frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

sshole

https://sshhole.com
2016•josemrb•8h ago•514 comments

Alpine Linux Security Advisory: OpenSSH-server password authentication bypass

https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/
479•pantalaimon•6h ago•94 comments

The Hackintosh Reborn

https://www.naut.ca/blog/2026/11/05/the-hackintosh-reborn-with-ai/
87•rubatuga•1h ago•19 comments

Kagi Search for Everyone

https://kagi.com/changelog
51•elashri•1h ago•10 comments

Tencent Launches Hy4, One of the Leading Open-Source AI Models

https://www.tencent.com/tencent-launches-hy4-joining-the-ranks-of-the-worlds-leading-open-source-...
17•gmays•46m ago•1 comments

Window Sweaters

https://github.com/saragordic/window-sweaters
152•nickswalker•4h ago•55 comments

Goodbye from Salon

https://www.salon.com/2026/11/05/goodbye-from-salon/
163•mkeeter•1h ago•39 comments

Motorola Signature 27 with GrapheneOS support

https://motorolanews.com/motorola-signature-27-2/
301•monneyboi•5h ago•206 comments

Launch HN: Rivet (YC W23) – Scale and Orchestrate Agents on S3

https://github.com/rivet-dev/rivet
50•NathanFlurry•3h ago•27 comments

My psychophysics as a bilateral cochlear implant user

https://claude.ai/artifact/L8qsMc3SorytGW3LA81nYf
136•mi-rae•4h ago•35 comments

September in Servo: <progress>, rounded rectangles, and more

https://servo.org/blog/2026/11/05/september-in-servo/
148•iamnothere•6h ago•30 comments

Download your favourite YouTube videos

https://criminallyvulgar.dev/you-should-absolutely-download-your-favourite-youtube-videos/
216•surprisetalk•8h ago•100 comments

I wish tech companies knew more about me

https://rakhim.exotext.com/i-wish-tech-companies-knew-more-about-me
214•freetonik•7h ago•204 comments

Bild AI (YC W25) Is Hiring Founding Product Engineers

https://www.ycombinator.com/companies/bild-ai/jobs
1•rooppal•4h ago

The Lisp curse, now coming to your ecosystem

https://javahippie.net/programming/llm/2026/03/05/the-lisp-curse-coming-to-your-ecosystem.html
166•marcolinux•2d ago•114 comments

OpenSSH 10.6p2 Critical workaround for alpine without PAM

https://www.openssh.org/releasenotes.html#10.6p2
217•selckin•9h ago•10 comments

Show HN: A decent text-to-image model trained for ~$20K (Apache 2.0 Weights)

https://www.linum.ai/field-notes/pjit-21k
97•schopra909•1d ago•9 comments

MCP Explained

https://mcp-explained.com/
198•rwilinski•6h ago•104 comments

Obscure audio codec is a perfect fit for the N64

https://phoboslab.org/log/2026/11/n64-ulc-codec
154•frostbyte7•8h ago•17 comments

The Stacks Project, Formalized in Lean

https://axiommath.ai/research/the-stacks-project-formalized/
51•namanbnsl•4h ago•11 comments

MS Paint Remote Code Execution Vulnerability

https://www.cve.org/CVERecord?id=CVE-2026-83844
5•kuberwastaken•24m ago•3 comments

The Cost of Blogging

https://onlinegoddess.net/2026/11/the-cost-of-blogging/
7•speckx•53m ago•0 comments

GPT-6 Astra covertly underperforms on safety research

https://alignment.openai.com/misalignment-reports/covert-underperformance-on-safety-research-tasks/
231•lucrbvi•13h ago•121 comments

Show HN: Stroq – a local audit of what your coding agent did and why

https://github.com/AGGIB/Stroq
45•agybay_07•5h ago•10 comments

Nasdaq plummets 4% into correction territory

https://www.cnbc.com/2026/11/04/stock-market-today-live-updates.html
146•kristianp•3h ago•116 comments

We can do better than line-buffered output

https://nullprogram.com/blog/2026/11/05/
67•zdw•5h ago•5 comments

Hungary: Communist-era files released, up to 60k former agents revealed

https://www.euronews.com/2026/11/04/hungary-communist-era-files-opened-up-to-60000-former-agents-...
49•rdmuser•1h ago•9 comments

Building a Multi-Agent System from Scratch: Architecture Patterns

https://kadhar.dev/blog/multi-agent-systems-from-scratch
56•kadharmfn•5h ago•20 comments

Nordstjernen, Northstar, Southstar: minimalist webbrowsers in C and Rust

https://nordstjernen.org/
44•Propelloni•5h ago•23 comments

Baidu released ERNIE 5.5 Flash Base

https://ernie.baidu.com/release/ernie-5-5-flash-base/
155•pretext•11h ago•86 comments
Open in hackernews

Achieveing lower latencies with S3 object storage

https://spiraldb.com/post/so-you-want-to-use-object-storage
31•znpy•1y ago

Comments

jmull•1y ago
> Roughly speaking, the latency of systems like object storage tend to have a lognormal distribution

I would dig into that. This might (or might not) be something you can do something about more directly.

