31
New
The latest blog posts to take off on Hacker News. 543 posts.
32
Linux CVEs, more than you ever wanted to know
It’s been almost 2 full years since Linux became a CNA (Certificate Numbering Authority) which meant that we (i.e. the kernel.org community) are now responsible for issuing all CVEs for the Linux kernel. During this time, we’ve become one of the largest creators of CVEs by quantity, going from nothing to number 3 in…
33
The stack circuitry of the Intel 8087 floating point chip, reverse-engineered
Early microprocessors were very slow when operating with floating-point numbers. But in 1980, Intel introduced the 8087 floating-point copro...
34
Jepsen: NATS 2.12.1
NATS is a popular streaming system. Producers publish messages to streams , and consumers subscribe to those streams, fetching messages from them. Regular NATS streams are allowed to drop messages. However, NATS has a subsystem called JetStream , which uses the Raft consensus algorithm to replicate data among nodes…
35
From Azure Functions to FreeBSD
Putting FreeBSD’s “power to serve” motto to the test. On Thanksgiving morning, I woke up to one of my web services being unavailable. All HTTP requests failed with a “503 Service unavailable” error. I logged into the console, saw a simplistic “Runtime version: Error” message, and was not able to diagnose the problem…
36
The Anatomy of a macOS App
How Mac applications evolved from a multitude of resources to a bundle formed from a standard layout of directories, and how they have come to be largely self-contained in macOS 26.
37
Go is portable, until it isn't
An exploration of Go's portability limits when integrating with system-specific C libraries like libsystemd and dealing with glibc vs. musl systems.
38
Cloudflare outage on December 5, 2025
Cloudflare experienced a significant traffic outage on December 5, 2025, starting approximately at 8:47 UTC. The incident lasted approximately 25 minutes before resolution. We are sorry for the impact that it caused to our customers and the Internet. The incident was not caused by an attack and was due to…
39
Netflix’s AV1 Journey: From Android to TVs and Beyond
Liwei Guo, Zhi Li, Sheldon Radford, Jeff Watts
40
Proxmox Datacenter Manager 1.0 available
Latest announcements for Proxmox.
41
Booting Linux in QEMU and Writing PID 1 in Go to Illustrate Kernel as Program
Most books and courses introduce Linux through shell commands, leaving the kernel as a mysterious black box doing magic behind the scenes. In this post, we will run some experiments to demystify it: the Linux kernel is just a binary that you can build and run.
42
Golang's big miss on memory arenas
When your software team needs to pick a language today, you typically weigh two factors: language performance and developer velocity.
43
You can't fool the optimizer
Pattern recognition can see through obfuscated code to find the right instruction
44
100k TPS over a billion rows: the unreasonable effectiveness of SQLite
A blog mostly about Clojure programming
45
Addressing the adding situation
We learn why adding on x86 isn't as obvious as you might think
46
Advent of Compiler Optimisations 2025
Announcing AoCO 2025 - daily December posts about compiler optimisations
47
Comparing AWS Lambda ARM64 vs. x86_64 Performance Across Runtimes in Late 2025
See how AWS Lambda arm64 stacks up against x86_64 in real-world benchmarks across CPU, memory, and I/O workloads using Node.js, Python, and Rust.
48
Rootless Pings in Rust
Sending a ping by creating an ICMP socket normally requires root: you can’t create a raw socket to send ICMP packets without it. The ping command line tool works without root however, how is that possible? It turns out you can create a UDP socket with a protocol flag, which allows you to send the ping rootless. I…
49
Last Week on My Mac: Losing confidence
What was the key to successfully learning to drive, ride a bike, or speak a foreign language? Confidence, and it’s every bit as important in computing, and in macOS.
50
Why xor eax, eax?
Why do compilers love xor-ing registers so much?
51
Idempotency keys for exactly-once processing
In distributed systems, there’s a common understanding that it is not possible to guarantee exactly-once delivery of messages. What is possible though is exactly-once processing. By adding a unique …
52
A Love Letter to FreeBSD
I’m still the new person here, learning your ways, stumbling over the occasional quirk, smiling when I find the small touches that make you different. You remind me of what computing felt like before the noise. Before hype cycles and performance theatre. Before every tool needed a plugin system and a logo. You are…
53
Windows drive letters are not limited to A-Z
If you want €:\, you can have it, sort of
54
Landlock-Ing Linux
Landlock is a Linux API that lets applications explicitly declare which resources they are allowed to access. Its philosophy is similar to OpenBSD’s unveil() and (less so) pledge() : programs can make a contract with the kernel stating, “I only need these files or resources — deny me everything else if I’m…
55
Airbus A320 Fly by wire corrupted by radiation in flight
Aviation insiders say an airworthiness directive may soon require software updates across the Airbus A320 fleet after investigators linked a JetBlue incident—where the aircraft entered a sudden uncommanded descent—to a faulty ELAC computer. Any grounding is expected to be short and staggered, with airlines updating…
56
Don't tug on that, you never know what it might be attached to (2016)
From the highly eclectic blog of Mark Dominus
57
A programmer-friendly I/O abstraction over io_uring and kqueue (2022)
Consider this tale of I/O and performance. We’ll start with blocking I/O, explore io_uring and kqueue, and take home an event loop very similar to some software you may find familiar.
58
The input stack on Linux: An end-to-end architecture overview
Let's explore and deobfuscate the input stack on Linux. Our aim is to understand its components and what each does. Input handling can be divided into two parts, separated by a common layer. We’ll try to make sense of all this, one thing at a time, with a logical and coherent approach.
59
Same-day upstream Linux support for Snapdragon 8 Elite Gen 5
Initial kernel and subsystem support for new Snapdragon 8 Elite Gen 5 posted for review. Learn what’s in the patches and how you can start working with them.
60
Isn't WSL2 just a VM?
My take on Windows NT subsystems and the thin line between VMs and subsystems.