frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Beginning January 2026, all ACM publications will be made open access

https://dl.acm.org/openaccess
722•Kerrick•3h ago•76 comments

GPT-5.2-Codex

https://openai.com/index/introducing-gpt-5-2-codex/
101•meetpateltech•1h ago•71 comments

Agent Skills is now an open standard

https://claude.com/blog/organization-skills-and-directory
113•adocomplete•2h ago•78 comments

Classical statues were not painted horribly

https://worksinprogress.co/issue/were-classical-statues-painted-horribly/
403•bensouthwood•6h ago•200 comments

Top Banned Books: The Most Banned Books in U.S. Schools – Pen America

https://pen.org/top-52-banned-books-since-2021/
8•FigurativeVoid•12m ago•0 comments

Military Standard on Software Control Levels

https://entropicthoughts.com/mil-std-882e-software-control
34•ibobev•2h ago•10 comments

Your job is to deliver code you have proven to work

https://simonwillison.net/2025/Dec/18/code-proven-to-work/
406•simonw•4h ago•331 comments

Launch HN: Pulse (YC S24) – Production-grade unstructured document extraction

29•sidmanchkanti21•3h ago•29 comments

Virtualizing Nvidia HGX B200 GPUs with Open Source

https://www.ubicloud.com/blog/virtualizing-nvidia-hgx-b200-gpus-with-open-source
83•ben_s•5h ago•21 comments

Are Apple gift cards safe to redeem?

https://daringfireball.net/linked/2025/12/17/are-apple-gift-cards-safe-to-redeem
393•tosh•4h ago•308 comments

Jonathan Blow has spent the past decade designing 1,400 puzzles

https://arstechnica.com/gaming/2025/12/jonathan-blow-has-spent-the-past-decade-designing-1400-puz...
275•furcyd•6d ago•372 comments

Dogalog: A realtime Prolog-based livecoding music environment

https://github.com/danja/dogalog
44•triska•4d ago•11 comments

Please Just Try Htmx

http://pleasejusttryhtmx.com/
278•iNic•4h ago•257 comments

RCE via ND6 Router Advertisements in FreeBSD

https://www.freebsd.org/security/advisories/FreeBSD-SA-25:12.rtsold.asc
117•weeha•11h ago•63 comments

Apples, Trees, and Quasimodes

https://systemstack.dev/2025/09/humane-computing/
12•entaloneralie•3d ago•1 comments

Creating apps like Signal could be 'hostile activity' claims UK watchdog

https://www.techradar.com/vpn/vpn-privacy-security/creating-apps-like-signal-or-whatsapp-could-be...
371•donohoe•7h ago•230 comments

Hightouch (YC S19) Is Hiring

https://hightouch.com/careers
1•joshwget•7h ago

Slowness is a virtue

https://blog.jakobschwichtenberg.com/p/slowness-is-a-virtue
209•jakobgreenfeld•8h ago•71 comments

I got hacked: My Hetzner server started mining Monero

https://blog.jakesaunders.dev/my-server-started-mining-monero-this-morning/
558•jakelsaunders94•22h ago•340 comments

Show HN: Paper2Any – Open tool to generate editable PPTs from research papers

https://github.com/OpenDCAI/DataFlow-Agent
6•Mey0320•2h ago•0 comments

Egyptian Hieroglyphs: Lesson 1

https://www.egyptianhieroglyphs.net/egyptian-hieroglyphs/lesson-1/
134•jameslk•13h ago•54 comments

From profiling to kernel patch: the journey to an eBPF performance fix

https://rovarma.com/articles/from-profiling-to-kernel-patch-the-journey-to-an-ebpf-performance-fix/
35•todsacerdoti•4d ago•1 comments

Statistical Learning Theory and ChatGPT

https://kamalikachaudhuri.substack.com/p/statistical-learning-theory-and-chat
4•jxmorris12•2d ago•0 comments

Microscopic robots that sense, think, act, and compute

https://www.science.org/doi/10.1126/scirobotics.adu8009
26•XzetaU8•4d ago•2 comments

