Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 6,947 posts.
Ginseng: Keeping secrets in registers when you distrust the operating system
Ginseng: keeping secrets in registers when you distrust the operating system Yun & Zhong et al., NDSS’19 Suppose you did go to the extreme length of establishing an unconditional root of …
Porting Doom to the Fastly edge serverless platform
id Software’s DOOM has become one of the most-ported games in history. It felt like a perfect project to port to Compute, built on our serverless compute environment, to experiment with different applications of the product.
FreeBSD 13.4-Release
The FreeBSD Release Engineering Team is pleased to announce the availability of FreeBSD 13.4-RELEASE. This is the fifth release of the stable/13 branch.
Breaking the WAL
I did this from a lawn chair on the Sunshine Coast.
How Spotify Works
Synthpop and sci-fi
Notes from Facebook's Developer Infrastructure at Scale F8 Talk
Any time Facebook talks about technical matters I tend to listen. They have a track record of demonstrating engineering leadership in several spaces. And, unlike many companies that just talk, Facebook often gives others access to those ideas via source code and healthy open source projects. It's rare to see a company…
FreeBSD/EC2 on C5 instances
Ever since the first EC2 instances launched — the ones which were retrospectively named "m1.small" — Amazon has relied on the Xen hypervisor. No longer: C5 instances use KVM. This sounds like it would be a problem, but in fact that change didn't bother FreeBSD at all: Now that everything uses hardware-based paging…
A log/event processing pipeline you can't have (2019)
Let me tell you about the still-not-defunct real-time log processing pipeline we built at my now-defunct last job. It handled logs from a la...
Asm.js performance improvements in the latest version of Firefox
The latest version of Firefox which launched last week includes a major update to the user interface as well as to features like Sync. Another area in which this release ...
Linux TCP/IP Tuning
Monitor and optimize your website's user experience with the real-time performance analytics from Akamai mPulse. Identify and fix CWV performance issues for search engine indexing and improve the mobile user experience.
Clive OS: Go applications that can run without an operating system (2016)
Removing (most of) the software stack from the cloud Clive is an operating system designed to work in distributed and cloud computing environments. It’s main design guidelines are: Ther…
Defragging my old Dell's UEFI NVRAM
I’m setting up an old Dell box (2011-era tech). I was migrating to some new boot drives and setting up grub on them again. Got to the point of deleting the old boot entries and adding new ones, and got an error like Could not prepare boot variable: No space left on device. Weird, because there weren’t that many EFI…
However improbable: The story of a processor bug
Processor problems have been in the news lately, due to the Meltdown and Spectre vulnerabilities. But generally, engineers writing software assume that computer hardware operates in a reliable, well-understood fashion, and that any problems lie on the software side of the software-hardware divide.
How C array sizes become part of the binary interface of a library
We explain how C array sizes become part of the binary interface of a library and examine ways to avoid ABI compatibility issues.
Using the OS X 10.10 Hypervisor Framework: A Simple DOS Emulator
Since Version 10.10 (Yosemite), OS X contains Hypervisor.framework, which provides a thin user mode abstraction of the Intel VT features. It enables apps to use virtualization without the need of a kernel extension (KEXT) – which makes them compatible with the OS X App Store guidelines.
If you must run Windows 10
Barring divine intervention, Windows 10 Enterprise LTSC 2019 ( formerly LTSB ) may be the least bad option:
So what is the deal with A/UX anyways?
The year is 1983, and several Apple employees visit Brown University, and get some idea of what Universities want in a computer for the coming future. The big buzz of the era was the so called 3M machine:
Bytecode VMs in surprising places (2024)
In response to a question on Twitter 1 , Richard Hipp wrote about why SQLite uses a bytecode VM for executing SQL statements.
System settings that aren’t in System Settings
Where would you set the default call handler for macOS? And where in System Settings do you set the default web browser?
CVE-2026-3888: Important Snap Flaw Enables Local Privilege Escalation to Root
The Qualys Threat Research Unit has identified a Local Privilege Escalation (LPE) vulnerability affecting default installations of Ubuntu Desktop version 24.04 and later. This flaw (CVE-2026-3888)…
OpenSSH Pre-Auth Double Free – Writeup and Proof-of-Concept
Understanding the OpenSSH CVE-2023-25136 high vulnerability. Read our analysis with Proof-of-Concept, learn what's vulnerable, and discover remediations.
Why isn't memset() async-signal-safe?
Really, POSIX? Really? memset() isn't async-signal-safe? How is it not safe? … oh … that's why
AVIF for Next-Generation Image Coding
By Aditya Mavlankar, Jan de Cock, Cyril Concolato, Kyle Swanson, Anush Moorthy and Anne Aaron
The lost malloc()
Prompted by another project idea that popped into my mind, I did some Unix archaeology and looked at the original sources . This is the most fun I've ever had reading someone else's code - probably due to the historical significance. But also because of how delightfully approachable it was, compared to modern…