Hacker News
1X-ray: a Python library for finding bad redactions in PDF documents
- x-ray is a Python library that detects improperly redacted PDF documents where sensitive text is merely covered with black rectangles instead of being properly removed. It analyzes PDFs to find text hidden under visual overlays, helping identify security vulnerabilities in document redaction processes.
Font-based redaction attacks
Discussion of how font kerning and glyph spacing can leak information from redacted PDFs. Researchers suggest that AI combined with font metrics could determine likely words based on redaction box sizes and surrounding text positioning, creating vulnerabilities even in properly redacted documents.Epstein document redaction failures
Analysis of recently released Epstein court documents where redactions were improperly done by drawing black boxes over text rather than removing it. Many believe this was either massive incompetence or intentional malicious compliance, as proper redaction procedures are well-established in legal contexts.Proper PDF redaction techniques
Technical discussion of correct vs incorrect redaction methods. Proper workflow involves using specialized tools like Adobe Pro to permanently remove text, while common mistakes include simple black highlighting or preserving document revision history that contains unredacted versions.
2We replaced H.264 streaming with JPEG screenshots (and it worked better)
- The team spent three months building a complex H.264 video streaming pipeline for their AI coding platform, only to replace it with simple JPEG screenshot polling when enterprise networks and poor WiFi made the sophisticated solution unreliable. Their final hybrid approach uses high-quality video streaming for good connections and falls back to screenshot polling for poor networks, proving that simple solutions often outperform complex ones in real-world conditions.
Poor video encoding configuration
Multiple commenters criticized the 40Mbps bitrate as ridiculously high for desktop streaming, noting YouTube uses <1Mbps for similar content. They argued the problem wasn't H.264 itself but poor encoder settings and lack of proper rate control.LLM-generated content concerns
Several users identified the article as likely AI-generated based on writing style and technical imprecision, expressing frustration about LLM "slop" reaching HN's front page and questioning the value of AI-assisted technical writing.Alternative technical approaches
Commenters suggested proven solutions like VNC's tile-based updates, DASH/HLS streaming protocols, or streaming text/state data instead of video, arguing the authors reinvented existing technologies poorly.
3Unifi Travel Router
- The UniFi Travel Router is a pocket-sized device that recreates your entire UniFi network environment wherever you go. It automatically applies location-aware policies, connects existing UniFi devices without reconfiguration, and supports multiple uplink options including Ethernet, WiFi, and 5G via smartphone tethering.
GL.iNet travel routers vs UniFi
Users heavily favor GL.iNet travel routers (especially GL-AXT1800) for their hackability, OpenWRT support, Tailscale integration, and proven reliability. Many see limited advantage in UniFi's $80 WiFi 5 router compared to cheaper, more capable GL.iNet alternatives.Travel networking use cases
Discussion splits between minimalist travelers using just phones/Tailscale versus those bringing multiple devices. Heavy business travelers (150+ hotel nights) find travel routers essential for VPN tunneling, captive portal handling, and family connectivity needs.UniFi ecosystem integration concerns
Users express mixed feelings about UniFi's telemetry practices and ecosystem lock-in. While some appreciate seamless home network extension via Teleport, others prefer open-source alternatives due to privacy concerns and vendor independence.
4Show HN: CineCLI – Browse and torrent movies directly from your terminal
- A developer created CineCLI, a cross-platform terminal application that allows users to search for movies, view details like ratings and genres, and open torrents directly in their system's torrent client. The tool works on Linux, macOS, and Windows, features both interactive and non-interactive modes, and operates without ads or tracking.
Alternative streaming solutions
Users discuss various tools like Stremio+Torrentio, Jellyfin with .strm files, Kodi setups, and other CLI/web-based streaming applications as alternatives to the main project, sharing configurations and recommendations for different use cases.Piracy sources and quality concerns
Discussion about torrent sites, quality of releases (YTS being low quality), recommendations for better sources like rutracker.org, private trackers, and the target audience for CLI-based piracy tools.Legal concerns and project sustainability
Users reference Popcorn Time's demise, express concerns about takedown notices, discuss the legal risks of easy-to-use piracy tools, and debate whether the project might face similar legal challenges.
5Snitch – A friendlier ss/netstat
- Snitch is a command-line network monitoring tool that provides a user-friendly alternative to ss/netstat for inspecting network connections. It offers both an interactive terminal interface and styled table output, with features like live updates, filtering by protocol/state, DNS resolution, process monitoring, and multiple output formats including JSON and CSV. The tool can be installed via various package managers including Homebrew, Go, Nix, and AUR, and supports both Linux and macOS systems.
Poor defaults in network tools
Users criticize ss and lsof for having terrible default outputs that show irrelevant details while hiding important information like process names and listening sockets. Discussion covers why Unix tools can't easily change defaults due to backwards compatibility concerns.Name confusion with existing tools
Multiple users point out that "snitch" conflicts with Little Snitch (Mac firewall) and other existing network tools. Some suggest the name needs changing due to potential trademark issues and general unfriendliness of the word "snitch."TUI tools and accessibility
Discussion about the growing trend of terminal user interface tools, their accessibility compared to GUI applications, and practical considerations like whether TUI tools work as well for people with disabilities as traditional command-line or graphical interfaces.
610 years bootstrapped: €6.5M revenue with a team of 13
- DatoCMS achieved strong growth in 2025 with €6.5 million revenue (10% YoY growth) and exceptional 65% EBIT margin, far exceeding typical SaaS companies. They expanded to 185 agency partners and 340 showcase projects while shipping major product improvements including type safety, AI integrations, enhanced content editing, and 30 new plugins.
Bootstrapping vs VC funding
Multiple bootstrapped founders celebrate avoiding VC funding, emphasizing benefits like maintaining full control, peace of mind, and sustainable growth. They contrast this with VC-backed startups that burn cash on unnecessary expenses and face external pressure.Revenue per employee and business metrics
Discussion of DatoCMS achieving exceptional revenue per employee (~€500K) with 65% EBIT margin. Commenters note this significantly exceeds typical company performance of €200K per employee, creating resilience and optionality.Profit sharing and employee treatment
Debate about disclosing high profit margins publicly, with DatoCMS founder explaining they share 6-7% of profits with employees and freelancers on top of regular salaries, viewing transparency and fair compensation as important values.
7Texas app store age verification law blocked by federal judge
- A Texas federal judge blocked an App Store age verification law set to take effect January 1, 2026, ruling it likely violates the First Amendment. The law would have required Apple to verify user ages when creating accounts and mandate parental controls for minors under 18.
Constitutional free speech protections
Federal judge ruled Texas age verification law violates First Amendment, comparing it to requiring ID checks at bookstores. Discussion covers strict scrutiny standards, Supreme Court precedent in Free Speech Coalition v. Paxton, and tension between protecting minors vs. adult speech rights.Privacy and surveillance concerns
Age verification requirements force collection of sensitive personal data for all users, including adults downloading basic apps like weather. Users worry about creating surveillance infrastructure under guise of child protection, with calls for data minimization approaches.Technical implementation challenges
Developers struggle with half-baked APIs, global implementation requirements for state laws, and systems failing open when verification calls fail. Discussion includes comparison to existing age restrictions for porn vs. broad app store coverage.
8iOS 26.3 brings AirPods-like pairing to third-party devices in EU under DMA
- The European Commission praised Apple's iOS 26.3 changes that comply with the Digital Markets Act, allowing EU third-party accessories like earbuds and smartwatches to use AirPods-like proximity pairing and receive iPhone notifications. These features launch in January 2026, exclusively for EU users and developers.
Apple's deliberate ecosystem lock-in practices
Users frustrated by Apple restricting third-party device functionality (WhatsApp calls on Apple Watch, limited Bluetooth features for non-Apple devices). Debate over whether limitations are Apple's fault or third-party developers choosing not to implement features.EU regulation forcing Apple to open up
Strong support for EU's Digital Markets Act compelling Apple to allow third-party device integration. Users cite benefits like USB-C adoption and roaming fee caps, though some worry about regional restrictions and implementation challenges.Technical implementation and user experience concerns
Discussion about whether opening Apple's APIs will maintain quality and performance. Mixed evidence on Apple's current audio quality issues on macOS, with debate over whether regulation helps or hinders innovation and user experience.
9How did DOGE disrupt so much while saving so little?
- Elon Musk's Department of Government Efficiency claimed to make over 29,000 cuts to federal spending but failed to achieve its $1 trillion reduction goal. A New York Times analysis found DOGE's biggest savings claims were largely incorrect, with major contract "terminations" actually still active, while thousands of smaller cuts had minimal budget impact.
Disruption vs incompetence debate
Users debate whether DOGE's failures were intentional disruption to benefit Musk's companies by weakening regulatory oversight, or simply incompetence. Some argue it was calculated to harm agencies investigating Musk, while others invoke Hanlon's razor about stupidity vs malice.Contractor rehiring increases costs
Many fired government employees received severance packages and were rehired as contractors at 2-3x higher rates, actually increasing costs rather than saving money. This created a profitable consulting market while the same work still needs to be done.Government efficiency misconceptions
Discussion of unrealistic expectations about cutting government spending, with users noting that meaningful savings would require cuts to major programs like Social Security and Medicare, not just eliminating waste.