Feed aggregator
Show HN: Afterburner – Capability-Sandboxed JavaScript/TS Runtime in Rust
Hey everyone! I've been working on something called Afterburner: a fast, embeddable JS/TS runtime written in Rust, with a capability sandbox baked right in.
Scripts run locked down by default: no network, no filesystem, no environment variables. You explicitly grant whatever access a script actually needs, and every call gets hard caps on CPU, memory, and time.
The goal isn't to replace your existing stack. It's to fit cleanly into it:
Embed a JS/TS engine in your Rust app with a single crate. Run user scripts, plugins, business rules, or edge logic, each call fully sandboxed. Wrap the tools you already use. Commands like `burn node app.js`, `burn npm test`, `burn bun`, `burn deno run`, and `burn npx tsx` run your existing toolchain under the sandbox. Take an unmodified Express, Fastify, or Hono app and run it with zero ambient I/O and a memory ceiling. No code changes needed. Use the built-in registry at registry.afterburner.sh. Publish with `burn publish`, install with `burn install` or `burn add` dependencies are pinned by content digest. Every package ships with a capability manifest, so installed code is sandboxed by default. It also interops with npm, so you can still pull in npm libraries as needed. Since nothing gets ambient authority, it's also just a clean, practical way to run untrusted code without having to cross your fingers and hope.
Repo: https://github.com/afterburner-sh/afterburner Site: https://afterburner.sh Registry: https://registry.afterburner.sh
The full walkthrough like how it works, what it can do, and benchmarks hitting up to ~16.8M rows/sec is all in one post. It's the best place to start: https://vertexclique.com/blog/burn-after-reading/
One licensing note: it's source-available under BSL-1.1, which automatically converts to Apache-2.0 four years after each release. Free to use for your own projects so go build something.
Comments URL: https://news.ycombinator.com/item?id=48526827
Points: 1
# Comments: 0
Readers reply: Experts say we should use passkeys, but can a smartphone pin really be safer than a password?
The long-running series in which readers answer other readers’ questions on subjects ranging from trivial flights of fancy to profound scientific and philosophical concepts
This week’s question: Is ‘ripen at home’ fruit the supermarkets’ idea of a joke?
I’ve been struggling to get my head around the idea that a passkey, which can be a pin on your phone, or facial recognition, can be safer than using a complicated password and two-factor authentication.
I get that having something unique to your device, not stored on a company’s server, is unphishable and less hackable by cybercrims, but what if your phone is nicked and someone guesses the password? And what if you lose your phone?
Continue reading...Claude Fable 5 vs. GPT-5.5: better planning, similar execution
Article URL: https://blog.kilo.ai/p/claude-fable-5-vs-gpt-5-5
Comments URL: https://news.ycombinator.com/item?id=48526819
Points: 3
# Comments: 0
AI is revolutionising the stock market
Article URL: https://www.ft.com/content/b31f1e09-5aae-4cad-af15-97adb15dba70
Comments URL: https://news.ycombinator.com/item?id=48526801
Points: 1
# Comments: 0
Meta‑Attention Is All You Need
Article URL: https://medium.com/@vla3728419/meta-attention-is-all-you-need-650a90832d27
Comments URL: https://news.ycombinator.com/item?id=48526800
Points: 1
# Comments: 0
Qwen 3.6 93B with MTP on 2×RTX 3090 NVLink=187 tokens/SEC,LLM lost bleat-a-thon
Article URL: https://github.com/Augmented-Reality-Virtual-Reality-AR-VR/P...
Comments URL: https://news.ycombinator.com/item?id=48526796
Points: 3
# Comments: 0
How did Atari apply side art to Arcade Cabinets?
Article URL: https://arcadeblogger.com/2026/06/14/how-did-atari-apply-side-art-to-arcade-cabinets/
Comments URL: https://news.ycombinator.com/item?id=48526793
Points: 6
# Comments: 1
Formal Methods and the Future of Programming
Article URL: https://blog.janestreet.com/formal-methods-at-jane-street-index/?from_theconsensus=1
Comments URL: https://news.ycombinator.com/item?id=48526633
Points: 1
# Comments: 0
The Universe Is Made of Music [video]
Article URL: https://www.youtube.com/watch?v=j06DGlbwM34
Comments URL: https://news.ycombinator.com/item?id=48526625
Points: 1
# Comments: 0
KBlocker: Linux Productivity Hack
Article URL: https://github.com/Dan-J-D/kblocker
Comments URL: https://news.ycombinator.com/item?id=48526611
Points: 1
# Comments: 0
Double your Codex / Claude Code productivity and output
Article URL: https://github.com/tanweai/pua
Comments URL: https://news.ycombinator.com/item?id=48526597
Points: 1
# Comments: 0
Kagi adds Hacker News conversation under links
Article URL: https://imgur.com/a/S4S0vPX
Comments URL: https://news.ycombinator.com/item?id=48526587
Points: 1
# Comments: 0
Stop Monitoring AI Systems Like Web Services
Article URL: https://www.newsletter.swirlai.com/p/stop-monitoring-ai-systems-like-web
Comments URL: https://news.ycombinator.com/item?id=48526569
Points: 1
# Comments: 0
Bullet Trains Without Tracks
Article URL: https://goodcomputer.substack.com/p/bullet-trains-without-tracks
Comments URL: https://news.ycombinator.com/item?id=48526561
Points: 1
# Comments: 0
InferenceFS: Never worry about data again (Again)
Article URL: https://github.com/philipl/inferencefs/
Comments URL: https://news.ycombinator.com/item?id=48526555
Points: 1
# Comments: 0
Searchable Attenborough
Article URL: https://attenborough-100.vercel.app/
Comments URL: https://news.ycombinator.com/item?id=48526548
Points: 2
# Comments: 0
High-performance, cross-platform real-time ASCII video rendering engine
Article URL: https://github.com/YusufB5/ASCILINE
Comments URL: https://news.ycombinator.com/item?id=48526503
Points: 2
# Comments: 1
The Last Time the US Hosted the World Cup, One of the Weirdest Nights in Sports History Unfolded
Can't Stop the Signal. Poison It
Article URL: https://blog.digitalgrease.dev/posts/fauxx-cant-stop-the-signal
Comments URL: https://news.ycombinator.com/item?id=48526472
Points: 1
# Comments: 0
