frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
749•tuyuri•3h ago•312 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
205•ejohnso49•1h ago•105 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
171•abhisek•3h ago•70 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
230•nnx•3h ago•27 comments

Rust off Rails: The opinionated web stack for the AI era

https://rustoffrails.org/
33•mike1o1•1h ago•24 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
153•nr378•3h ago•87 comments

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
646•hkc•8h ago•286 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
51•bryanrasmussen•1d ago•4 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
86•surprisetalk•2h ago•49 comments

What I learned from six months of being stupid on purpose

https://wvez.org/blog/learning-to-be-stupid/
43•wvez22•1h ago•22 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
68•raahelb•4h ago•22 comments

Your MCU Likely Escaped the eMudhra Intermediate CA Compromise

https://danielmangum.com/posts/mcu-emudhra-intermediate-ca-compromise/
21•hasheddan•1h ago•6 comments

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
56•scottfalconer•1d ago•82 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
66•armcat•4h ago•16 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
16•simfinii•11h ago•12 comments

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulne...
11•giuliomagnifico•1h ago•2 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•5h ago

C++ futures part 1: The mental model

https://devblogs.microsoft.com/oldnewthing/20261012-00/?p=112767/
46•ibobev•1d ago•9 comments

Trials and Tribulations of Native Lua Compilation

https://samyeyo.github.io/clx/blog.html
7•_samt_•3d ago•1 comments

The Future of CSS

https://www.joshwcomeau.com/css/interop-2027/
563•soheilpro•15h ago•235 comments

Way to Play Super Mario 64: On Apple Vision Pro

https://www.pagetable.com/303
150•frizlab•2d ago•54 comments

Show HN: ULDA – Client-side encryption with a simple JavaScript API

https://demo.ulda.io/
6•nonsence•2d ago•1 comments

Show HN: Sumi.css – CSS Framework

https://github.com/vladocar/Sumi.css
45•bepero•4h ago•10 comments

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-wh...
329•gumby•16h ago•148 comments

Whatever Happened to Fire Escapes

https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes
158•sohkamyung•7h ago•121 comments

The Decoherence Trap

https://maevyn.codes/decoherence
146•cassianoleal•2d ago•62 comments

PHP2Shell: AI uncovers critical RCE in PHP

https://www.wiz.io/blog/php2shell-php-rce
389•danlark1•4h ago•145 comments

Feds suspect ransom negotiator ran ShinyHunters extortion site

https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
256•Bender•19h ago•132 comments

The Lucrative World of Literary Scams

https://www.thedial.world/articles/news/ai-book-scams
53•samclemens•2d ago•6 comments

The Other Epidemic: Trying to get off benzodiazepines

https://www.thebeliever.net/the-other-epidemic/
275•gaplong•18h ago•221 comments
Open in hackernews

JEP 515: Ahead-of-Time Method Profiling

https://openjdk.org/jeps/515
101•cempaka•1y ago

Comments

nmstoker•1y ago
Would be interesting if the Faster Python team considered this approach for Python (although maybe they already did?)
motoboi•1y ago
The most impact will be achieved on java standard library, like Streams (cited in the article). Right now, although their behavior is well stablished and they are mostly used in the "factory" mode (no user subclassing or implementation of the stream api), they cannot be shipped with the JVM already compiled.

If you can find a way (which this JEP is one way) to make the bulk of the java standard api AOT compiled, then java programs will be faster (much faster).

Also, the JVM is already an engine marvel (java JIT code is fast as hell), but this will make java programs much nimbler.

rzwitserloot•1y ago
I assume you meant with the AOT argument: "The initial few minutes of a JVM's existence, which would be the entire lifetime if you're using java the way you use e.g. your average executable in your `/usr/bin` dir".

Saying "java programs will be faster" is perhaps a bit misleading to those who don't know how java works. This will speed up only the first moments of a JVM execution, nothing more. Or, I misread the JEP, in which case I'd owe you one if you can explain what I missed.

As a java developer this will be lightly convenient when developing. We go through JVM warmup a lot more than your average user ever does. Personally I think I'm on the low end (I like debuggers, and I don't use TDD-style "what I work on is dictated by a unit test run and thus I rerun the tests a lot during development". But still it excites me somewhat, so that should mean your average java dev should be excited quite a bit by this.

I am not all that experienced in it, but I gather that lambda-style java deployments (self contained simple apps that run on demand and could in theory be operating on a 'lets boot up a JVM to run this tiny job which won't last more than half a second') have looong ago moved on from actually booting JVMs for every job, such as by using Graal, an existing AOT tool. But if you weren't using those, hoo boy. This gives every java app 'graal level bootup' for as far as I can tell effectively free (a smidge of disk space to store the profile).

For the kinds of java deployments I'm more familiar with (a server that boots as the box boots and stays running until a reboot is needed to update deps or the app itself), this probably won't cause a noticable performance boost.

indolering•1y ago
I thought Graal was going to slowly replace HotSpot?
vips7L•1y ago
There was talk of the graal jit replacing C2, but native image will never replace HotSpot.
mshockwave•1y ago
in addition to storing profiles, what about caching some native code? so that we can eliminate the JIT overhead for hot functions

EDIT: they describe this in their "Alternative" section as future work

tikkabhuna•1y ago
Is this similar/the same as Azul Zing’s ReadyNow feature?
rst•1y ago
Faint echoes of the very first optimizing compiler, Fortran I, which did a monte carlo simulation of the flow graph to attempt to detect hot spots in the flow graph so it could allocate registers to inner loops first.
indolering•1y ago
OpenJ9 has had some of this type of functionality for a while now. Glad to see the difference between interpreted and compiled languages continue to get fuzzier.
pjmlp•1y ago
Even longer than that, OpenJ9 AOT capabilities, and JIT cache, go back to the Websphere Real-Time JVM, whose branding had nothing to do with J2EE application server.

Most documentation is gone from the Internet, I was able to dig one of the old manuals,

https://ftpmirror.your.org/pub/misc/ftp.software.ibm.com/sof...

These kind of features have been available in commercial JVMs like those for a while now, what the community is finally getting are free beer versions of such capabilities.