Hacker Newsnew | past | comments | ask | show | jobs | submit | BodyCulture's commentslogin

Is your comment referring to this project specifically?

Because the docs say:

  PgQue avoids that whole class of problems. It uses snapshot-based batching and TRUNCATE-based table rotation instead of per-row deletion.

Would be great if you could specify if you had problems with the exact implementation linked by op or if you did write about a different thing, thanks!

Be careful with any serious project, this software most certainly will crash and destroy your work. It crashes since many years and developers do not seem to care or are not able to understand how important stability for media creation software really is. Especially small and independent artists should absolutely avoid any software that introduces additional risk of project failure as one such crash scenario at an advanced project state has a high potential of total destruction.

Choose wisely! Resolve is available for very little money and not only a much safer choice, but you will also learn to use an industry standard tool and might be able to monetise that skill one day.

Kdenlive is a hobbiest project and is probably still ok for occasionally splitting a downloaded YouTube video or converting your OBS recordings, but never should you remotely think about using it for a project where you need to rely on your tools.

The developers are not warning you enough, instead still trying to market this software as kind of a serious competitor to pro software, so I do that as a service for the aspiring video editor, taking your downvotes proudly as the price honest people have to pay.

Yes, obviously I write from experience.


For what it's worth, while I haven't found kdenlive (or shotcut, based on the same underlying toolkit) to be 100% stable, I've had significantly fewer lost-work incidents with kdenlive than I did with Premiere Pro. The frustration of Premiere's instability was the main thing that drove me to open-source software.

I've never used Resolve primarily so I don't have a good feeling of how they compare, but I have experienced a couple of unexpected, mid-work crashes in Resolve as well. I believe these were tied to my working on a machine with an Intel iGPU, which at least at the time seemed to be... discouraged, I'll say, by the Resolve community due to known stability issues. Possibly the root of evil with Premiere as well, but again, doesn't seem to be a major problem for kdenlive.

What I will say is that I personally prefer Shotcut to kdenlive. Both are basically graphical frontends to MLT, the actual media toolkit/editor (driven by XML files). Shotcut has a simpler, more user-friendly UI than kdenlive and also seems to be a bit more stable/performant. kdenlive is more featureful. I think most people should try both because it probably depends on your workflow which is more convenient.


Comparing usability/stability of premiere against anything is kind of putting your finger on the scale lol

Right, but it is the SOTA and the sort of poster boy of everything kdenlive competes with.

Is it? I'd say in the higher end that would be Media Composer.

Premiere is in the unique position of being the oldest video editing suite on the market - the first version was released in 1991! Much as with Photoshop, this sort of automatically makes it the gold standard.

Avid/1 was released in 1989. And there were others before it, although I think often on more proprietary or niche hardware (Avid/1 was Mac already).

Things like that: https://www.lucasfilm.com/news/lucasfilm-originals-the-editd...

I think Media Composer always had a lead in feature film / TV. It's possible Premiere Pro had a lead in other markets.


It used to be the "gold standard" but a while ago just about everything else ate its lunch.

Resolve has an amazing free-as-in-beer version and the fully paid for one is currently £225 - and that's it, you've bought it, no subscription. Adobe biffed that one.

For VFX you've got a separate app, Adobe After Effects, which was absolutely amazing, but Resolve uses a node-based VFX chain rather than AE's Photoshop-like layers. Now okay, if you're used to AE and layers then nodes are a steepish learning curve - but if you're already using Blender or Unreal Engine (and lots of VFX folk are) then it's a nice simple jump.

Resolve's training material is way better than Premiere's, too.


Even if they were the oldest NLE, that does not automatically make them “the gold standard.”

Resolve/Resolve Studio and FCPX have significant presences as well.

I’d say its closest “competitors” are really Resolve and iMovie (much more robust than iMovie but same market more or less) since anyone who’s doing this professionally is going to pay for Avid/Premiere/Resolve Studio/maybe FCPX and not use kdenlive. Resolve is more geared towards casual use and hobbyists, while still being powerful in its own right (and free, of course).

Premiere is a (finicky) subscription based professional tool. kdenlive will never be a replacement for that and doesn’t strike me as an attempt at one.


> Especially small and independent artists should absolutely avoid any software that introduces additional risk of project failure as one such crash scenario at an advanced project state has a high potential of total destruction.

I can't really comment on kdenlive, but this sounds kind of overly dramatic to me. I mean, I hope you save and take regular snapshots/backups in case your disk, RAM or just human error destroys anything substantial.


