frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Railway Security Disclosure

https://blog.railway.com/p/security-disclosure-wednesday-october-21st
117•passenger•54m ago•38 comments

Today's PHP security release, and how we're strengthening security

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-...
598•ejohnso49•7h ago•299 comments

No More Icons in Every Menu by Default

https://blog.jim-nielsen.com/2026/icons-in-every-menu/
88•riffraff•1d ago•59 comments

GitLab Critical Patch Release

https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-5-1-released/
185•artooro•3h ago•40 comments

Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor

https://safedep.io/litellm-pypi-compromise-credential-stealer-backdoor/
388•abhisek•8h ago•123 comments

Why Windows 11 still ships with Windows 95's memory manager hidden inside it

https://www.windowslatest.com/2026/10/19/why-windows-11-still-ships-with-windows-95s-memory-manag...
105•khalidkhair•1d ago•70 comments

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
796•hkc•13h ago•390 comments

Claude Duet

https://claude.com/product/claude-duet
261•kuberwastaken•3h ago•216 comments

Meta ordered to pay $25B penalty in New Mexico Cambridge Analytica case

https://www.cnbc.com/2026/10/21/meta-new-mexico-cambridge-analytica-penalty.html
272•cbg0•5h ago•167 comments

PHP web runtimes (CVE-2026-109618 and CVE-2026-109619)

https://aws.amazon.com/security/security-bulletins/2026-143-aws/
79•hayd•1h ago•20 comments

Google's Rust Style Guide

https://google.github.io/styleguide/rustguide.html
130•kaycebasques•3h ago•90 comments

DuckDB 2.0.0 LTS “Cinnamon Teal”

https://duckdb.org/2026/10/21/announcing-duckdb-200
342•nnx•8h ago•41 comments

Patch the Planet: global response coordination as agents uncover vulnerabilities

https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/
217•nr378•8h ago•139 comments

The Rise and Fall of the Plasma Screen

https://www.construction-physics.com/p/the-rise-and-fall-of-the-plasma-screen
11•surprisetalk•2d ago•3 comments

EA is shutting down BioWare

https://www.theverge.com/games/1015647/ea-is-shutting-down-bioware
447•aaronbrethorst•5h ago•273 comments

Tiny possum and glider thought extinct for 6000 years found in remote West Papua

https://www.bbc.com/news/articles/cp814l80pw2o
129•bryanrasmussen•1d ago•25 comments

OpenAI models are coming to Google Cloud

https://openai.com/index/openai-models-google-cloud/
204•armcat•9h ago•90 comments

Oregon lawmakers approve money to buy an iconic waterfall listed on Redfin

https://apnews.com/article/oregon-waterfall-for-sale-lawmakers-996de63462d49ec3ad9bee1629fb9488
156•surprisetalk•7h ago•79 comments

New plastic pollution discovered: 'Plasticorals' coral rubble fused with plastic

https://www.oist.jp/news-center/news/2026/9/18/new-form-plastic-pollution-discovered-shores-vulne...
88•giuliomagnifico•6h ago•28 comments

PHP 8.2.35

https://github.com/php/php-src/releases/tag/php-8.2.35
944•tuyuri•9h ago•524 comments

Claude Duet

https://claude.com/resources/articles/claude-duet
37•zaevlad•3h ago•6 comments

CleanFrame: A quieter home screen for Samsung The Frame

https://github.com/nthnclrk/CleanFrame
10•ingve•1h ago•1 comments

Using thousands of AI agents to uncover new leads in biological data

https://openai.com/index/scaling-ai-research-for-complex-biological-data/
123•raahelb•9h ago•74 comments

Launch HN: Alter (YC S25) – Access control for multi-user agents

https://alterauth.com/
41•simfinii•16h ago•20 comments

Show HN: Omnara – Open-Source Alternative to Claude Managed Agents

https://github.com/omnara-ai/omnara
4•kmansm27•6h ago•0 comments

Canary Tokens

https://canarytokens.org/
104•wiradikusuma•4h ago•20 comments

A Place Among the Fiddlers

https://longreads.com/2026/10/01/galax-old-fiddlers-convention-music/
14•gmays•1d ago•0 comments

