1
New
The latest blog posts to take off on Hacker News. 170 posts.
2
Colliding with the SHA prefix of Linux's initial Git commit
Or, how to break all the tools that parse the "Fixes:" tag Kees Cook There was a recent discussion about how Linux's "Fixes" tag, which ...
3
Debugging memory corruption: who the hell writes "2" into my stack? (2016)
Several weeks ago we received a bug report from a customer that said their game was crashing when using IL2CPP scripting backend. QA verified the bug and assigned it to me for fixing. The project was quite big (although far from the largest ones); it took 40 minutes to build on my machine. The instructions on the bug…
4
Introducing S2
Introducing S2, a serverless stream store that makes durable real-time streams feel as simple and scalable as object storage.
5
Load is not what you should balance: Introducing Prequal
Bartek Wydrowski, Google Research; Robert Kleinberg, Google Research and Cornell; Stephen M. Rumble, Google (YouTube); Aaron Archer, Google Research
6
macOS 15.2 breaks the ability to copy the OS to another drive
macOS 15.2 was released a few days ago, with a surprise. A terrible, awful surprise.
7
Making memcpy(NULL, NULL, 0) well-defined
C2y makes memcpy(NULL, NULL, 0) and other zero-length operations on null pointers well defined. This removes a source of bugs that may result in security issues.
8
OrioleDB beta7: Benchmarks
OrioleDB is a storage extension for PostgreSQL which uses PostgreSQL's pluggable storage system. Designed as a drop-in replacement for PostgreSQL's existing Heap storage, OrioleDB aims to overcome scalability bottlenecks and fully utilize modern hardware capabilities. By integrating seamlessly with PostgreSQL, it…
9
A transport protocol's view of Starlink
How TCP interacts with the characteristics of the Starlink service.
10
Bootkitty: Analyzing the first UEFI bootkit for Linux
ESET's discovery of the first UEFI bootkit designed for Linux sendss an important message: UEFI bootkits are no longer confined to Windows systems alone.
11
LLVM-powered devirtualization
Virtualization is a powerful technique for code obfuscation, and reversing it can be challenging. In this post, we cover the work done during an internship on developing an automated devirtualization tool. We explore a simplified taint-based approach and discuss its limitations. For a more in-depth analysis, the full…
12
Understanding SIMD: Infinite complexity of trivial problems
A deep dive into the complexities of optimizing code for SIMD instruction sets across multiple platforms.
13
Mark–Scavenge: Waiting for Trash to Take Itself Out
This blog post summarises a new garbage collection algorithm called Mark-Scavenge, which highlights how using reachability as a proxy for liveness in moving GCs leads to unnecessary data movement and how we can address this. This work is from the latest paper within the research collaboration between Oracle and…
14
15
Security researchers identify new malware targeting Linux
ESET researchers analyzed previously unknown Linux backdoors that are connected to known Windows malware used by the China-aligned Gelsemium group, as well as to Project Wood.
16
How oxide cuts data center power consumption in half
A rack-scale design that drives data center power efficiency.
17
Does the Internet Route Around Damage? – Baltic Sea Cable Cuts
This week's Internet cable cuts in the Baltic Sea have been widely reported, even as attempts to understand their cause and impact continue. We turn to RIPE Atlas to provide a preliminary analysis of these events and ask to what extent the Internet in the region has been resilient to them.
18
A Walk with LuaJIT
How we scrape callstack information from the LuaJIT engine for profiling
19
Bit-twiddling optimizations in Zed's Rope
From the Zed Blog: In this episode of Zed Decoded, Thorsten and Antonio walk through the performance optimizations Antonio when working on Zed's Rope data structure before they then pair on adding more optimizations
20
Extending the context length to 1M tokens
API Documentation (Chinese) HuggingFace Demo ModelScope Demo Introduction After the release of Qwen2.5, we heard the community’s demand for processing longer contexts. In recent months, we have made many optimizations for the model capabilities and inference performance of extremely long context. Today, we are proud…
21
Why did Windows 95 setup use three operating systems?
Simplifying the problem to an earlier problem.
22
Abusing Ubuntu 24.04 features for root privilege escalation
With the recent release of Ubuntu 24.04, we at Snyk Security Labs thought it would be interesting to examine the latest version of this Linux distribution to see if we could find any interesting privilege escalation vulnerabilities.
23
Jepsen: Bufstream 0.1
2024-11-13 : An earlier version of this report asserted that consumers with auto-commit enabled could lose data by automatically committing offsets returned by the most recent poll. This claim was based in part on Confluent’s documentation , which states:
24
SVDQuant: 4-Bit Quantization Powers 12B Flux on a 16GB 4090 GPU with 3x Speedup
A new post-training training quantization paradigm for diffusion models, which quantize both the weights and activations of FLUX.1 to 4 bits, achieving 3.5× memory and 8.7× latency reduction on a 16GB laptop 4090 GPU. Code: https://www.github.com/mit-han-lab/nunchaku
25
The case of a program that crashed on its first instruction
Didn't even make it out of the gate.
26
QNX is now free for anything non-commercial, plus there's an RPi image
QNX is changing the game for engineers and software developers, providing free access to QNX software and resources for non-commercial use.
27
Hyperlight: Virtual machine-based security for functions at scale
The Microsoft Azure Core Upstream team is excited to announce the Hyperlight project, an open-source Rust library you can use to create very small VMs for embedded functions. Learn more.
28
Limitations of frame pointer unwinding
Explore 3 limitations of using frame pointers for stack unwinding and profiling in Linux that are often overlooked, plus possible future alternatives.
29
Speed, scale and reliability: 25 years of Google datacenter networking evolution
Google networking leaders reflect on the milestones that led to Jupiter supporting 13 petabits per second bandwidth, and what comes next.
30
Next Generation Out of Band Garbage Collection
In this post we look at the impact of a new feature of Ruby 3.4 on Shopify’s monolith.