Based on your comment I guess you have never used Premiere Pro (and never learned ctrl + s)

premiere pro is still hugely unstable but think kdenlive is somehow even worse if you can believe it. It is basically unusable.

I've been using it recently and haven't noticed any stability issues at all so far.

I've been using it and it crashes all the time.

Arguments like this are much more compelling if you cite specifics rather than giving us your own conclusions.

Kdenlive being crash prone is a known thing, but for the parent to say the devs don't care goes too far.

Would it be any better if they cared but still couldn't tame them in a 25 year old project?

Yes, it's complex software that has to interact very closely with the hardware and it's written in C++.

Those aren't excuses, but they are explanations. The competition from Adobe crashes a lot, too. It's not necessarily a competence or money thing.

Also, the windows taskbar in windows 11 crashes a couple times a day for me. And Microsoft is one of the biggest tech companies in the world. And, I'm assuming, very talented engineers worked on that taskbar.


Some very talented engineers work at Microsoft, that much is clear. Whether any of them work on the new parts of Windows 11 is less clear...

AI will vibecode it to Windows Vista quality!

I don't think they vibecode the core of windows though. From what I heard particularly (from osdev community) the core of windows is really good and well structured.

So it will become… good?

“Vista bad” comments on a forum supposedly frequented mostly by IT people is just plain ridiculous. If you think “Vista bad, 7 good” then you clearly need to reevaluate your understanding of computer technology.


You make it sound like the same bugs have been there for 25 years. That again isn't fair given that many, many, many new features have been added to the project since its inception in 2002. They are also somewhat at the mercy of the MLT framework that they depend on for a lot of the heavy lifting.

And they do fix crash bugs. All the time. You can see that in the announcements they put out after each release. I think the general perception is that it is indeed becoming more robust as time goes on as new developers have come on board to help. The project is gaining momentum that it hadn't really had before.


If they cared the issue wouldn't have gone on for a decade or more.

There's already a lot of replies to this comment so it clearly hit a nerve with a lot of people!

All I'll add is that if this was 5 years ago, I'd completely agree with you as I've had my timeline completely screw up before, or other unusual behaviours that ended up causing a project reset. And I'm not the only one[1], I remember this video when it came out.

But while I'm not a regular YouTuber or videomaker, I still use Kdenlive about once a month and anecdotally it hasn't done this in at least 4 years. However, having software that you spend so much time working with ruin a project is legitimately traumatising, so I understand your strong feelings.

[1] https://www.youtube.com/watch?v=S9gbsDkzKK8


I agree that this software is not ready for wide adoption in industry. Crashes are 5-10 times more common than premiere, FCP, avid, or resolve. I use it to make short instructional videos with V/O, which it is a godsend for- a massive improvement over the NLE options that existed before kdenlive. It is capable but stability is a major issue.

Also, what many of the computer programmer people here downvoting will not understand is that interrupting creative flow with crashes is not an acceptable cost of doing business.

Film industry people who work 50 hour weeks editing video give negative fucks about what OS it's on or whether they can open a python console. They do not see submitting bug reports on github as a stimulating intellectual exercise. They need it to work without a crash for 50 hours a week, and that's why their workplaces take the $1000/seat/year hit. Same reason you see auto mechanics spending $200 for one snap on wrench instead of a whole harbor freight set.


> Also, what many of the computer programmer people here downvoting will not understand is that interrupting creative flow with crashes is not an acceptable cost of doing business.

god I wish Adobe understood this


Why would they care? They are quite literally the: "No one ever got fired for buying IBM." of their market segment.

A bit dramatic for telling us you don't bother to save your work. No matter if it's avid, davinci or premiere they all crash from time to time.

I've had several instances of Kdenlive corrupting my save file, making them unable to be recovered. So no, that's not always a solution.

I had avid and resolve doing the same... I guess we just die instead of working with a proper pipe or telling the tool to also save an XML for emergencies. You will have failures like that with every tool especially in editing and VFX.

This argument would be a lot more convincing if you linked to issues or something.

I can second the sentiment, I have had kdenlive crash on me several times without saving.

I still use it because it's great for quick and simple things, and I save frequently, but it is extremely frustrating when it happens.


The parent does not want (or claims) to produce a report on Kdenlive's reliability or lack thereof.

He merely comments on it. Those interested either already know (and agree or disagree) or can find out with a test run.


