Hacker Newsnew | past | comments | ask | show | jobs | submit | maxloh's commentslogin

> Programs are downloaded to my computer and executed without me being able to review them first—or rely on audits by people I trust.

JavaScript and WebAssembly programs are always executed in a sandboxed VM, without read access to the host OS files (unless, of course, you grant it).

Enabling scripting was a necessary step for interactive websites. Without it, a full page load would be required every time you upvote a Hacker News comment. In my opinion, the real problem is that browsers allow too many connections to third-party domains, which are mostly ads and trackers. Those should require user-approved permissions instead of being the default.


From the "Technical notes" page:

> Access to Internet is possible inside the emulator. It uses the websocket VPN offered by Benjamin Burns (see his blog). The bandwidth is capped to 40 kB/s and at most two connections are allowed per public IP address. Please don't abuse the service.

https://bellard.org/jslinux/tech.html


My college professor used it to teach us the Linux command line

We have Windows PCs in the classroom.


Similarly I've used it for technical interviews.

Unfortunately, he didn't attach the source code for the 64-bit x86 emulation layer, or the config used to compile the hosted image.

For a more open-source version, check out container2wasm (which supports x86_64, riscv64, and AArch64 architectures): https://github.com/container2wasm/container2wasm


https://github.com/copy/v86 might be a more 1:1 fully open sourced alternative.

Not really. x86_64 is not supported yet: https://github.com/copy/v86/issues/133

Sure, and there are probably some other things lacking, but JSLinux supports a lot more than CLI Linux userspace on x86-64 too. E.g. compare to lack of graphical interface https://github.com/container2wasm/container2wasm/issues/196

It looks like container2wasm uses a forked version of Bochs to get the x86-64 kernel emulation to work. If one pulled that out separately and patched it a bit more to have the remaining feature support it'd probably be the closest overall. Of course one could say the same about patching anything with enough enthusiasm :).


"he didn't attach the source code for the 64-bit x86 emulation layer"

It's not open source? If that's the case, it should be in his FAQ.


Looks really like Prisma to me: https://www.prisma.io/docs/orm/prisma-schema/overview#exampl...

Why build another language instead of extending an existing one?


I looked at Prisma, I very much prefer the Protobuf/Thrift model of using numbers to identify fields, which allows 2 important things: fields to be renamed without breaking backward compatibility, and a compact wire format.

I think the Protobuf language (which Skir is heavily influenced by) has some flaws in its core design, e.g. the enum/oneof mess, the fact that it allows spare field numbers which makes the "dense JSON" format (core feature of Skir) harder to get, the fact that it does not allow users to optionally specify a stable identifier to a message to get compatibility checks to work.

I get your point about "why building another language", but also that point taken too far means that we would all be programming in Haskell.


JavaScript and Kotlin do that too.

For context, they have 2 to 4 commits per month since October [1]. The last release was July 2025 [2].

[1]: https://github.com/pypy/pypy/commits/main/

[2]: https://github.com/pypy/pypy/tags


That seems reasonably active to me. You can't really expect more from an open source project without paid full-time developers.

> And pressed on if he is insisting there needs to be a democratic state, Trump told CNN, “No, I’m saying there has to be a leader that’s going be fair and just. Do a great job. Treat the United States and Israel well, and treat the other countries in the Middle East — they’re all our partners.”


Since most ISPs also maintain their own DNS resolver, they could always reverse lookup the IP address AFAIK.

The whole idea behind ECH is one IP hosts tons of sites (eg. CDN) so you have no idea which one it is.

Also reverse lookup has nothing to do with hosting own DNS resolver.


What you're describing is a SNI, not ECH. Those two serve very different purposes.

> Also reverse lookup has nothing to do with hosting own DNS resolver.

It has everything to do with that. Had you used two brain cells, you would've known that they can memorize the IP address and the domain name, and if you connect to that IP in a short period of time, most likely you visited that domain name.


SNI is unencrypted, so your ISP can see it. ECH encrypts it.

How does this relate to my comment?

True. ECH is useless if you're using plain DNS. DNS over TLS or HTTPS is the way to go.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: