Sign in
Hacker News
Wednesday, August 20
1
Obsidian Bases
Discussion
Obsidian Bases provides a flexible workspace where you can store and organize information using properties, commands, visual views like tables, calendars, and galleries. It helps manage information efficiently through customizable templates and queries.
Understanding Obsidian Bases
A new feature that creates database-like views of markdown files, allowing users to filter and sort files based on properties stored in frontmatter. It displays files in table format and stores configurations in YAML.
Simplicity vs complexity
Debate around whether Obsidian should remain a simple markdown editor or embrace more complex features. Many users advocate sticking to core functionality rather than getting overwhelmed with plugins and advanced features.
Syncing across devices
Discussion of different methods to sync Obsidian between devices, including official Obsidian Sync, Git, Google Drive, iCloud, and Syncthing. Users share pros and cons of each approach and setup instructions.
2
OpenMower – An open source lawn mower
Discussion
This open-source project transforms a basic robotic lawn mower into a smart autonomous device without perimeter wires. It aims to improve upon random-pattern mowing with better navigation, safety features, and obstacle avoidance, while keeping costs low and maintaining an open development approach for DIY enthusiasts.
Navigation and control methods
Discussion of different navigation approaches (GPS, cameras, wires) for robotic mowers, their pros and cons, and effectiveness. Many newer models use systematic rather than random patterns, with camera-based systems showing promise.
Safety and wildlife concerns
Debate about nighttime operation risks to animals like hedgehogs, with calls to only operate during daytime. Some argue wildlife impact is inevitable regardless of timing, while others advocate for reducing lawn areas.
Hardware challenges
Discussion of robotic mower hardware limitations, durability issues, and high costs. Interest in DIY electric conversions using salvaged parts, with focus on motor configurations and battery systems.
3
Show HN: Whispering – Open-source, local-first dictation you can trust
Discussion
Braden introduces Whispering, an open-source speech-to-text app focused on data privacy and transparency. The app stores data locally and offers both local and cloud provider options. It's part of Epicenter, a larger project aiming to create interoperable, local-first tools. The project recently received YC funding to support open-source development.
Local-first software philosophy
Discussion centers on the importance of open-source, local-first applications that store data transparently in plaintext/SQLite, with strong support for this approach over cloud-based alternatives.
Linux dictation setup
Users share and discuss technical implementations of speech-to-text systems on Linux, particularly using whisper.cpp, with detailed command-line configurations and keyboard binding setups.
Speech recognition models
Comparison of different speech recognition models like Whisper, Parakeet, and NeMo, discussing their relative performance, accuracy, and platform compatibility, with particular focus on local processing capabilities.
4
Counter-Strike: A billion-dollar game built in a dorm room
Discussion
Minh Le, a computer science student at Simon Fraser University, created Counter-Strike as a mod while in college. The game, featuring terrorists vs counterterrorists gameplay, became hugely successful with over 100,000 concurrent players and generated significant monthly revenue through advertising before being officially released by Valve in 2000.
Server browsers and community
Loss of server browsers in modern games has diminished ability to build gaming communities. Players reminisce about CS 1.6 servers fostering friendships, admin roles, and custom mods, contrasting with today's matchmaking systems.
Early 2000s gaming nostalgia
Discussion of LAN parties, IRC gaming communities, clan matches, and modding culture from CS's peak era. Many credit CS with introducing them to programming, server administration and web development.
Gambling and monetization
Debate over impact of CS:GO/CS2's skin gambling ecosystem. Some criticize predatory mechanics and match-fixing concerns, while others argue skins help fund game development and esports scene.
5
How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos
Discussion
The blog post details how security researchers discovered and responsibly disclosed critical vulnerabilities in CodeRabbit, an AI code review tool. They found a way to execute malicious code through Rubocop configuration, potentially accessing private repositories and sensitive data. CodeRabbit quickly addressed the issues in January 2025 by implementing security measures and rotating credentials.
Security implementation failures
Discussion of how CodeRabbit failed to properly isolate code analysis tools, violated basic security principles, and exposed sensitive credentials in environment variables against GitHub's own recommendations.
Disclosure transparency
Debate about CodeRabbit's handling of the vulnerability disclosure, with some criticizing their delayed public acknowledgment while others defend the coordinated disclosure timing with researchers.
Broader security implications
Concerns about the potential catastrophic impact of such vulnerabilities in GitHub apps, discussion of supply chain attacks, and calls for stronger industry regulations and security standards.
