1
New
The latest blog posts to take off on Hacker News. 4,370 posts.
Infrastructure & DevOps
Any year
2
Mac at any scale
What it takes to run Macs in a datacenter: custom MacBook racks, virtualizing macOS with Apple's Virtualization framework, and building and distributing huge VM images across the fleet.
3
Scaling Git at OpenAI
How OpenAI built Pando, a Git-compatible backend designed for the scale of development that Codex makes possible.
4
Moving our warehouse off DuckDB
We moved our warehouse product off DuckDB and DuckLake onto our own flavor of Trino and a new open table format, HogLake. Here's what broke at scale and why.
5
WTF Ubuntu?
In case you missed it: CVE-2026-98432 is a critical (CVSS 9.8) bug in the Linux kernel's TCP code. It's been there since 2016, so virtually every Linux server on the planet has it, and it can be hit remotely. Anthropic says it built a working exploit that gets root on a server. A total takeover.
6
Trigger.dev customer environment variables exposed
An attacker gained unauthorized access to environment variables for a subset of organizations. We've blocked the exploit and emailed all impacted account owners with steps to mitigate.
7
Bidirectional charging during grid outages
David asked a great question on my solar battery system post: why buy a small battery just for emergencies when electric cars have a large battery you can also use for other things? [1] This would be great, and seems like the obvious way for it to work: when the grid goes down the panels can charge the car when it's…
8
Mystery of 60-Second Fluctuations in Power Grids Solved
Why do our grids show a brief spike in electricity demand every minute? A team led by Dirk Witthaut from Forschungszentrum Jülich has now demonstrated that this is due to regular power checks carried out by large-scale battery storage systems. These findings could help to make our electricity supply more robust, as…
9
AI isn't replacing SREs, it's deskilling them
When AI handles 95% of your incident response, do you get worse at handling the 5% that actually matters?
10
Azure's Weakest Link – Five Full Cross-Tenant Compromises
In my previous blog posts, Azure’s Weakest Link? and Azure’s Weakest Link - Full Cross-Tenant Compromise, I gave an overview of the severely insecure architecture behind API Connections in Azure, a part of Azure Logic Apps, and an instance of a full cross-tenant compromise using these inherent flaws. Now I am back…
11
Grace Blackwell needs a new scheduler: 27% more usable GPUs from the same racks
NVL72 puts all 72 GPUs in a rack on one NVLink fabric, but only rack-local jobs get the speedup. How SkyPilot keeps multi-node training and inference on NVLink with topology-aware placement, in-place recovery from GPU failures, and automatic defragmentation.
12
CVE-2026-98432: 9.8 CVE affecting all Ubuntu versions
Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things.
13
Chained PHP2Shell exploit roots 25 servers, including US Government servers
Custom PHP2Shell Exploit Chained with Kernel LPE to Root Versions of Palo Alto Networks PAN-OS Firewalls in the Wild
14
15
Cerebras Deploys Trillion-Parameter AI Models
Learn how Cerebras maps trillion-parameter frontier models across WSE-3T wafers to deliver scalable inference at 1,000–2,000+ tokens per second.
16
Roku developer repositories moved from GitHub to GitLab
Roku provides the simplest way to stream entertainment to your TV. On your terms. With thousands of available channels to choose from.
17
Docker is weird
I decided to make my own container runtime for fun, and even though I’m still early on, I’ve learned that Docker is weird . Here’s some weird things I learned about Docker.
18
OpenAI models are coming to Google Cloud
OpenAI and Google Cloud are bringing frontier models and Codex workflows to Gemini’s Model Garden, available through Google Cloud Marketplace.
19
Dutch National Cyber Security Center is Offline because it uses PHP
Overzicht van de laatste alerts, nieuwsberichten, publicaties, expertblogs en de meest recente verhalen van ondernemers.
20
NixOS is making me less afraid
Something funny happened a little while ago: I read about FreshRSS, and it sounded nice, so I installed it on a server and started using it . That would not have happened a year ago, but then again, a year ago I didn’t have any NixOS servers.
21
Ontology-Driven Observability: Building an End-to-End Knowledge Graph at Netflix
Prasanna Vijayanathan, Renzo Sanchez-Silva
22
Agentic Monitoring
Agents are structurally well suited to monitoring production systems.
23
If you don't run your own LLM proxy, how do you know whats going on?
I think the title captures the idea fully but I'll dig into it because this ain't Twitter. You're working an idea, a piece of code, or a multibillion a year SaaS app which is probably saving the world. Maybe you're automating the cloning process of grabbing
24
RFC8950: Announce IPv4 with an IPv6 next-hop
This post covers how RFC8950 gives the ability to route IPv4 over IPv6 BGP sessions with IPv6 next-hops
25
RPKI now protects 70% of internet routes
RPKI now protects 70% of Internet routes. See what drove the 2026 jump, how well it stops invalid routes, and where gaps remain.
26
What I self-host
I’ve always had a foot in the self-hosting world, long before it was called that. My freshman year of university, I ran a website from a Linux box underneath my bed. There was some downtime when my roommate got tired of the fan noise and turned it off. For several years I ran MythTV , then XBMC (later known as Kodi).
27
Submarine cable resilience
The estimated 1.5M kilometres of subsea communications cables underpins our global telecommunication services. This critical infrastructure faces serious challenges in the coming years.
28
A Dynamic and Distributed Virtual GPU Cloud Built on Idle Apple Silicon Devices
The increasing demand for GPU-accelerated machine learning inference has exposed limitations in centralized GPU infrastructures, including…
29
AWS Lambda Web Functions
AWS Lambda Web Functions is a serverless compute primitive that runs your HTTP framework natively, delivering fast, consistent responses through multi-concurrent execution and automated global distribution.
30
Unikernels were hard. key word: were
Justin Cormack, who worked on MirageOS back in the day, called me at the pub to talk about why unikernels are coming back. The friction that made them hard is gone, the operating system is design debt, and if you care about security you should seriously consider them.