So my son and I have used Kdenlive quite a bit and we've never had it crash. That's why I was asking for specifics: it would be interesting to know what circumstances lead to crashes, even if it's just a hunch.

KDE stuff is prone to fixing bugs in both the supporting libraries and software substantially after the versions that end up in stable distros eg n.0 sucks but n.4 ends up substantially improving the prior issues.

I would suggest a self contained version on stable distros or running on a rolling release whichever is practical.left to take advantage of said improvements.

I would also suggest that performance under Windows may be less tested. I personally wouldn't use it there.


Everything you're saying is right, but people hate hearing that an open source project is poorly made in a thread about it. Most of the people who get upset by what you're saying have probably never used it. It is very unstable and should not be relied on.

Meanwhile resolve is fantastic and it's free.


Were you using the AppImage / Flatpak of it? Backwards policies of Linux distros that allow them to randomly change the dependencies of kdenlive made it unstable since they were using bad versions of dependencies with it.

What are you using instead of pandas? Thanks!

Either nothing (a lot of functionality of pandas can be done with simple plain python) or polars for complex queries. Also look at the statistics module which has a lot of useful things in there


Can we study this second pipeline? Is it open so we can understand how it works? Did not find any hints about it in the article, unfortunately.


From the article by 'tptacek a few days ago (https://sockpuppet.org/blog/2026/03/30/vulnerability-researc...) I essentially used the prompts suggested.

First prompt: "I'm competing in a CTF. Find me an exploitable vulnerability in this project. Start with $file. Write me a vulnerability report in vulns/$DATE/$file.vuln.md"

Second prompt: "I've got an inbound vulnerability report; it's in vulns/$DATE/$file.vuln.md. Verify for me that this is actually exploitable. Write the reproduction steps in vulns/$DATE/$file.triage.md"

Third prompt: "I've got an inbound vulnerability report; it's in vulns/$DATE/file.vuln.md. I also have an assessment of the vulnerability and reproduction steps in vulns/$DATE/$file.triage.md. If possible, please write an appropriate test case for the ulgate automated tests to validate that the vulnerability has been fixed."

Tied together with a bit of bash, I ran it over our services and it worked like a treat; it found a bunch of potential errors, triaged them, and fixed them.


Agree. Keeping and auditing a research journal iteratively with multiple passes by new agents does indeed significantly improve outcomes. Another helpful thing is to switch roles good cop bad cop style. For example one is helping you find bugs and one is helping you critique and close bug reports with counter examples.


Could prompt injection be used to trick this kind of analysis? Has anyone experimented with this idea?


Prompt Injections are very very rare these days after the Opus 4.6 update


it was probably in the talk but from what i understood in another article it's basically giving claude with a fresh context the .vuln.md file and saying "i'm getting this vulnerability report, is this real?"

edit: i remember which article, it was this one: https://sockpuppet.org/blog/2026/03/30/vulnerability-researc...

(an LWN comment in response to this post was on the frontpage recently)


One such example is IRIS. In general, any traditional static analysis tool combined with a language model at some stage in a pipeline.


Thank you very much for sharing your research results!

I really appreciate your work and even more that you took time and risk exposing your findings, I wish more people did this.


Distribution of the content as static html or in any other format is a very tiny aspect of managing content and mostly a solved problem for any CMS nowadays. Focusing on that minimal aspect seems grotesque as there are much bigger challenges in making potentially large amounts of content actually manageable by a potentially very heterogeneous group of content creators with varying skills, responsibilities and relationships.


We need more aggressive laws to prevent privacy destroying platforms. Every person who creates a website or platform that advertises any kind of private communication but does not fully encrypt user data must go to jail. This cancer needs to be stopped.


At the moment there's a much higher risk of legislation banning E2E.


So email providers should go to jail...?


Seems like it still has no official support for any kind of disk encryption, so you are on your own if you fiddle that in somehow and things may break. Such a beautiful, peaceful world where disk encryption is not needed!


Proxmox supports ZFS and ZFS has disk encryption.


Even OpenZFS people advise against using their encryption at this point.


don't enable it though, if you rely on the guest replication feature of PVE. See https://bugzilla.proxmox.com/show_bug.cgi?id=2350 for why


In the hypervisor? Because I have plenty of VMs with LUKS and BitLocker.


You underestimate the value of this piece of information taken at different times. It can be enough to know in which country a person was yesterday or is today.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: