The latest blog posts to take off on Hacker News. 2,560 posts.
At Waymo, our mission is to be the world’s most trusted driver. We know trust is built through consistent behavior over time—earned through every mile we drive and every interaction we have with the community. This past Saturday, as a widespread PG&E outage cut power to nearly one-third of San Francisco, our service…
We analyzed if AWS’ N. Virginia region remains the least reliable in 2025. Overview of outages, affected services, and the massive October 20 AWS incident, with insights from StatusGator’s real-time monitoring.
Or: How JPEG Screenshots Defeated Our Beautiful H.264 WebCodecs Pipeline
How I investigated and worked around a kernel bug that caused async-profiler to freeze my machine whenever I tried to use a profiler.
Pizlix is LFS (Linux From Scratch) 12.2 with some added components, where userland is compiled with Fil-C. This means you get the most memory safe Linux-like OS currently available.
Memory safety and sandboxing are two different things. It's reasonable to think of them as orthogonal: you could have memory safety but not be sandboxed, or you could be sandboxed but not memory safe.
High-performance object storage exists, but the economics make it unusable at scale. FractalBits breaks out of the high-performance trap.
NATS is a popular streaming system. Producers publish messages to streams , and consumers subscribe to those streams, fetching messages from them. Regular NATS streams are allowed to drop messages. However, NATS has a subsystem called JetStream , which uses the Raft consensus algorithm to replicate data among nodes…
An exploration of Go's portability limits when integrating with system-specific C libraries like libsystemd and dealing with glibc vs. musl systems.
Cloudflare experienced a significant traffic outage on December 5, 2025, starting approximately at 8:47 UTC. The incident lasted approximately 25 minutes before resolution. We are sorry for the impact that it caused to our customers and the Internet. The incident was not caused by an attack and was due to…
Liwei Guo, Zhi Li, Sheldon Radford, Jeff Watts
Latest announcements for Proxmox.
Consider this tale of I/O and performance. We’ll start with blocking I/O, explore io_uring and kqueue, and take home an event loop very similar to some software you may find familiar.
Initial kernel and subsystem support for new Snapdragon 8 Elite Gen 5 posted for review. Learn what’s in the patches and how you can start working with them.
Learn about the architectural innovations we used to build a 130,000-node Kubernetes cluster, and the trends driving demand for these environments.
Cloudflare suffered a service outage on November 18, 2025. The outage was triggered by a bug in generation logic for a Bot Management feature file causing many Cloudflare services to be affected.
Many products at Cloudflare aren’t possible without pushing the limits of network hardware and software to deliver improved performance, increased efficiency, or novel capabilities such as soft-unicast, our method for sharing IP subnets across data centers. Happily, most people do not need to know the intricacies of…
multi silicon ai is coming
After my previous post on ARM exploitation, where we crafted an exploit for a known vulnerability, I decided to continue the research on a more modern IoT target. In this follow-up post, I will take you through building a considerably more complex binary exploit. We will explore the path from firmware extraction and…
See how we diagnosed and confirmed an AWS Aurora RDS race condition impacting failovers.
multi silicon ai is coming
TigerBeetle is a financial transactions database built for correctness. Yet, building a correct system from correct components remains a challenge:
An article demonstrating immutable software deployments using ZFS snapshots and FreeBSD jails, with Caddy as a health‑checked reverse proxy for zero‑downtime upgrades.
XDP only works for ingress. We found a loophole that lets it work for egress. Here's how we did the impossible.
This RFD describes futurelock : a type of deadlock where a resource owned by Future A is required for another Future B to proceed, while the Task responsible for both Futures is no longer polling A . Futurelock is a particularly subtle risk in writing asynchronous Rust.
How we saved 7 TiB of memory across our Kubernetes clusters by disabling namespace listwatching in Vector, reducing daemonset overhead and API server load at scale.
Go 1.25 includes a new experimental garbage collector, Green Tea.
Why you should just use Postgres instead of Kafka for small-scale message queuing and pub-sub patterns. Benchmarks and practical tests included.
Life doesn't freeze when winter comes—if anything, that's when riders need reliable transportation most, when being exposed to the elements becomes less appealing. Today, the Waymo Driver successfully navigates rain, fog, sandstorms, and freezing temperatures. As we expand to more cities across the U.S. and globally…
