In our July 31 post, “When an HDF5 file points outside itself,” we described the use of HDF5 external raw storage in the Hugging Face incident. Some later accounts have labeled this as an “HDF5 vulnerability.” A recent Black Hat presentation, around 27:13, refers to it as “a vulnerability in HDF5 dataset parsing” and “the […]
by Scot Breitenfeld, Director of Engineering, The HDF Group Training and deploying large models requires transferring significant volumes of low-precision tensors, including weights, gradients, activations, and KV caches. bfloat16 maintains float32’s exponent range, ensuring numerical stability with reduced storage requirements. FP8 E4M3 and E5M2 are standard for H100-class hardware, while FP6 and FP4 enable the
by Gerd Heber, Executive Director, The HDF Group When something goes wrong, someone is going to tell the story. You’ll be better off if it’s you. Otherwise, you create an opportunity for rumors, hearsay, and false information to spread. (Jason Fried & David Heinemeier Hansson, Rework) Reports on the July 2026 OpenAI agent intrusion have
HDF5 2.2.0 Now Available The HDF Group is pleased to announce the release of HDF5 2.2.0, delivering improved cloud performance, stronger security capabilities, enhanced build and deployment workflows, and numerous reliability and usability improvements across the HDF5 ecosystem. This release focuses on making HDF5 easier to deploy, more secure in production environments, and more efficient
In this episode of “Call the Doctor,” Aleksandar Jelenak explores the HDF5 Extension Proposal HEP001. This proposal aims to modernize how we handle tabular data in HDF5 by introducing a columnar storage specification, moving beyond legacy row-based approaches to enable better interoperability, performance, and metadata flexibility. Relevant Links HDF Alliance GitHub Repository HEP001 Proposal Document
In this session of “Call the Doctor,” The HDF Group’s Scot Breitenfeld discusses a major modernization effort for HDF5: moving from opaque integer-based filter parameters to human-readable TOML strings. This update, targeted for the HDF5 2.2 release, simplifies the developer experience for plugin authors and users of high-level languages like Python, Java, and Fortran. Configuring
In this episode of Call the Doctor, Gerd Heber addresses a growing need in high-performance computing: verifiable data provenance. He demonstrates that HDF5 is capable of supporting tamper-evident blockchain patterns by interlinking datasets with SHA-256 hashes. The second half of the session introduces a suite of low-level tools from the HDF5 SHINES project. h5explain and
In this “Call the Doctor” session, Aleksandar Jelenak (Senior Informatics Architect) and a user engage in a live troubleshooting discussion. They dive into new h5diff features for cleaner regression testing and share critical benchmarks on why standard S3 mount points might be costing you more than you think. Relevant Links GitHub Issue #6364: Exclude attributes
In this session of “Call the Doctor,” Matt Larson provides a technical update on Agentic HDF5, a project designed to assist domain scientists in leveraging the power of HDF5 without needing to become experts in the library’s internal mechanics. The discussion focuses on a new telemetry system that proactively identifies performance bottlenecks and suggests optimizations
New CNA status enables faster response, enhanced transparency, and streamlined collaboration across the HDF5 ecosystem; milestone advances the NSF Safe‑OSE HDF5 SHINES initiative