9 Mothers (YC P26) Is Hiring in Austin, TX

https://9mothers.com/careers
1•ukd1•10h ago

Oracle Security Alert Advisory – CVE-2026-91403 (eMudhra cert revocation)

https://www.oracle.com/security-alerts/alert-cve-2026-91403.html
18•rayhaanj•35m ago•3 comments

Drupal is now light-years ahead of its reputation

https://dri.es/state-of-drupal-presentation-september-2026
105•scottfalconer•2d ago•112 comments
Open in hackernews

The Scalar Select Anti-Pattern

https://matklad.github.io/2025/05/14/scalar-select-aniti-pattern.html
47•goranmoomin•1y ago

Comments

castratikron•1y ago
As long as processing one event does not affect any of the other events in the batch. E.g. events are file IO, and processing one event causes another event's descriptor to get closed before that event can be processed.
wahern•1y ago
If the close routine on an event source, or the low-level (e.g. epoll) registration, deregistration, and dequeueing logic doesn't know how to keep polling and liveness state consistent between userspace and the kernel, they've got much bigger problems. This looks like Rust code so I would hope the event stream libraries are, e.g., keeping Rc'd file objects and properly managing reference integrity viz-a-viz kernel state before the application caller ever sees the first dequeued event in a cycle. This is a perennial issue with event loop libraries and buggy application code (in every language). One can't just deal with raw file descriptors, call the close syscall directly, etc, hoping to keep state consistent implicitly. There's an unavoidable tie-in needed between application's wrappers around low-level resources and the event loop in use.
taeric•1y ago
I'm not entirely clear on what the proposal is at the end? Seems that the long term answer as to "which of these implications to pursue" is "all of them?" Simply taking in a batch of instructions doesn't immediately change much? You still have to be able to do each of the other things. And you will still expect some dependencies between batches that could possibly interact in the same ways.

In a sense, this is no different than how your processor is dealing with instructions coming in. You will have some instructions that can be run without waiting on previous ones. You will have some that can complete quickly. You will have some that are stalled on other parts of the system. (I'm sure I could keep wording an instruction to match each of the implications.)

To that end, part of your program has to deal with taking off "whats next" and finding how to prepare that to pass to the execution portion of your program. You can make that only take in batches, but you are almost certainly responsible for how you chunk them moreso than whatever process is sending the instructions to you? Even if you are handed clear batches, it is incumbent on you to batch them as they go off to the rest of the system.

lmz•1y ago
I guess the proposal is "instead of fetching and acting on one event at a time, consider fetching all available events and look for opportunities to optimize which ones you process (e.g. by prioritization or by skipping certain events if superseded by newer ones)".
taeric•1y ago
I mean, I got that. But you could as easily say "instead of fetching and acting on one event at a time, fetch and triage/route instructions into applicable queues."

In particular, there is no guarantee that moving to batches changes any of the problems you may have from acting on a single one at a time. To that end, you will have to look into all of the other strategies sooner or later.

Following from that, the problem is not "processMessage" or whatever. The problem is that you haven't broken "processMessage" up into the constituent "receive/triage/process/resolve" loop that you almost certainly will have to end up with.

malkia•1y ago
in CPU's - pipelining!
jchw•1y ago
I believe something similar is going on internally in Windows with event queues. It coalesces and prioritizes input events when multiple of them pile up before you're able to pop new events off of the queue. (For some events, e.g. pointer events, you can even go and query frames that were coalesced during input handling.) On the application/API end, it just looks like a "scalar select" loop, but actually it is doing batching behavior for input events!

(On the flip side, if you have a Wayland client that falls behind on processing its event queue, it can crash. On the whole this isn't really that bad but if you have something sending a shit load of events it can cause very bad behavior. This has made me wonder if it's possible, with UNIX domain sockets, to implement some kind of event coalescing on the server-side, to avoid flooding the client with high-precision pointer movement events while it's falling behind. Maybe start coalescing when FIONREAD gets to some high watermark? No idea...)