271
Bootc and OSTree: Modernizing Linux System Deployment
Discover how Bootc and OSTree are revolutionizing Linux system deployment, offering modern, efficient, and immutable management.
New
The latest blog posts to take off on Hacker News. 4,387 posts.
272
Let's discuss sandbox isolation
A dive into the spectrum of sandboxing and isolation, from Linux namespaces and gVisor to hardware-enforced microVMs and WebAssembly, and why picking the right boundary matters for multi-tenant workloads.
273
The real cost of random I/O
How good is the random_page_cost default, and should you lower it on modern flash storage?
274
Dissecting the CPU-memory relationship in garbage collection (OpenJDK 26)
The author of Java 26's MemoryMXBean.getTotalGcCpuTime() analyzes the CPU-memory trade-off and why pause times fail to capture explicit GC cost.
275
I Ported Coreboot to the ThinkPad X270
You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites. This can and does cause downtime for the websites, which makes their resources inaccessible for everyone.
276
Understanding the Go Runtime: The Memory Allocator
In the previous article we explored how the Go runtime bootstraps itself — how a Go binary goes from the operating system handing it control to your func main() running. During that bootstrap, one of the first things the runtime sets up is the memory allocator. And that’s what we’re going to explore today. Think of…
277
FreeBSD doesn't have Wi-Fi driver for my old MacBook, so AI built one for me
My old 2016 MacBook Pro has been collecting dust in a cabinet for some time now. The laptop suffers from a “flexgate” problem, and I don’t have any practical use for it. For quite some time, I’ve been thinking about repurposing it as a guinea pig, to play with FreeBSD — an OS that I’d aspired to play with for a long…
278
Crawling a billion web pages in just over 24 hours, in 2025
For some reason, nobody's written about what it takes to crawl a big chunk of the web in a while: the last point of reference I saw was Michael Nielsen's post from 2012 .
279
Using the new bridges of FreeBSD 15
FreeBSD 15 comes with a new bridging implementation which has native support for VLANs. They have also soft-deprecated the ability to have any layer 3 addresses on member interfaces which makes it behave like a real hardware switch. The net.link.bridge.member_ifaddrs sysctl controls this behavior and it will …
280
Linuxulator on FreeBSD Feels Like Magic
Most linux software just work on FreeBSD
281
Back to FreeBSD: Part 1
Containers ran in production on FreeBSD thirteen years before Docker. So why does nobody talk about it?
282
Aesthetics of single threading
This essay explores the cost of multitasking through computer science concepts like context switching and advocates for the focus found in single-threaded moments.
283
macOS's Little-Known Command-Line Sandboxing Tool (2025)
AVAILABLE NOW OpenAI, Anthropic, and Chrome ship it. Apple deprecated it. Nobody documented it. Until now. → sandbox-exec: The Miss...
284
An ARM Homelab Server, or a Minisforum MS-R1 Review
I’ve always wanted an ARM server in my homelab. But earlier, I either had to use an underpowered ARM system, or use Asahi which not only requires expensive Mac hardware but also slowed down in the past few years.
285
15 years of FP64 segmentation, and why the Blackwell Ultra breaks the pattern
Buy an RTX 5090, the fastest consumer GPU money can buy, and you get 104.8 TFLOPS of FP32 compute. Ask it to do double-precision math and you get 1.64 TFLOPS. That 64:1 gap is not a technology limitation. For fifteen years, the FP64:FP32 ratio has been slowly getting wider on consumer GPUs, widening the divide between…
286
Cosmologically Unique IDs
We are an exploratory species, just past the solar system now, but perhaps one day we will look back and call our galaxy merely the first. There are many problems to solve along the way, and today we will look at one very small one. How do we assign IDs to devices (or any object) so the IDs are guaranteed to always be…
287
Native FreeBSD Kerberos/LDAP with FreeIPA/IDM
I want to make this clear in the first sentence because its biggest chance that people will read it – this article is entirely based on work done by Christian Hofstede-Kuhn (Larvitz) that wro…
288
Permacomputing
By Devine Lu Linvega
289
JavaScript-heavy approaches are not compatible with long-term performance goals
I’m Sérgio, and I work with Web frontend code. Sometimes I write about it here.
290
I fixed Windows native development
Imagine you’re maintaining a native project. You use Visual Studio for building on Windows, so you do the responsible thing and list it as a dependency
291
Two different tricks for fast LLM inference
Anthropic and OpenAI both recently announced “fast mode”: a way to interact with their best coding model at significantly higher speeds. These two versions of…
292
WolfSSL sucks too, so now what?
OpenSSL sucks. The BoringSSL and AWS-LC forks are Googled and Amazoned to death; they don't care about anyone but their own use cases. I can't remember ever having a good experience with software using GnuTLS. LibreSSL is incomplete... FOREWARD This post is about the experience of taking a leap of …
293
294
How Is Data Stored?
Invariably, it involves trying to trap electrons in increasingly complicated ways.
295
Faster Than Dijkstra?
Does a new algorithm that improves on Dijkstra'a classic one actually deliver a practical benefit for networking?
296
What functional programmers get wrong about systems
Type systems verify properties of programs. Production correctness is a property of systems. The gap between these is where the interesting failures live.
297
Nobody knows how the whole system works
One of the surprising (at least to me) consequences of the fall of Twitter is the rise of LinkedIn as a social media site. I saw some interesting posts I wanted to call attention to: First, Simon W…
298
Running Your Own AS: BGP on FreeBSD with FRR, GRE Tunnels, and Policy Routing
How I obtained my own AS number and IPv6 prefix, set up a FreeBSD BGP router with FRR, and built a tunnel overlay to bring globally routable addresses to servers that already have provider-assigned...
299
Why E cores make Apple silicon fast
Apple silicon architecture is designed to get background processes out of the way of our apps running in the foreground, by using the E cores.
300
Things Unix can do atomically (2010)
This is a catalog of things UNIX-like/POSIX-compliant operating systems can do atomically, making them useful as building blocks for thread-safe and multi-process-safe programs without mutexes or read/write locks. The list is by no means exhaustive and I expect it to be updated frequently for the foreseeable future.