6
Left to Right Programming
Discussion
Programs should be written in a way that allows them to remain valid during the typing process, enabling better IDE support and autocompletion. This approach enhances code discoverability, makes programming more intuitive, and helps developers naturally discover relevant functions and methods as they write code.
SQL clause ordering
Discussion about how SQL's SELECT-before-FROM ordering is counterintuitive, with many arguing FROM should come first for better readability and IDE support. Several modern SQL variants and alternatives now support FROM-first syntax.
Python readability
Debate about Python's strengths and weaknesses in multi-developer projects, focusing on list comprehensions, type annotations, and coding style conventions. Discussion split between those finding Python painful and those praising its accessibility.
Pipeline operators
Widespread support for adding pipe operators to languages like Python and JavaScript to enable more readable data transformations. Examples shared from R, F#, and other languages that successfully implement piping syntax.
7
FFmpeg Assembly Language Lessons
Discussion
This is an introduction to FFmpeg's assembly language programming course, requiring C programming and basic math knowledge. The course offers lessons and assignments aimed at enabling students to contribute to FFmpeg, with support available through Discord and translations in French and Spanish.
Performance optimization debates
Discussion of whether all software should prioritize performance like FFmpeg does, with some arguing for profiler use and optimization while others say most projects don't need extreme optimization.
Assembly vs higher level code
Debate about when assembly is actually needed vs using higher-level languages/intrinsics, with examples from FFmpeg and discussion of compiler optimization challenges.
FFmpeg's scale and impact
Discussion of FFmpeg's massive impact on computing resources globally, its API design, and how even small improvements save significant compute time across all users.
8
T-Mobile claimed selling location data without consent is legal–judges disagree
Discussion
A federal appeals court upheld a $92 million fine against T-Mobile for selling customer location data to third parties without consent. T-Mobile and Sprint sold location information to aggregators until 2019, leading to unauthorized access. The court rejected T-Mobile's arguments against the FCC's authority to impose the penalty.
Carrier opt-out settings
Users discuss how to opt out of data collection/sharing on major carriers, noting settings are hard to find, often reset, and new tracking options appear regularly. Many express frustration with the complexity of opting out.
Location tracking concerns
Users share experiences of carriers tracking and selling location data, particularly evident through geographically-targeted spam calls. Discussion of technical details and precision of carrier-based location tracking.
Market structure
Conversation about the oligopolistic nature of US carriers, barriers to new competitors, and role of FCC spectrum allocation in maintaining limited competition. Discussion of potential solutions and MVNO limitations.
9
"Remove mentions of XSLT from the html spec"
Discussion
A discussion link referencing a debate about potentially removing XSLT technology from web platforms, with the conversation thread hosted on Hacker News.
Browser vendors' process and power
Discussion about how this isn't just Chrome's decision but has cross-browser vendor support, though concerns raised about power dynamics between resourced (Google) and under-resourced (Mozilla/Safari) vendors.
Impact on web compatibility
Debate about breaking the fundamental promise of HTML spec backward compatibility, with concerns about impact on long-tail web content and corporate intranets, versus arguments about security and maintenance burden.
Personal experiences with XSLT
Developers sharing nostalgic stories about using XSLT in past projects, particularly for documentation and personal websites around 2008, while acknowledging its complexity and limitations.
10
Google admits anti-competitive conduct involving Google Search in Australia
Discussion
The ACCC has initiated Federal Court proceedings against Google Asia Pacific regarding anti-competitive agreements with Telstra and Optus for exclusive Google Search pre-installation on Android phones. Google admits liability and agrees to pay $55M in penalties, while committing to remove certain pre-installation restrictions.
Fine amount inadequacy
Discussion focused on how the $55M fine is insignificant for Google (earned in ~2.5 hours), making it merely a cost of doing business rather than a deterrent. Many argued for percentage-based fines like EU's GDPR model.
Search engine alternatives
Debate about whether users would actually switch from Google Search, with some citing successful switches to DuckDuckGo, Kagi, and Startpage, while others noted Google's ecosystem lock-in makes change difficult.
Broader antitrust implications
Discussion of similar Google deals worldwide, comparing to Microsoft's historical practices, and examining implications for competition policy. Many noted this case's connection to ongoing global antitrust efforts.
Subscribe to Hacker News Sumcast
Subscribe