frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

mitmproxy adds --emudhra option

https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
273•ahlCVA•3h ago•69 comments

There isn't an easy exploit for this PHP vulnerability

https://eliastaylor.com/noexploit/
230•zkldi•3h ago•103 comments

The recently proposed o(n log n) integer multiplication algorithm [pdf]

https://web.maths.unsw.edu.au/~davidharvey/research/subnlogn.pdf
21•craigcitro•41m ago•9 comments

Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
345•passenger•5h ago•187 comments

Epic vs. Apple AU:Court Orders Alt App Stores,Sideloading and 3rd Party Payments

https://www.judgments.fedcourt.gov.au/judgments/Judgments/fca/single/2026/2026fca1552
40•Mayzie•1h ago•6 comments

Rust Style Guide

https://google.github.io/styleguide/rustguide.html
232•kaycebasques•8h ago•125 comments

GitLab Critical Patch Release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
263•artooro•8h ago•65 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
452•abhisek•13h ago•152 comments

LLM Agents Play Pokemon Showdown

https://olivergrabner.com/research/pokemon/
13•grabnero•58m ago•6 comments

Using LLM for confidence scoring is a bad idea

https://rumple.github.io/blog/2026/10/20/asking-llm-for-confidence.html
10•jimauthors•22h ago•2 comments

Chain of Thought for Humans

https://www.boristhebrave.com/2026/10/18/chain-of-thought-for-humans/
41•ibobev•2d ago•19 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
412•cbg0•9h ago•265 comments

Beyond the &

https://lwn.net/Articles/1096028/
19•PaulHoule•1d ago•0 comments

No more icons in every menu by default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
206•riffraff•1d ago•145 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
693•ejohnso49•11h ago•342 comments

I reverse engineered a board game

https://wuemeli.com/blog/reversing-hitster-game/
6•wuemeli•13h ago•0 comments

Show HN: Omnara – Open-source alternative to Claude Managed Agents

https://github.com/omnara-ai/omnara
27•kmansm27•10h ago•10 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
162•bryanrasmussen•1d ago•26 comments

PingCap TiDB Leaks

https://fulcrumsec.vg/pingcap/
235•swyx•1d ago•33 comments

Code is clay now

https://www.albertodenia.com/writing/code-is-clay-now
106•albertodenia•2d ago•57 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
247•armcat•14h ago•107 comments

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

https://www.windowslatest.com/2026/10/19/why-windows-11-still-ships-with-windows-95s-memory-manag...
146•khalidkhair•2d ago•101 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
378•nnx•13h ago•49 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
238•nr378•13h ago•162 comments

Postgres recovery_prefetch can cause outages

https://ardentperf.com/2026/10/20/postgres-recovery_prefetch-considered-harmful-and-causing-outages/
4•plaur782•4h ago•0 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
561•aaronbrethorst•9h ago•333 comments

Show HN: AI-built browser games, collected in one place

https://playgroundarcade.com/
6•richleigh•1d ago•0 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
175•surprisetalk•11h ago•85 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
54•simfinii•20h ago•22 comments

Honey, I shrunk the TV

https://cakehonolulu.github.io/honey-i-shrunk-the-tv/
11•cakehonolulu•2d ago•20 comments
Open in hackernews

Anatomy of a SQL Engine

https://www.dolthub.com/blog/2025-04-25-sql-engine-anatomy/
168•ingve•1y ago

Comments

jimbokun•1y ago
Very nice write up enumerating all the stages of SQL query execution. Interesting even if you don’t care about the DoIt database specifically.
Austizzle•1y ago
Man, this title tripped me up for a minute because I pronounce it with the letters like Ess-Queue-Ell

So the "A" in "A ess-queue-ell" engine felt like it should have been an "An" until I realized it was meant to be pronounced like "sequel"

perching_aix•1y ago
Not necessarily, I see native speakers completely ignore this a lot.

Have you ever considered pronouncing it as squirrel by the way?

kreetx•1y ago
Many (most?) non-native English speakers do pronounce it as ess-queue-ell, especially in their own languages, so yes, the use of "a" instead of "an" does look off from that perspective.
SloopJon•1y ago
When I read SQL for Dummies almost thirty years ago, it made a point of distinguishing "sequel" as a historical predecessor to standard "SQL." As I recall, the author even asserted that SQL is not an acronym/initialism for structured query language. I felt funny saying sequel for the next decade or so, because I wasn't an old timer experienced with this pre-SQL technology.

