Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 6,947 posts.
Teardown of a Failed Linux LTS Spectre Fix
An in-depth analysis of the journey of a Spectre fix into the upstream LTS kernels that left its users with nothing more than a false sense of security.
Using SIMD to aggregate billions of values per second
How SIMD instructions make aggregations faster in QuestDB, including benchmark results and a comparison with Postgres.
APFS encrypted plaintext password found in another log file
UPDATE: PLEASE HELP ME TEST At some point you just need to stop looking and be blissfully ignorant...this was not one of those days. In and update to my previously updated blog article , I have found another instance where the plaintext password was written to system logs. Thi
Rustls Server-Side Performance
In past years, the Rustls project has been happy to receive substantial investments from the ISRG. One of our goals has been to improve performance without compromising on safety. We last posted about our performance improvements in October of 2024, and we're back to talk about another round of improvements. What is…
The case of the mysterious --help directory (2020)
For quite some time—as my research will show, March 2016—, I have been annoyed by a directory named --help showing up in my home directory (and sometimes in others).
How I learned to stop worrying and love userspace networking
Userspace wireguard is fun!
Stripped-down Kubernetes on the Raspberry Pi
Join me as I test-drive the smallest ever Kubernetes distribution k3s. Find out how this runs on Raspberry Pi compared to kubeadm with Docker.
Coreboot and Skylake, Part 2: A Beautiful Game
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
PureBoot, the High Security Boot Process
Purism makes premium phones, laptops, mini PCs and servers running free software on PureOS. Purism products respect people's privacy and freedom while protecting their security.
Hyperlight: Virtual machine-based security for functions at scale
The Microsoft Azure Core Upstream team is excited to announce the Hyperlight project, an open-source Rust library you can use to create very small VMs for embedded functions. Learn more.
OpenBSD 5.8 released
OpenBSD 5.8
Format string vulnerability found in 'sudo'
A flaw exists in the debugging code in sudo versions 1.8.0 through 1.8.3p1 that can be used to crash sudo or potentially allow an unauthorized user to elevate privileges. Sudo versions affected: 1.8.0 through 1.8.3p1 inclusive. Older versions of sudo are not affected. CVE ID: This vulnerability has been assigned…
Jepsen: TiDB 2.1.7
In 2010, Google engineers Daniel Peng & Frank Dabek published Large-scale Incremental Processing Using Distributed Transactions and Notifications , which described Percolator: a Google-internal database for random access transactional workloads where low latencies are not required. Percolator uses a global…
Making a low level Linux debugger, part 3: our first program
This continues a series where we make a debugger and live editor for (re)creating assembly and C programs.
Distributed Systems in Haskell
I recently completed UT Austin's Distributed Computing class, taught by Lorenzo Alvisi. My project partner Pato and I decided to give it a go in Haskell, and ended up using Haskell for all project assignments (Chandy-Lamport, Paxos, and Bayou).
FreeBSD on the Lenovo Thinkpad
Compatibility of FreeBSD on a Lenovo Thinkpad T480, notes and fixes (HiDPI, Trackpad, camera, etc).
What every programmer should know about solid-state drives (2014)
This is Part 6 over 6 of "Coding for SSDs". For other parts and sections, you can refer to the Table to Contents. This is a series of articles that I wrote to share what I learned while documenting myself on SSDs, and on how to make code perform well on SSDs. In this part,
32 MiB Working Sets on a 64 GiB machine
Memory is a relatively scarce resource on many consumer computers, so a feature to limit how much memory a process uses seems like a good idea, and Microsoft did indeed implement such a feature. Ho…
Avoiding systemd isn't hard
The former contents of this blog post have been removed.
Memory bandwidth
Absolute memory bandwidth figures tend to look fairly large, especially for GPUs. This is deceptive. It’s much more useful to relate memory bandwidth to say the number of clock cycles or inst…
Docker in Production: An Update
The previous article Docker in Production: A History of Failure was quite a hit. After long discussions, hundreds of feedbacks, thousands of comments, meetings with various individuals and major pl…
An ode to bzip
The story goes like this. ComputerCraft is a mod that adds programming to Minecraft. You write Lua code that gets executed by a bespoke interpreter with access to world APIs, and now you’re writing code instead of having fun. Computers have limited disk space, and my /nix folder is growing out of control, so I need to…
Windows NT 3.1 on Dec Alpha AXP
As I was preparing the Windows NT RISC exhibit for VCF west , I realized that I’m missing a rather important piece of the history. While I was showing the potentially last DEC Alpha Windows build ever – AXP64 2210 , I don’t have anything earlier than NT 3.51. It would be nice to showcase the very first RTM version …
The Weird Concept of Branchless Programming
Read THE WEIRD CONCEPT OF BRANCHLESS PROGRAMMING on sanixdk.xyz