frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

PHP RCE via stale global state

https://github.com/php/php-src/security/advisories/GHSA-6wmf-4rv5-p3rp
1•pranshuchittora•10s ago•0 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
1•abhisek•33s ago•0 comments

AI Just Found a Bug That Puts Up to 70% of the Websites at Risk

https://www.wsj.com/tech/cybersecurity/ai-just-found-a-bug-that-puts-up-to-70-of-the-worlds-websi...
1•Vaslo•46s ago•0 comments

Appreciating the beauty of all your body's scars and scratches

https://1000awesomethings.com/2026/10/08/576-appreciating-the-beauty-of-all-your-bodys-scars-and-...
1•surprisetalk•51s ago•0 comments

Anatomy · a Skill for Claude Code

https://skills.wheresryan.sh/anatomy
1•bobajeff•1m ago•0 comments

Show HN: An interactive timeline of 20 years of Hacker News front page

https://www.adriankrebs.ch/hn-timeline
1•hubraumhugo•1m ago•0 comments

The Right Words in the Right Order – Notes on the Literacy Crisis

https://www.theideasletter.org/essay/the-right-words-in-the-right-order/
1•pseudolus•2m ago•0 comments

Show HN: VT Code – A terminal-first coding agent with sandboxed tools

https://github.com/vinhnx/VTCode
1•vinhnx•2m ago•0 comments

Armed federal agents knock on doors looking for noncitizen voters

https://www.cbsnews.com/news/federal-agents-seek-noncitizen-voters/
1•ck2•3m ago•1 comments

PHP2Shell

https://www.php2shell.com
2•nr378•3m ago•0 comments

Joseph Bell Was the Real-Life Inspiration for Sherlock Holmes

https://www.smithsonianmag.com/history/arthur-conan-doyle-based-sherlock-holmes-on-a-real-life-sc...
1•gmays•3m ago•0 comments

A tale of two PHP remote vulnerabilities

https://calif.io/php2shell.x/
1•sid_talks•4m ago•0 comments

LiveFrame – measure what video world models deliver on your hardware

https://github.com/kkjcodes/liveframe
1•kkjha7•5m ago•0 comments

Open-source Citus matches PlanetScale's Neki at 10M QPS on half the data nodes

https://stackgres.io/blog/open-source-citus-matches-planetscales-neki-at-10m-qps-on-half-the-data...
1•ahachete•5m ago•0 comments

Trump announces data center dividend

https://keithbrown.com/trump-data-center-dividend
5•drewlem•8m ago•0 comments

Show HN: CeruleanToolbox – Run Azure operations locally with a service principal

https://github.com/siris9476/CeruleanToolbox
1•siris9476•9m ago•0 comments

How the CIA Gave Steve Jobs Top Secret Clearance and Helped Him Return to Apple

https://brianroemmele.substack.com/p/how-the-cia-gave-steve-jobs-a-top
2•MaysonL•9m ago•0 comments

Legacy

https://longform.asmartbear.com/legacy/
1•tosh•9m ago•0 comments

Ask HN: Can we stay on topic?

1•jjsullivan5196•9m ago•1 comments

Starlink access in Ukraine a decision for Musk, not White House, Rubio says

https://www.reuters.com/world/rubio-says-witkoff-zelenskiy-meeting-positive-ideas-be-discussed-wi...
2•JumpCrisscross•10m ago•0 comments

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 out

https://www.php.net/index.php
57•timvdalen•10m ago•7 comments

Websites taken down across Europe ahead of critical cyber-security update

https://www.bbc.com/news/articles/cmly0lg3w5x2o
4•pieterr•11m ago•0 comments

Elephant-Goldfish-Model

https://github.com/google/elephant-goldfish-model
1•armdebug•11m ago•0 comments

PHP Vulnerability Rated 9.2, Highest Severity; EU Recommens Shutting Down Sites

https://finance.biggo.com/news/314e2cc6-2088-4681-bfc9-fbcd063bd3df
3•guytv•12m ago•0 comments

Large-scale predictive modeling in drug discovery: flow-based programming (2016)

https://link.springer.com/article/10.1186/s13321-016-0179-6
1•mpweiher•13m ago•0 comments

Wiki-driven development: coding agents update a wiki for you, you set direction

1•wek•14m ago•0 comments

Updated PHP version released to GitHub

https://github.com/php/php-src/releases/tag/php-8.2.35
102•tuyuri•15m ago•19 comments

Welcome to JavaOne (2012) [video]

https://www.youtube.com/watch?v=I5lAgaCbqZ0
1•brunoborges•15m ago•0 comments

Ask HN: Am I the only dev who, with the advent if AI, want to work in a forest?

