Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 363 posts.
The future of AlmaLinux
It’s been a whirlwind few weeks here at AlmaLinux, and I’m elated to be able to finally share this update. The future of AlmaLinux OSIn case you missed it, Red Hat announced they will no longer be providing the means for downstream clones to continue to be 1:1 binary copies of Red Hat Enterprise Linux (RHEL). Very…
Operation Triangulation: iOS devices targeted with previously unknown malware
While monitoring the traffic of our own corporate Wi-Fi network, we noticed suspicious activity that originated from several iOS-based phones. Since it is impossible to inspect modern iOS devices from the inside, we created offline backups of the devices, inspected them and discovered traces of compromise.
Cloudflare mitigated yet another Okta compromise
On Wednesday, October 18, 2023, we discovered attacks on our system that we were able to trace back to Okta. We have verified that no Cloudflare customer information or systems were impacted by this event because of our rapid response.
Java 21: First Release Candidate
This release is the Reference Implementation of version 21 of the Java SE Platform, as specified by JSR 396 in the Java Community Process.
Bluesky's AT Protocol - Federation Architecture Overview
Soon, we’re launching a sandbox environment for federation. In advance, we want to share some technical details about our design decisions.
Perfectly Reproducible, Verified Go Toolchains
Go 1.21 is the first perfectly reproducible Go toolchain.
Supabase Clippy – ChatGPT for Supabase Docs
Creating a ChatGPT interface for the Supabase documentation.
Planning for AGI and Beyond
Our mission is to ensure that artificial general intelligence—AI systems that are generally smarter than humans—benefits all of humanity.
HTTP/2 Rapid Reset: deconstructing the record-breaking attack
This post dives into the details of the HTTP/2 protocol, the feature that attackers exploited to generate the massive Rapid Reset attacks
Windows 11: TPMs and Digital Sovereignty
The problem with enforcing TPMs on consumers
The Future of Programming – Interview with Richard Eisenberg
Listen in on Jane Street’s Ron Minsky as he has conversations with engineers working on everything from clock synchronization to reliable multicast, build systems to reconfigurable hardware. Get a peek at how Jane Street approaches problems, and how those ideas relate to tech more broadly.
The outside investigation of SoftRAM 95 (2021)
It had a plan, but didn't quite execute on it.
Unlimited Kagi searches for $10 per month
This year has been extraordinary for Kagi. We had tremendous support from our customers, and we want to start this by taking a moment to say thank you. We really appreciate it. Since we launched Kagi,...
ISPs should not police online speech no matter how awful it is
Entrusting our speech to multiple different corporate actors is always risky. Yet given how most of the internet is currently structured, our online expression largely depends on a set of private companies ranging from our direct Internet service providers and platforms, to upstream ISPs (sometimes...
ArXiv now offers papers in HTML format
arXiv’s goal is equitable access to scientific research for all – and to achieve this, we have been working to make research papers more accessible for arXiv…
New models and developer products
GPT-4 Turbo with 128K context and lower prices, the new Assistants API, GPT-4 Turbo with Vision, DALL·E 3 API, and more.
Datomic is Free
Nubank is making all editions of Datomic free of licensing fees, released under Apache 2.0 and available directly from Maven Central, no signup required.
Bun v1.0.0
Bun is stable and ready for production.
Code Llama, a state-of-the-art large language model for coding
Code Llama, which is built on top of Llama 2, is free for research and commercial use.
GPT-4 API General Availability
GPT-3.5 Turbo, DALL·E and Whisper APIs are also generally available, and we are releasing a deprecation plan for older models of the Completions API, which will retire at the beginning of 2024.
Run Llama 2 uncensored locally
This post will give some example comparisons running Llama 2 uncensored model versus its censored model.
Your computer should say what you tell it to say
WEI? I’m a frayed knotTwo pieces of string walk into a bar.The first piece of string asks for a drink.The bartender says, “Get lost. We don’t serve pieces of string.”The second string ties a knot in his middle and messes up his ends. Then he orders a drink. The bartender says, “Hey, you aren’t a...
Building GitHub with Ruby on Rails
Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily.…
HashiCorp adopts Business Source License
HashiCorp adopts the Business Source License to ensure continued investment in its community and to continue providing open, freely available products.
Gmail, Yahoo announce new 2024 authentication requirements for bulk senders
Today, we’re announcing new requirements for bulk senders that will help keep Gmail safer and more spam-free.
Microsoft will assume liability for legal copyright risks of Copilot
With customers ask whether they can use Microsoft’s Copilot services without worrying about copyright claims, we are providing a straightforward answer: yes, you can, and if you are challenged on copyright grounds, we will assume responsibility for the potential legal risks involved.
Something Pretty Right: The History and Legacy of Visual Basic
How Visual Basic became the world’s most dominant programming environment, its sudden fall from grace, and why its influence is still shaping the future of software development.
Can LLMs learn from a single example?
We’ve noticed an unusual training pattern in fine-tuning LLMs. At first we thought it’s a bug, but now we think it shows LLMs can learn effectively from a single example.
The WebP 0day
Early last week, Google released a new stable update for Chrome. The update included a single security fix that was reported by Apple's Security Engineering and Architecture (SEAR) team. The issue, CVE-2023-4863, was a heap buffer overflow in the WebP image library, and it had a familiar