Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 4,109 posts.
Inverting the Xorshift128 random number generator
CVE-2025-7783 is a very recent vulnerability affecting a lot of applications in the Node.js ecosystem including those which use axios or the deprecated request library. In all honesty, this vulnera…
The new Gödel Prize winner tastes great and is less filling
David Zuckerman The 2025 Gödel Prize has been awarded to Eshan Chattopadhyay and David Zuckerman for their paper Explicit two-source extrac...
Morse Code in Tubular Bells (2021)
A quick look at how the movie The Exorcist from 1973 has links to the late great Alan Turing via Mike Oldfield’s album Tubular Bells, Scotland and Amateur Radio. It’s Halloween so figured why not throw some horror in the mix.
Ways to generate SSA
Static Single Assignment is a program representation where each “variable” (though this term can be misleading) is assigned exactly once. Mostly the variables aren’t variables at all, but instead names for values—for expressions. SSA is used a lot in compilers. See this lesson from Cornell for converting Bril to SSA…
Inside PostHog: SSRF, ClickHouse SQL Escape and Default Postgres Creds to RCE
It was yet another day at the office. Our team was internally discussing moving to a different platform analytics solution. Our team was really leaning more towards Posthog. It’s one of the brilliant -I personally believe it’s the best- products on the market. And that’s where the story has begun… We have a somewhat…
Affiliates flock to scam gambling machine
Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. We’ve since learned that these scam gambling sites have proliferated thanks to a new Russian…
How fast is Go? Simulating particles on a smart TV
The challenge, simulate millions of particles in golang, multi-player enabled, cpu only, smart tv compatible.
Fixing left and mutual recursions in grammars
Left & Mutual Recursion Mitigation
Solving a “Layton Puzzle” with Prolog
I have a lot in the works for the this month's Logic for Programmers release. Among other things, I'm completely rewriting the chapter on Logic Programming...
Design Patterns for Securing LLM Agents Against Prompt Injections
This new paper by 11 authors from organizations including IBM, Invariant Labs, ETH Zurich, Google and Microsoft is an excellent addition to the literature on prompt injection and LLM security. …
Let's write a toy UI library
We begin by writing a few helper functions that will invariably prove useful to us later. We will be dealing with a lot of rectangular regions on the screen, so it makes sense to start by defining a rectangle structure and write some code to manipulate it.
Fizz Buzz in CSS
How many CSS selectors and declarations do we need to produce the Fizz Buzz sequence? Of course we could do this with no CSS at all simply by placing the entire sequence as text in the HTML body. So to make the problem precise as well as to keep it interesting, we require that all text that appears in the Fizz Buzz…
Umberto Eco: Ur-Fascism
Celebrated Italian author and scholar Umberto Eco (1932-2016) published an article in 1995 entitled Ur-Fascism . Eco grew up during the time of Mussolini. In the article, he jumps from memories of…
Compiling OCaml to the TI-84 CE Calculator
In this post, I’ll explain how I compiled an OCaml program to run on a TI-84+ CE calculator. 🐪
Vm.overcommit_memory=2 is the right setting for servers
The Linux kernel has a feature where you can tune the behavior of memory allocations: the vm.overcommit_memory sysctl. When overcommit is enabled (sadly, this is the default), the kernel will typically return a mapping when brk(2) or mmap(2) is called to increase a program’s heap size, regardless of whether or not…
ATProto and the ownership of identity
The new age of social-enabled apps
Apple's Best Option: Decentralize iCloud
What can Apple do in the face of a UK order to weaken encryption worldwide? Decentralize iCloud, to start.
The Poison Pill to End the MMR Is Tylenol
If you think Tylenol is bad for babies, wait until you hear about rubella virus
Motion sickness accessibility in video games
Motion sickness is an issue that affects up to one third of people. Is there a way we can strive to make gaming more accessible to people who suffer from the more severe forms of motion sickness?
In the long run, LLMs make us dumber
The comfort we get when offloading our cognitive load to LLMs is bad for us. Cognitive load should exist, and if we reduce it too much – if we stop thinking – we can actually unlearn how to think. Kids who always choose the easy route and copy their homework from other students eventually find […]
I stopped using AI code editors
In the past I used AI code editors for all of my programming, but I stopped using it and recommend others to consider this as well
How often does Python allocate?
The answer is "very often"
The Begining of the End for ANT+ Wireless
First off, no, your ANT+ devices aren’t goin...
A Tektronix TDS 684B Oscilloscope Uses CCD Analog Memory
I have a Tektronix TDS 684B oscilloscope that I bought cheaply at an auction. It has 4 channels, 1 GHz of BW and a sample rate of 5 Gsps. Those are respectable numbers even by today’s standards. It’s also the main reason why I have it: compared to modern oscilloscopes, the other features aren’t nearly as impressive…
Building an AI agent inside a 7-year-old Rails monolith
We run a multi-tenant Rails application with sensitive data and layered authorization. In this post, I walk through how I added the first AI agent tool using RubyLLM, Pundit policies, and our existing Algolia search, without introducing a parallel system or loosening constraints.
A critical look at NetBSD’s installer
[New to Gemini? Have a look at my Gemini FAQ.] This article was bi-posted to Gemini and the Web; Gemini version is here: gemini://gemini.circumlunar.space/users/kraileth/neunix/2025/installing_bsd_…
Selective async commits in PostgreSQL – balancing durability and performance
Safely leverage PostgreSQL's asynchronous commit for significant performance gains
Cell Phone OPSEC for Border Crossings
I have heard stories of more aggressive interrogation of electronic devices at US border crossings. I know a lot about securing computers, but very little about securing phones. Are there easy ways to delete data—files, photos, etc.—on phones so it can’t be recovered? Does resetting a phone to factory defaults erase…