1
How NAT Traversal Works (2020)
Learn how NAT traversal works, how Tailscale can get through and securely connect your devices directly to each other.
Most cited
Posts that commenters keep linking to, ranked by how many different people have cited them in Hacker News comments. 40 posts.
2
A postmortem of three recent issues
A technical report on three bugs that intermittently degraded Claude's responses: what happened, why fixes took time, and what we're changing.
3
Memory Integrity Enforcement
Memory Integrity Enforcement (MIE) is the culmination of an unprecedented design and engineering effort spanning half a decade that combines the unique strengths of Apple silicon hardware with our advanced operating system security to provide industry-first, always-on memory safety protection across our devices …
4
Comparison of C/POSIX standard library implementations for Linux
The table below and notes which follow are a comparison of some of the different standard library implementations available for Linux, with a particular focus on the balance between feature-richness and bloat. I have tried to be fair and objective, but as I am the author of musl , that may have influenced my choice of…
5
Cloudflare outage on November 18, 2025 post mortem
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
6
Local-first software (2019)
A new generation of collaborative software that allows users to retain ownership of their data.
7
There is no memory safety without thread safety
Memory safety is all the rage these days. But what does the term even mean? That turns out to be harder to nail down than you may think. Typically, people use this term to refer to language...
8
Diagnosing a Double-Free Concurrency Bug in Rust's Unbounded Channels
Explore how Materialize engineers diagnosed and resolved a rare concurrency bug in Rust's unbounded channels that led to undefined behavior through double-free memory errors.
9
Zig's New Async I/O
Asynchrony is not concurrency.
10
Beware of Fast-Math
One of my more frequent rants, both online and in person, is the danger posed by the "fast-math" compiler flag. While these rants may elicit resigned acknowledgment from those who already understand the dangers involved, they do little to help those who don't. So given the remarkable paucity of writing on the topic…
11
Postgres LISTEN/NOTIFY does not scale
Learn why Postgres LISTEN/NOTIFY doesn't scale for high-throughput use cases and what architectural alternatives Recall.ai uses in production.
12
The Green Tea Garbage Collector
Go 1.25 includes a new experimental garbage collector, Green Tea.
13
Futurelock: A subtle risk in async Rust
This RFD describes futurelock : a type of deadlock where a resource owned by Future A is required for another Future B to proceed, while the Task responsible for both Futures is no longer polling A . Futurelock is a particularly subtle risk in writing asynchronous Rust.
14
Carmack on Operating Systems (1997)
I have gotten a significant amount of response on the Quake 2 extension mechanism. I do read everything that comes my way (I can't respond to all of it, though), and I have learned a few things from the mail.
15
How a 20 year old bug in GTA San Andreas surfaced in Windows 11 24H2
After over two decades, players are now forbidden from flying a seaplane, all thanks to undefined code behavior.
16
So you want to build your own data center
When it comes to infrastructure engineering, building a data center is probably closer to building a house than to deploying a Terraform stack.
17
Cross-Platform P2P Wi-Fi: How the EU Killed AWDL
This post investigates how we got from Wi-Fi Direct to AWDL to Wi-Fi Aware, what makes Wi-Fi Aware technically superior, and why this shift unlocks true cross-platform peer-to-peer connectivity for developers.
18
Performance Improvements in .NET 10
Take a tour through hundreds of performance improvements in .NET 10.
19
How to scale your model: A systems view of LLMs on TPUs
Training LLMs often feels like alchemy, but understanding and optimizing the performance of your models doesn't have to. This book aims to demystify the science of scaling language models: how TPUs (and GPUs) work and how they communicate with each other, how LLMs run on real hardware, and how to parallelize your…
20
Lessons from the PG&E outage
At Waymo, our mission is to be the world’s most trusted driver. We know trust is built through consistent behavior over time—earned through every mile we drive and every interaction we have with the community. This past Saturday, as a widespread PG&E outage cut power to nearly one-third of San Francisco, our service…
21
Creating an all-weather driver
Life doesn't freeze when winter comes—if anything, that's when riders need reliable transportation most, when being exposed to the elements becomes less appealing. Today, the Waymo Driver successfully navigates rain, fog, sandstorms, and freezing temperatures. As we expand to more cities across the U.S. and globally…
22
I use zip bombs to protect my server
The majority of the traffic on the web is from bots. For the most part, these bots are used to discover new content. These are RSS Feed readers, search engines crawling your content, or nowadays AI bo
23
Cloudflare outage on December 5, 2025
Cloudflare experienced a significant traffic outage on December 5, 2025, starting approximately at 8:47 UTC. The incident lasted approximately 25 minutes before resolution. We are sorry for the impact that it caused to our customers and the Internet. The incident was not caused by an attack and was due to…
24
25
Jepsen: NATS 2.12.1
NATS is a popular streaming system. Producers publish messages to streams , and consumers subscribe to those streams, fetching messages from them. Regular NATS streams are allowed to drop messages. However, NATS has a subsystem called JetStream , which uses the Raft consensus algorithm to replicate data among nodes…
26
27
Zig's New Async I/O
In celebration of the std.Io introduction patchset landing today , here is the text version of a short, interactive demo I gave at Zigtoberfest 2025 .
28
SIMD-friendly algorithms for substring searching (2016)
Popular programming languages provide methods or functions which locate a substring in a given string. In C it is the function strstr , the C++ class std::string has the method find , Python's string has methods pos and index , and so on, so forth. All these APIs were designed for one-shot searches . During past…
29
Absurd Workflows: Durable Execution with Just Postgres
Durable execution with just postgres.
30
Pizlix: Memory Safe Linux from Scratch
Pizlix is LFS (Linux From Scratch) 12.2 with some added components, where userland is compiled with Fil-C. This means you get the most memory safe Linux-like OS currently available.