Readit News logoReadit News
Stasshe commented on Cloudflare Global Network experiencing issues   cloudflarestatus.com/inci... · Posted by u/imdsm
Stasshe · 4 months ago
in Japan, now, it's alive.

how about your location?

Stasshe commented on Ask HN: How can we achieve a full POSIX shell implementation purely client-side?   github.com/Stasshe/Pyxis-... · Posted by u/Stasshe
stop50 · 4 months ago
Could a wasm build of uutils be of help?
Stasshe · 4 months ago
Yes, you can use Custom Extension with through an interactive CLI to create template extension.

I'm working hard to improve the utilities and make the connection between wasm build and pyxis core system.

I'wont use wasm to build as a core, base system, but i will support in extension.

Still, I was not uploaded a react build extension system, but if you want to use this, you can upload a zip extension file.(which is created for pyxis)

* sorry for my bad english XD

Stasshe commented on Ask HN: How can we achieve a full POSIX shell implementation purely client-side?   github.com/Stasshe/Pyxis-... · Posted by u/Stasshe
d3Xt3r · 4 months ago
Cool project! But the name is a bit misleading, I thought you were talking about Ptyxis[1], the new terminal for GNOME.

[1] https://gitlab.gnome.org/chergert/ptyxis

Stasshe · 4 months ago
thanks!

uh, I didn't know that. that's true. there are so similar naming...

but I have apply to the contest at this name, and I'm in best16, so I can't change it, unfortunately.

Stasshe commented on Ask HN: How can we achieve a full POSIX shell implementation purely client-side?   github.com/Stasshe/Pyxis-... · Posted by u/Stasshe
Stasshe · 4 months ago
I'm developing Pyxis (https://github.com/Stasshe/Pyxis-CodeCanvas), a browser-based IDE designed primarily for iPad. *Since WebContainer doesn't work reliably on iPad*, I had to build everything from scratch, including a complete shell system.

*What I've implemented so far:*

Our StreamShell architecture supports: - Pipeline processing with true streaming (`cmd1 | cmd2 | cmd3`) - Full redirection support (`>`, `>>`, `<`, `2>&1`, custom fd like `3>file`) - Control structures (`if/then/else`, `for/while` loops, `break/continue`) - Variable expansion (`$VAR`, `$(command)`, `$((arithmetic))`) - Logical operators (`&&`, `||`) with short-circuit evaluation - Background execution (`cmd &`) - Process abstraction with signal handling - Node.js Stream API for backpressure handling - Most common Unix commands (`ls`, `cat`, `grep`, `head`, `tail`, etc.) - Script execution (`.sh` files with full control flow)

*Technical approach:* - Process abstraction using Node.js PassThrough streams - File descriptor management via Map structures - AST-based command parsing - Per-fd buffering strategy - IndexedDB-based virtual file system - *Pure JavaScript/TypeScript implementation - no WASM, no WebContainer* - Runs entirely in the browser main thread with timeout protection

*Current limitations:* - Some advanced bash features not yet implemented (shell functions, process substitution, heredocs) - No `*` recursive globbing - Simplified job control - Browser environment constraints (no native modules, all async) - Single-threaded execution (no Web Workers for commands)

*My questions:*

1. *Is this approach sufficient for a practical shell environment?* Are there critical POSIX features I'm missing that would make this unsuitable for real-world use on iPad?

2. *Are there fundamental design flaws in my implementation?* Particularly concerned about: - The fd management strategy (Map-based with PassThrough streams) - Stream-based pipeline processing and backpressure handling - Memory efficiency with large data flows - The parser's handling of edge cases and quote processing - Timeout-based protection vs. proper cancellation

3. *What would you prioritize next?* Given the constraints of: - Browser-only environment (no server, no WebContainer) - iPad compatibility requirement - Must work offline - Limited to what IndexedDB + browser APIs can provide

4. *Alternative approaches?* Are there better architectural patterns for implementing a POSIX-like shell in a pure browser environment that I should consider?

The full technical documentation is available here: [SHELL-SYSTEM.md](https://github.com/Stasshe/Pyxis-Client-Side-Code-Editor/blo...)

*Why not WebContainer?* WebContainer is an excellent technology, but it has significant limitations on iPad/iOS Safari - SharedArrayBuffer restrictions, memory constraints, and reliability issues make it unsuitable for our use case. We need a solution that works consistently across all platforms, especially mobile.

I'd appreciate any feedback from those who have experience with shell implementation, browser sandboxing, or building development tools for constrained environments like iPad.

Stasshe commented on Tell HN: iPadOS 26 bricked my iPad Pro    · Posted by u/designerbenny
Stasshe · 4 months ago
Fortunately, Mine did not become a brick, but I'm sure that iOS v26 is the most terrible version ever. it's just a trash.
Stasshe commented on The Windows 7 Renaissance? StatCounter shows surge in usage    · Posted by u/Stasshe
borplk · 4 months ago
If it's due to the user-agent, the bots could be any OS they may just be pretending to be Windows 7.
Stasshe · 4 months ago
Uh, I see.
Stasshe commented on SVG phishing campaign targets Ukraine    · Posted by u/Stasshe
SurceBeats · 4 months ago
The sophistication here (SVG > CHM > fileless execution > dual payload) suggests access to commercial malware toolkits rather than bespoke APT development.
Stasshe · 4 months ago
And, it might be taking longer to discover because it's hard to notice with SVG.
Stasshe commented on SVG phishing campaign targets Ukraine    · Posted by u/Stasshe
GamingAtWork · 4 months ago
it seems like the SVG file/image contained an embedded link? And they clicked the link and got pulled into one of those scam websites asking you to install shit software viruses. It was not that the svg file just went crazy and hacked their entire machine...
Stasshe · 4 months ago
Not exactly — it’s a bit more than just a link scam. The SVG actually started a multi-stage infection chain, downloading a password-protected archive with a malicious CHM/HTA that deployed Amatera Stealer and PureMiner. So it’s a real system compromise, not just a fake site trick.

u/Stasshe

KarmaCake day6October 25, 2025
About
I'm a Japanese student. Maybe my English sentence is odd, sorry. You’re not the clever one—it’s just the AI. Don’t fool Yourself. Of course, include me.
View Original