211
Zero-day flaws in authentication, identity, authorization in HashiCorp Vault
Check Point's AI Security Solutions deliver AI-driven threat prevention and unified security management for advanced protection across enterprise networks.
New
The latest blog posts to take off on Hacker News. 2,538 posts.
Infrastructure & DevOps
Any year
212
Running GPT-OSS-120B at 500 tokens per second on Nvidia GPUs
Train, serve, and scale open-source and custom AI models on the fastest, most reliable inference platform.
213
Stargate Norway
We’re launching Stargate Norway—OpenAI’s first AI data center initiative in Europe under our OpenAI for Countries program. Stargate is OpenAI’s overarching infrastructure platform and is a critical part of our long-term vision to deliver the benefits of AI to everyone.
214
Reverse engineering GitHub Actions cache to make it fast
We reverse engineered GitHub Actions cache internals to transparently route cache requests through our faster, colocated cache. This delivered up to 10x faster cache performance for some of our customers, with no code changes required and no need to maintain forks of upstream actions.
215
SecretSpec: Declarative Secrets Management
Fast, Declarative, Reproducible, and Composable Developer Environments using Nix.
216
Cloudflare 1.1.1.1 Incident on July 14, 2025
On July 14th, 2025, Cloudflare made a change to our service topologies that caused an outage for 1.1.1.1 on the edge, resulting in downtime for 62 minutes for customers using the 1.1.1.1 public DNS Resolver as well as intermittent degradation of service for Gateway DNS. We’re deeply sorry for this outage. This outage…
217
Data Centers and Water Consumption | Article
See all of our articles on the impacts of data centers , including their energy needs, water usage, noise pollution, and contribution to higher energy bills: The Environmental Impacts of Data Centers (Article Series)
218
LetsEncrypt – Expiration Notification Service Has Ended
Since its inception, Let’s Encrypt has been sending expiration notification emails to subscribers that have provided an email address to us via the ACME API. This service ended on June 4, 2025. The decision to end the service is the result of the following factors: Over the past 10 years more and more of our…
219
Scaling our observability platform by embracing wide events and replacing OTel
Read how we scaled our observability platform from 19PB to 100PB and 500 trillion rows by replacing OpenTelemetry with a native ClickHouse-to-ClickHouse pipeline, embracing wide events and cutting CPU usage by 90%.
220
How Cloudflare blocked a monumental 7.3 Tbps DDoS attack
In mid-May 2025, blocked the largest DDoS attack ever recorded: a staggering 7.3 terabits per second (Tbps).
221
OpenTelemetry for Go: Measuring overhead costs
We benchmarked OpenTelemetry overhead in a high-load Go app against eBPF-based instrumentation to see where tracing adds real cost.
222
Model Once, Represent Everywhere: UDA (Unified Data Architecture) at Netflix
Introducing UDA, the knowledge-graph-based architecture that translates conceptual domain models into consistent schemas and data…
223
GitHub CI/CD observability with OpenTelemetry step by step guide
Instrument your CI/CD pipelines with OpenTelemetry. A step-by-step guide to capturing GitHub Actions data via the Collector.
224
It's the end of observability as we know it (and I feel fine)
In a really broad sense, the history of observability tools over the past couple of decades have been about a pretty simple concept: how do we make terabytes of heterogeneous telemetry data comprehensible to human beings? We’ve seen different companies tackle this in different ways for technology like Ruby on Rails…
225
Why We're Moving on from Nix
Meet Railpack — the next iteration of the Railway builder, developed from the ground up on lessons from building over 14 million apps with Nixpacks.
226
How we reduced the impact of zombie clients
Every night, right around midnight (mainly UTC), a horde of zombies wakes up and clamors for … digital certificates! The zombies in question are abandoned or misconfigured Internet servers and ACME clients that have been set to request certificates from Let’s Encrypt. As our certificates last for at most 90 days…
227
Cloud Run GPUs, now GA, makes running AI workloads easier for everyone
Support for GPUs in Cloud Run makes running GPU-accelerated applications simpler, faster, and more cost-effective, as well as enabling new use cases.
228
Rocky Linux 10 Will Support RISC-V
🏗️ Rocky Linux 10 Will Support RISC-V! We're excited to announce that Rocky Linux 10 will officially support RISC-V! Thanks to the incredible work of...
229
Litestream: Revamped
Bringing in what we learned from LiteFS
230
LLM-D: Kubernetes-Native Distributed Inference
Introducing llm-d: Kubernetes-native distributed LLM inference with KV-cache routing, disaggregated serving, and SOTA performance per dollar. Built on vLLM.
231
How the economics of multitenancy work
CI is chaotic, bursty, spiky, and short-lived. That chaos is a nightmare unless you’re built for it. Blacksmith’s serverless CI cloud thrives on unpredictability: more customers = more noise = smoother utilization = lower costs for everyone. Multitenancy isn’t just efficient — it’s profitable. And yes, the margins are…
232
OpenTelemetry protocol with Apache Arrow
We are excited to announce the next phase of the OpenTelemetry Protocol with Apache Arrow project (OTel-Arrow). We began this project several years ago with the goal of bridging between OpenTelemetry data and the Apache Arrow ecosystem. Apache Arrow is a framework designed for zero-copy exchange of structured data…
233
Demonstrably Secure Software Supply Chains with Nix
Discover how Nix can revolutionize your software supply chain security, enabling verifiable integrity and offline rebuilds from source.
234
Tailscale 4via6 – Connect Edge Deployments at Scale
In this post, we’re highlighting 4via6 subnet routing — a powerful way to extend Tailscale’s mesh across entire edge or customer networks. It’s ideal for scenarios where traditional VPNs struggle, like fleets of robots, sensors, or isolated cloud environments.
235
Updated rate limits for unauthenticated requests
To provide a secure and dependable experience on GitHub, we’re rolling out updates to rate limits for requests made without authentication. These changes will apply to operations like cloning repositories…
236
'I paid for the whole GPU, I am going to use the whole GPU'
A guide to maximizing the utilization of GPUs, from cloud allocations to FLOP/s.
237
How to harden GitHub Actions
Build resilient GitHub Actions workflows with insights from real attacks, missteps to avoid, and security tips GitHub’s docs don’t fully cover.
238
Graceful Shutdown in Go: Practical Patterns
Go applications can implement graceful shutdown by handling termination signals (SIGTERM, SIGINT) via os/signal or signal.NotifyContext. Shutdown must complete within a specified timeout (e.g., Kubernetes’ terminationGracePeriodSeconds)…
239
Building Burstables: CPU slicing with cgroups
Burstable VMs run on a fraction of CPU and burst to a higher level of CPU usage to support occasional usage spikes. To implement them, we leveraged Control Groups v2 (cgroups v2), a Linux kernel feature that helps manage resource usage. We thought our open-source implementation of burstable VMs might be interesting…
240
How much energy does ChatGPT use?
This Gradient Updates issue explores how much energy ChatGPT uses per query, revealing it's 10x less than common estimates.