Firefox will have an option to disable all AI features

https://mastodon.social/@firefoxwebdevs/115740500373677782
50•twapi•56m ago•44 comments

What is an elliptic curve? (2019)

https://www.johndcook.com/blog/2019/02/21/what-is-an-elliptic-curve/
126•tzury•12h ago•13 comments

Using TypeScript to Obtain One of the Rarest License Plates

https://www.jack.bio/blog/licenseplate
109•lafond•4h ago•100 comments

After ruining a treasured water resource, Iran is drying up

https://e360.yale.edu/features/iran-water-drought-dams-qanats
303•YaleE360•8h ago•248 comments

AI helps ship faster but it produces 1.7× more bugs

https://www.coderabbit.ai/blog/state-of-ai-vs-human-code-generation-report
165•birdculture•6h ago•140 comments

Heart and Kidney Diseases and Type 2 Diabetes May Be One Ailment

https://www.scientificamerican.com/article/heart-and-kidney-diseases-plus-type-2-diabetes-may-be-...
48•Brajeshwar•3h ago•25 comments
Open in hackernews

systemd v259 Released

https://github.com/systemd/systemd/releases/tag/v259
58•voxadam•4h ago

Comments

anotherhue•3h ago

  systemd-networkd now implements a resolve hook for its internal DHCP
      server, so that the hostnames tracked in DHCP leases can be resolved
      locally. This is now enabled by default for the DHCP server running
      on the host side of local systemd-nspawn or systemd-vmspawn networks.
Hooray.local
throw0101d•3h ago
Can it read mail yet?

* https://en.wikipedia.org/wiki/Jamie_Zawinski#Zawinski's_Law

* https://www.jwz.org/hacks/

:)

Nextgrid•1h ago
Who needs to read mail when you can even make it receive mail!

Make an `smtp.socket`, which calls `smtp.service`, which receives the mail and prints it on standard output, which goes to a custom journald namespace (thanks `LogNamespace=mail` in the unit) so you can read your mail with `journalctl --namespace=mail`.

A4ET8a8uTh0_v2•3h ago
Despite being philosophically opposed to it, I can't deny that it is as common as it, because of how easy it seems to make the initial setup. By comparison, when I recently tried void linux, it simply requires ( maybe even demands ) more of its user.
nix0n•2h ago
> Support for System V service scripts is deprecated and will be removed in v260

All the services you forgot you were running for ten whole years, will fail to launch someday soon.

nish__•2h ago
How hard is it to just call your init.d scripts from a systemd unit?
bonzini•2h ago
Not only it's easy, the exact contents of the systemd unit can already be found in /run/systemd/system.
nish__•2h ago
Honestly. I'm sick of people complaining about systemd.
nottorp•1h ago
Were you paid to learn it?

Because last time I wrote systemd units it looked like a job.

Also, way over complex for anything but a multi user multi service server. The kind you're paid to maintain.

tapoxi•1h ago
Why would a server use a different init system than a desktop or embedded device?

Why wouldn't you want unit files instead of much larger init shell scripts which duplicate logic across every service?

It also enabled a ton of event driven actions which laptops/desktops/embedded devices use.

bonzini•1h ago
> Why wouldn't you want unit files instead of much larger init shell scripts which duplicate logic across every service?

Indeed, that criticism makes no sense at all.

> It also enabled a ton of event driven actions which laptops/desktops/embedded devices use.

Don't forget VMs. Even in server space, they use hotplug/hotunplug as much as traditional desktops.

0x457•52m ago
> a multi user multi service server. The kind you're paid to maintain.

TIL. Didn't know I can get paid to maintain my PC because I have a background service that does not run as my admin user.

bigstrat2003•48m ago
I think you're way overstating things. Systemd units can be complex, but for most things they are dead simple to write.
nailer•12m ago
> Because last time I wrote systemd units it looked like a job.

Fascinating. Last time I wrote a .service file I thought how muhc easier it was than a SysV init script.

sebazzz•2h ago
For me it is quite a list.