3•aledevv•15m ago•4 comments

Self-hosted Claude Environments on secure open-source infrastructure

https://github.com/obot-platform/obot/
1•cjellick•15m ago•0 comments
Open in hackernews

Show HN: ReJot – Database replication framework aimed at developers

https://github.com/rejot-dev/rejot
9•WilcoKruijer•1y ago
Hi Hacker News! We're Jan & Wilco from ReJot (https://rejot.dev). With ReJot we're building a framework that turns the write-ahead log of your database into an asynchronous communication channel for your services. ReJot enables application developers to define how the database tables they own should be replicated to other databases. Something we wish we had at in our previous job at a large fintech.

There is a gap between building internal (REST) APIs and Kafka (event streaming) to share data between services.

Internal APIs start to break down when you have more than a couple services communicating. Their synchronous nature makes them brittle in a distributed system: failures cascade and latency adds up. Companies operating internal APIs at scale often face challenges like managing implicit schemas and versioning. They also need to write significant amounts of code to implement features like circuit breakers and internal load balancing.

Event streaming addresses these issues by using asynchronous communication, but it also introduces significant drawbacks. Kafka is known for its operational complexity and high cost. Engineers must manage outbox tables, outbox processors, and consumers, which makes the system more difficult to understand and maintain.

ReJot is the middle ground solution that re-uses a database system's write-ahead log as an asynchronous communication channel. The WAL is well-suited to double as an outbox, this has been proven by CDC systems like Debezium. ReJot is a lightweight addition to existing infrastructure, and even re-uses existing (relational) database systems to store messages (temporarily) before sending them to the destination/sink databases.

We're developer focused, as opposed to being infrastructure focused. Much like how developers define the database table schemas they use, we enable developers to say how their data should be published to others in the distributed system. This is done through something we call "Public Schemas", they consist of a schema and a (SQL) query. When an item in the underlying table changes, the query is executed to produce an object conforming to the schema. This data is then forwarded through ReJot, ready to be consumed by a different service using a "Consumer Schema". This is again a simple (SQL) query that contains an INSERT statement. All of this is defined from within the codebase of the application, much like how ORMs or query builders work.

In short, ReJot re-uses your database in two ways: by consuming the WAL, and also by using queries to encapsulate and integrate data. This makes ReJot a good middle-ground between the brittleness of synchronous communication and the complexity of event streaming.

Excited to hear what you think!

Comments

raoulritter•1y ago
I'm thinking that now with all these agent to agent frameworks this could potentially work for that. If you send off one agent you want them to keep up to date and sync / talk to each-other. Could your solution work for something like A2A by google or similar to enhance the synchronization across the different agents doing their tasks and prevent them from landing in a loop or similar.
WilcoKruijer•1y ago
I'm not too familiar with how people store the state of AI agents, but I do think there's some opportunity to use ReJot for this use case. Hooking up an agent to ReJot and giving them access to all available Public Schemas could be an interesting way of letting an agent explore and use the data in a distributed system.
jasonthorsness•1y ago
If the consumers stall, doesn't the WAL have to grow in unbounded fashion? Does it place any backpressure on the writers?
WilcoKruijer•1y ago
You're right. Since we don't want to put too much pressure on the source database, we do save the (transformed) WAL items in an intermediary database (we call this the event store), so the source can clear its WAL.

This does mean the intermediary database can grow in an unbounded fashion. The use case really determines if this is fine or not. Since our focus right now is on (micro)service communication, we think this is fine in most cases, as the throughput usually is not gigantic.

Since the event store is just a Postgres database, it's easy to set up partitions to only retain data for a certain amount of time. On the near-term roadmap we also have back-fill support which will make it easier to work with shorter retention windows.