15:I[981,["658","static/chunks/658-a698693f56d0116a.js","183","static/chunks/183-6beeeb801c274aaa.js","474","static/chunks/app/%5Btype%5D/layout-631c4730b83c8223.js"],"Posts"] 16:T457,A few days ago, someone decided to DDoS the entire IP range of my Hong Kong VPS provider. fail2ban did its job a little too enthusiastically — banned 20,000+ IPs, ran the machine out of memory, and triggered a kernel panic. Great. :/ That's when I realized the problem: fail2ban lets packets hit the kernel stack first, then reacts. Under a real flood, that reaction cost alone is enough to kill the machine. I went down the XDP/eBPF rabbit hole — packets get dropped at the NIC driver level, before they even touch the kernel. The other thing that annoyed me was manually managing port rules, so I built a daemon that watches for new listening ports via Netlink Process Connector and updates the BPF whitelist automatically. What it does: ~34–65 ns/packet drop on KVM VPS, auto-syncs open ports, handles IPv6 extension headers, one-liner install. What it won't do: won't save you if your uplink is already saturated — not a replacement for upstream scrubbing.

Would love feedback, especially if something breaks on your setup. First time posting here — hello everyone!17:T464,AgentGate is a small backend microservice that enforces stake-gated execution of actions.

The idea is simple: as AI agents reduce the marginal cost of sending bids, API calls, negotiations, etc., systems designed around human friction become vulnerable to synthetic pressure.

AgentGate requires:

Identity registration with an Ed25519 public key

Bond lock before action execution

Cryptographically signed action execution and resolution

Replay protection (timestamp window)

Per-identity rate limiting

Progressive minimum bond requirements

Actions remain capital-backed until resolved. Outcomes determine refund, partial burn, or full slashing.

This is not a token project and does not depend on blockchain. It’s a local-firs

History of Software Design

How strong is New York's "illegal gambling" case against Valve's loot boxes?

C inference for Qwen3-ASR 0.6B and 1.7B transcriptions models

Show HN: OpenTimelineEngine – Shared local memory for Claude Code and codex

Carabiner Hacking for Workout [video]

New AGI Framework Different

Claude's Constitution (2023)

The Legal Rights of Extraterrestrials

'RentAHuman' platform includes Texans who can be rented by AI agents for tasks

Input Remapper – easy to use tool to change the behaviour of Linux input devices

Enclave gem: Mega useful if you're building agents on Ruby on Rails

AutoKey – a desktop automation utility for Linux and X11

Qt45: A small polymerase ribozyme that can synthesize itself

An update on our mental health-related work

Word2vec4kids

Proximity to nuclear power plants associated with increased cancer mortality

The Story of XPilot

Add salvage drip emails for churned users

Trump's Foreign Policy: Resurrecting Empire

Violent Crime Drops in SF as Major US Cities See Declines

The Data Project – data journalism sites built from public government datasets

Altman says OpenAI agrees with Anthropic's red lines in Pentagon dispute

Federal agencies may have a Claude problem now

Show HN: I built a site where you hire yourself instead of applying for jobs

Show HN: Rapidly build efficient sites with Neat, the minimalist CSS framework

Need ArXiv endorsement.. CS. Multiagent-Systems [pdf]

Show HN: XDP firewall that auto-syncs open ports – built after my VPS got DDoS'd

Show HN: Taskdog – Terminal-based task manager with schedule optimization

Show HN: AgentGate – Stake-Gated Action Microservice for AI Agents

Show HN: Market Digest: Self-hosted market analysis and Telegram

Show HN: Git-chain – Simplify branch dependency management in Git

Comments