However, it is not easy figuring out which of those script are actually a SysVInit script and which simply wrap systemd.

bonzini•1h ago
As I wrote in another comment, just check out /run/systemd/system. You'll find the wrapper units that systemd creates for your sysvinit scripts.
noosphr•1h ago
Every release of redhat software makes me happy I switched to openbsd for my human scale computers.
sidewndr46•5m ago
Wasn't this support listed as one of the reasons why systemD would be fine for everyone to adopt?
sovietmudkipz•2h ago
Hobbyist game dev here with random systemd thoughts. I’ve recently started to lean on systemd more as my ‘local game server process manager’ process. At first I thought I’d have to write this up myself as a whole slew of custom code, but then I realized the linux distros I use have systemd. That + cgroups and profiling my game server’s performance lets me pack an OS with as many game servers dynamically (target 80% resource utilization, funny things happen after that — things I don’t quite understand).

In this way I’m able to set up AWS EC2 instances or digital ocean droplets, a bunch of game servers spin up and report back their existence to a backend game services API. So far it’s working but this part of my project is still in development.

I used to target containerizing my apps, which adds complexity, but often in AWS I have to care about VMs as resources anyways (e.g. AWS gamelift requires me to spin up VMs, same with AWS EKS). I’m still going back and forth between containerizing and using systemd; having a local stack easily spun up via docker compose is nice, but with systemd what I write locally is basically what runs in prod environment, and there’s less waiting for container builds and such.

I share all of this in case there’s a gray beard wizard out there who can offer opinions. I have a tendency to explore and research (it’s fuuun!) so I’m not sure if I’m on a “this is cool and a great idea” path or on a “nobody does this because <reasons>” path.

baggy_trough•2h ago
Did you try systemd's containers (nspawn)?
sovietmudkipz•1h ago
…no. TIL.
panick21_•1h ago
Portable services are another option.
open-paren•1h ago
And podman systemd quadlets yet another

https://docs.podman.io/en/latest/markdown/podman-systemd.uni...

sovietmudkipz•1h ago
Wow systemd can do more than I thought to imagine it could
bonzini•1h ago
Technically that's part of podman, not systemd. But it's the same architecture that was used to support sysvinit scripts.

(In fact, nothing prevents anyone from extracting and repackaging the sysvinit generator, now that I think of it).

nszceta•47m ago
I wrote a blog post about using nspawn from an Arch Linux host. The Arch Wiki shows more information about how to get a Debian base if you want that instead. Link to the wiki is at the bottom of the blog post along with more references.

https://adamgradzki.com/lightweight-development-sandboxes-wi...

dijit•2h ago
This is sort of how I designed Accelbytes managed gameserver system (previously called: Armada).

You provide us a docker image, and we unpack it, turn it into a VM image and run as many instances as you want side-by-side with CPU affinity and NUMA awareness. Obviating the docker network stack for latency/throughput reasons - since you can

They had tried nomad, agones and raw k8s before that.

sovietmudkipz•1h ago
Checking out the website now. Looks enticing. Would a user of accelbyte multiplayer services still be in the business of knowing about underlying VMs? I caught some copy on the website that led me to question.

As a hobbyist part of me wants the VM abstracted completely (which may not be realistic). I want to say “here’s my game server process, it needs this much cpu/mem/network per unit, and I need 100 processes” and not really care about the underlying VM(s), at least until later. The closest thing I’ve found to this is AWS fargate.

Also holy smokes if you were a part of the team that architected this solution I’d love to pick your brain.

dijit•8m ago
That was was actually the original intent. If we scale to bare metal providers we can get much more performance. m

By making it an “us” problem to run the infrastructure at a good cost, and be cheaper then than AWS for us to run, meaning we could take no profit on cloud vms. making us cost competitive as hell.

maccard•8m ago
There’s a couple of providers that give you that kind of abstraction. Playfab is _pretty close_ but it’s fairly slow to ramp up and down. There is/was multiplay - they’ve had some changes recently and I’m not sure what their situation is right now. There’s also stuff like Hathora (they’re great but expensive).

