1
How NAT Traversal Works (2020)
Learn how NAT traversal works, how Tailscale can get through and securely connect your devices directly to each other.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 536 posts.
2
3
SQLite small blob storage: 35% Faster Than the Filesystem
SQLite reads and writes small blobs (for example, thumbnail images) 35% faster¹ than the same blobs can be read from or written to individual files on disk using fread() or fwrite().
4
Chromium project finds that 70% of security defects are memory safety problems
The Chromium project finds that around 70% of our serious security bugs are memory safety problems . Our next major project is to prevent such bugs at source.
5
The Road to 2M Websocket Connections in Phoenix (2015)
If you have been paying attention on Twitter recently, you have likely seen some increasing numbers regarding the number of simultaneous connections the Phoenix web framework can handle. This post documents some of the techniques used to perform the benchmarks.
6
It rather involved being on the other side of this airtight hatchway
Not every code injection bug is a security hole.
7
Jepsen: MongoDB 4.2.6
2020-05-26: MongoDB identified a bug in the transaction retry mechanism which they believe was responsible for the anomalies observed in this report; a patch is scheduled for 4.2.8.
8
9
10
Response Time Limits: Article by Jakob Nielsen
How users react to delays in a user interface, whether website or application. The 3 main response time limits are determined by human perceptual abilities.
11
An amusing story about a practical use of the null garbage collector
The computer itself ceases to exist.
12
Atomic Commit in SQLite (2007)
An important feature of transactional databases like SQLite is "atomic commit". Atomic commit means that either all database changes within a single transaction occur or none of them occur. With atomic commit, it is as if many different writes to different sections of the database file occur instantaneously and…
13
14
15
16
Reading privileged memory with a side-channel
Posted by Jann Horn, Project ZeroWe have discovered that CPU data cache timing can be abused to e...
17
A postmortem of three recent issues
A technical report on three bugs that intermittently degraded Claude's responses: what happened, why fixes took time, and what we're changing.
18
Turning the database inside-out with Apache Samza (2015)
Confluent is building the foundational platform for data in motion so any organization can innovate and win in a digital-first world.
19
Deploying Transformers on the Apple Neural Engine
An increasing number of the machine learning (ML) models we build at Apple each year are either partly or fully adopting the Transformer…
20
21
22
Living Without Atomic Clocks
If someone knows even a little about Spanner, the first question they have is: "How does CockroachDB provide external consistency without atomic clocks?"
23
The Full-Source Bootstrap: Building from source all the way down
Blog posts about GNU Guix.
24
Announcing WSL 2
WSL 2 is a new architecture that allows for dramatic file system performance and full system call compatibility in WSL using a Linux kernel.
25
LavaRand in Production: The Nitty-Gritty Technical Details
As some of you may know, there's a wall of lava lamps in the lobby of our San Francisco office that we use for cryptography. In this post, we’re going to explore how that works in technical detail.
26
HTTP Analytics for 6M requests per second using ClickHouse
One of our large scale data infrastructure challenges here at Cloudflare is around providing HTTP traffic analytics to our customers. HTTP Analytics is available to all our customers via two options:
27
On the dangers of Intel's frequency scaling
While I was writing the post comparing the new Qualcomm server chip, Centriq, to our current stock of Intel Skylake-based Xeons, I noticed a disturbing phenomena.
28
Many small queries are efficient in SQLite
200 SQL statements per webpage is excessive for client/server database engines like MySQL, PostgreSQL, or SQL Server.
29
Memory Integrity Enforcement
Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our advanced operating system security to provide industry-first, always-on memory safety protection across our devices …
30
Firecracker – Lightweight Virtualization for Serverless Computing
One of my favorite Amazon Leadership Principles is Customer Obsession. When we launched AWS Lambda, we focused on giving developers a secure serverless experience so that they could avoid managing infrastructure. In order to attain the desired level of isolation we used dedicated EC2 instances for each customer. This…