That's not really an "organic" pattern, so I'd guess some retry/routing/robustness mechanism is not working the way it should. And, it might (or might not) be one you have control over and can fix.

To dig in, I might look at what's going on at the packet/ack level.

nkmnz•1y ago
I don't know what you mean by the word "organic", but I think lognormal distributions are very common and intuitive: whenever the true generative mechanism is “lots of tiny, independent percentage effects piling up,” you’ll see a log‑normal pattern.
jmull•1y ago
You can think of a network generally as a bunch of uniform nodes with uniform connections each with a random chance of failure, as a useful first approximation.

But that’s not what they really are.

If you’re optimizing or troubleshooting it’s usually better to look at what’s actually happening. Certainly before implementing a fix. You really want to understand what you’re fixing, or you’re kind of doing a rain dance.

pyfon•1y ago
How do you do that for an abstract service like S3? I see how you could do that for your own machines.
anorwell•1y ago
The article posts a table of latency distributions, but the latencies are simulated based on the assumption that latencies are lognormal. I would be interested to read the article comparing the simulation to actual measurements.

The assumption that latencies are lognormal is a useful approximation but not really true. In reality you will see a lot of multi-modality (e.g. cache hits vs misses, internal timeouts). Requests for the same key can have correlated latency.

MasterIdiot•1y ago
I think the distribution he uses is pretty close to the paper he links "Exploiting Cloud Object Storage for High-Performance Analytics" https://www.durner.dev/app/media/papers/anyblob-vldb23.pdf
tossandthrow•1y ago
The hedging strategies all seem to assume that latency for an object is an independent variable.

However, I would assume dependency?

Eg. if. a node holding a copy of the object is down and traffic needs to be re-routed to a slower node. Indifferently of how many requests I send, the latency will still be high?

(I am genuinly curious of this is the case)

n_u•1y ago
It’s not addressed directly but I do think the article implies you hope your request latencies are not correlated. It provides a strategy for helping to achieve that

> Try different endpoints. Depending on your setup, you may be able to hit different servers serving the same data. The less infrastructure they share with each other, the more likely it is that their latency won’t correlate.

addisonj•1y ago
S3 scale is quite massive with each object spread across a large number of nodes via erasure encoding.

So while you could get unlucky and routed to same bad node / bad rack, the reality is that it is quite unlikely.

And while the testing here is simulated, this is a technique that is used with success.

Source: working on these sort of systems

jmpman•1y ago
Lots of areas left for exploration.
up2isomorphism•1y ago
S3 is a bad choice if you need low latency to begin with.
mannyv•1y ago
They have both ssd and platter based storage now. So that's not a true statement anymore.
up2isomorphism•1y ago
The problem of s3 latency is never about hdd or ssd to begin with.

This a big problem of so called modern “data pipeline”; public cloud providers will anything and a lot of people will believe it.

mannyv•1y ago
No, sorry.
sgarland•1y ago
Network-based storage is a bad choice if you need low latency, period. You’re not going to beat data locality.
UltraSane•1y ago
It is kinda of crazy how much work is done to mitigate the very high latency of S3 when we have NVMe SSDs with access latency of microseconds.
addisonj•1y ago
Yeah, engineering high scale distributed data systems on top the cloud providers a very weird thing at times.

But the reality is that as large enterprise move to the cloud, but still need lots of different data systems, it is really hard to not play the cloud game. Buying bare metal and direct connect with AWS seems a reasonable solution... But it will add years to your timeline to sell to any large companies.

So instead, you work in the constraints the CSPs have, and in AWS, that means guaranteeing durability cross zone, and at scale, that means either huge cross az network costs or offloading it to s3.

You would think this massive cloud would remove constraints, and in some ways that is true, but in others you are even more constrained because you don't directly own any of it and are the whims of unit costs of 30 AWS teams.

But it is also kind of fun

UltraSane•1y ago
If cross AZ bandwidth was more reasonably priced it would enable a lot of design options like running something like MinIO on nothing but directly connected NVMe Instance store volumes.
jen20•1y ago
The very first sentence of this article contains an error:

> Over the past 19 years (S3 was launched on March 14th 2006, as the first public AWS service), object storage has become the gold standard for storing large amounts of data in the cloud.

While it’s true that S3 is the gold standard, it was not the first AWS service, which was in fact SQS in 2004.

hermanradtke•1y ago
I thought S3 was first as well.

This is the source Wikipedia uses: https://web.archive.org/web/20041217191947/http://aws.typepa...

adam_gs•1y ago
author here - took that quote from this[1] blog post by an AWS VP/distinguished engineer, the use of "public service" might have some loosely defined meaning in this context.

[1] https://www.allthingsdistributed.com/2025/03/in-s3-simplicit...

jen20•1y ago
Interesting source - looks like it means “GA” service, rather than “public” per se. The SQS beta was also available to the public.
n_u•1y ago
What I’ve always been curious about is if you can help the S3 query optimizer* in any way to use specialized optimizations. For example if you indicate the data is immutable[1] does the lack of a write path allow further optimization under the hood? Replicas could in theory serve requests without coordination.

*I’m using “query optimizer” rather broadly here. I know S3 isn’t a DBMS.

[1] https://aws.amazon.com/blogs/storage/protecting-data-with-am...