At a previous job, we used azure container apps - it’s what you _want_ fargate to be. AIUI, Google Cloud Run is pretty much the same deal but I’ve no experience with it. I’ve considered deploying them as lambdas in the past depending on session length too…

esseph•1h ago
If you use podman quadlets, you get containers and systemd together as a first class citizen, in a config that is easily portable to kubernetes if you need more complex features.
sovietmudkipz•1h ago
O.O this may be the feature that gets me into podman over docker.
esseph•36m ago
The shift from docker to podman was originally quite painful at first, but it's much better, very usable, and quite stable now.

Still, I can see the draw for independent devs to use docker compose. Teams and orgs though makes sense to use podman and systemd for the smaller stuff or dev, and then literally export the config as a kubernetes yaml.

rbjorklin•1h ago
You sound like you've explored at least a few options in this space. Have you looked at https://agones.dev/ ?
sovietmudkipz•1h ago
Yes! It’s a great project. I’m super happy they have a coherent local development story. I kinda abandoned using it though when I said “keeeep it simple” and stopped using containers/k8s. I think I needed to journey through understanding why multiplayer game services like Agones/gamelift/photon were set up like they were. I read through Multiplayer Game Programming: Architecting Networked Games by Joshua Glazer and Sanjay Madhav really helped (not to mention allowed me to better understand GDC talks over multiplayer topics much better).

This all probably speaks to my odd prioritization: I want to understand and use. I’ve had to step back and realize part of the fun I have in pursuing these projects is the research.

madjam002•1h ago
Definitely don't recommend going down this path if you're not already familiar with Nix, but if you are, a strategy that I find works really well is to package your software with Nix, then you can run it easily via systemd but also create super lightweight containers using nix-snapshotter[0] so you don't have to "build" container images if you still want the flexibility of containers. You can then run the containers on Docker or Kubernetes without having to build heavy images.

[0] https://github.com/pdtpartners/nix-snapshotter

frantathefranta•56m ago
I don't recommend getting familiar with Nix because your chances of getting nerd sniped by random HN comments increase exponentially.
colechristensen•1h ago
> (target 80% resource utilization, funny things happen after that — things I don’t quite understand).

The closer you get to 100% resource utilization the more regular your workload has to become. If you can queue requests and latency isn't a problem, no problem, but then you have a batch process and not a live one (obviously not for games).

The reason is because live work doesn't come in regular beats, it comes in clusters that scale in a fractal way. If your long term mean is one request per second what actually happens is you get five requests in one second, three seconds with one request each, one second with two requests, and five seconds with 0 requests (you get my point). "fractal burstiness"

You have to have free resources to handle the spikes at all scales.

Also very many systems suffer from the processing time for a single request increasing as overall system loads increase. "queuing latency blowup"

So what happens? You get a spike, get behind, and never ever catch up.

https://en.wikipedia.org/wiki/Network_congestion#Congestive_...

sovietmudkipz•3m ago
Yea. I realize I ought to dig into things more to understand how to push past into 90%-95% utilization territory. Thanks for the resource to read through.
reactordev•43m ago
This actually works really well with custom user scripts to do the initial setup. It’s also trivial to do this with docker/podman if you don’t want it to take over the machine. Batching/Matchmaking is the hard part of this, setting up a fleet is the fun part of this.

I’ve also done Microsoft Orleans clusters and still recommend the single pid, multiple containers/processes approach. If you can avoid Orleans and kubernetes and all that, the better. It just adds complexity to this setup.

nottorp•1h ago
What has it taken over this time?
wpollock•1h ago
> The cgroup2 file system is now mounted with the "memory_hugetlb_accounting" mount option, supported since kernel 6.6.

> Required minimum versions of following components are planned to be raised in v260:

* Linux kernel >= 5.10 (recommended >= 5.14),

Don't these two statements contradict each other?

blucaz•18m ago
It gracefully falls back if the new option is not available at runtime
vaxman•1h ago
The downside of drawing the interest of Brewsters (https://youtu.be/fwYy8R87JMA) in Linux.

v259? [cue https://youtu.be/lHomCiPFknY]