Now I usually say sequel because everyone else does. That and it rolls off the tongue better than S-Q-L.

jtolmar•1y ago
I prefer "ess queue ell" these days, but the first DBA I ever worked with pronounced it "squirrel".
gopalv•1y ago
This is a great write up about a pull-style volcano SQL engine.

The IR I've used is the Calcite implementation, this looks very concept adjacent enough that it makes sense on the first read.

> tmp2/test-branch> explain plan select count() from xy join uv on x = u;

One of the helpful things we did was to build a graphviz dot export for the explains plans, which saved us days and years of work when trying to explain an optimization problem between the physical and logical layers.

My version would end up displayed as SVG like this

https://web.archive.org/web/20190724161156/http://people.apa...

But the calcite logical plans also have that dot export modes.

https://issues.apache.org/jira/browse/CALCITE-4197

th0ma5•1y ago
This is really great!!
gavinray•1y ago
Calcite also has a relatively-unknown web tool for plan visualization that lets you step through execution.

It's a method from "RuleMatchVisualizer":

https://github.com/apache/calcite/blob/36f6dddd894b8b79edeb5...

Here's a screenshot of what the webpage looks like, for anyone curious:

https://github.com/GavinRay97/GraphQLCalcite/blob/92b18a850d...

ignoreusernames•1y ago
I recommend anyone who works with databases to write a simple engine. It's a lot simpler than you may think and it's a great exercise. If using python, sqlglot (https://github.com/tobymao/sqlglot) let's you skip all the parsing and it even does some simple optimizations. From the parsed query tree it's pretty straightforward to build a logical plan and execute that. You can even use python's builtin ast module to convert sql expressions into python ones (so no need for a custom interpreter!)
Abde-Notte•1y ago
Second this - building even a simple engine gives real insight into query planning and execution. Once parsing is handled, the core ideas are a lot more approachable than they seem.
albert_e•1y ago
Sorry for slight digression.

In a larger system we are building we need a text-to-sql capability for some structured data retrieval.

Is there a way one could utilize this library (sqlglot) to build a multi-dialect sql generator -- that is not currently solved by directly relying on a LLM that is better at code generation in general?

LtdJorge•1y ago
This is a SQL to X library, though. I don’t think it’s what you need.
gavinray•1y ago
You can use an LLM to generate query-builder expressions from popular libraries in whatever language.

For example, on the JVM there is jOOQ, which allows you to write something like:

  select(field("foo"), avg("bar")).from(table("todos"))
And then it will render dialect-specific SQL. It has very advanced emulation functionality for things like JSON aggregations and working around quirks of dialects.

Alternatively, you can ask an LLM to generate a specific dialect of SQL, and then use jOOQ to parse it to an AST, and then render it as a different dialect, like:

    val parser= DSL.using(SQLDialect.POSTGRES).parser()
    val parsedQuery = parser.parseQuery(postgresQuery)
    val renderedMySQL = DSL.using(SQLDialect.MYSQL).renderInlined(parsedQuery)
    println(renderedMySQL)
Unsure if functionality like this exists in other Query Builder libraries for other languages.
KyleBrandt•1y ago
Using dolthub's go-mysql-server for Grafana's upcoming SQL expressions feature (private preview in Grafana 12, but in the OSS version with a feature toggle).

GMS lets you provide your own table and database implementations, so we use GMS to perform SQL queries against Grafana's dataframes - so users can join or manipulate different data source queires, but we don't have to insert the data into SQL to do this thanks to GMS.

genai-analyst•1y ago
another digression here... sorry... i see you're trying to diy text-to-sql—at some point you're gonna hit a bunch of hiccups. like, the model writes a query that “almost” works but joins the wrong tables, or it assumes column names that don’t exist, or it returns the wrong agg because it misread the intent. and retries won’t always save you—it’ll just confidently hallucinate again.

we’ve been through all of that at wobby.ai we ended up building a system where the data team defines guardrails and reusable query templates, so the agent doesn’t just make stuff up. it can still handle user prompts, but within a safe structure. if you want to save yourself from debugging this stuff endlessly, might be worth checking out wobby.ai.