim Nguyen introduced the new `random()` function in CSS, which allows developers to generate random values directly within stylesheets—eliminating the need for JavaScript. The function takes three arguments: `random(min, max, step)`, enabling users to specify a range for random numbers and optionally define a step for rounder results. This function can be used for various purposes such as randomizing animation delays, layout positions