frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Axios compromised on NPM – Malicious versions drop remote access trojan

https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-t...
720•mtud•6h ago•233 comments

Ollama is now powered by MLX on Apple Silicon in preview

https://ollama.com/blog/mlx
226•redundantly•5h ago•101 comments

Artemis II is not safe to fly

https://idlewords.com/2026/03/artemis_ii_is_not_safe_to_fly.htm
300•idlewords•6h ago•187 comments

Universal Claude.md – cut Claude output tokens

https://github.com/drona23/claude-token-efficient
293•killme2008•7h ago•114 comments

Google's 200M-parameter time-series foundation model with 16k context

https://github.com/google-research/timesfm
102•codepawl•3h ago•50 comments

Fedware: Government apps that spy harder than the apps they ban

https://www.sambent.com/the-white-house-app-has-huawei-spyware-and-an-ice-tip-line/
559•speckx•14h ago•184 comments

Do your own writing

https://alexhwoods.com/dont-let-ai-write-for-you/
530•karimf•20h ago•188 comments

We're Pausing Asimov Press

https://www.asimov.press/p/pause
23•bookofjoe•23h ago•3 comments

GitHub backs down, kills Copilot pull-request ads after backlash

https://www.theregister.com/2026/03/30/github_copilot_ads_pull_requests/
180•_____k•3h ago•102 comments

RamAIn (YC W26) Is Hiring

https://www.ycombinator.com/companies/ramain/jobs/jezgwo5-ai-ml-research-engineer
1•svee•2h ago

Clojure: The Documentary, official trailer [video]

https://www.youtube.com/watch?v=JJEyffSdBsk
184•fogus•4d ago•15 comments

Good CTE, Bad CTE

https://boringsql.com/posts/good-cte-bad-cte/
28•radimm•1d ago•9 comments

Android Developer Verification

https://android-developers.googleblog.com/2026/03/android-developer-verification-rolling-out-to-a...
247•ingve•10h ago•250 comments

Turning a MacBook into a touchscreen with $1 of hardware (2018)

https://anishathalye.com/macbook-touchscreen/
316•HughParry•13h ago•147 comments

How to turn anything into a router

https://nbailey.ca/post/router/
671•yabones•19h ago•230 comments

Mr. Chatterbox is a Victorian-era ethically trained model

https://simonwillison.net/2026/Mar/30/mr-chatterbox/
46•y1n0•6h ago•24 comments

Oscar Reutersvärd (2021)

https://escherinhetpaleis.nl/en/about-escher/escher-today/oscar-reutersvard
32•layer8•1d ago•2 comments

Show HN: Free AI Coding Skills for Rails

https://www.railsreviews.com/skills
7•julianrubisch•1h ago•2 comments

Bird brains (2023)

https://www.dhanishsemar.com/writing/bird-brains
317•DiffTheEnder•19h ago•200 comments

OpenGridWorks: The Electricity Infrasctructure, Mapped

https://www.opengridworks.com
107•jonbraun•11h ago•13 comments

One of the largest salt mines in the world exists under Lake Erie

https://apnews.com/article/cleveland-salt-mine-winter-road-0daf091e3d56f65766bcf6a597683893
19•1659447091•2d ago•14 comments

Agents of Chaos

https://agentsofchaos.baulab.info/report.html
107•luu•3d ago•13 comments

CodingFont: A game to help you pick a coding font

https://www.codingfont.com/
410•nvahalik•17h ago•202 comments

Incident March 30th, 2026 – Accidental CDN Caching

https://blog.railway.com/p/incident-report-march-30-2026-accidental-cdn-caching
55•cebert•7h ago•19 comments

Vulnerability research is cooked

https://sockpuppet.org/blog/2026/03/30/vulnerability-research-is-cooked/
178•pedro84•14h ago•120 comments

Cherri – programming language that compiles to an Apple Shortuct

https://github.com/electrikmilk/cherri
304•mihau•3d ago•59 comments

Sony halts memory card shipments due to NAND shortage

https://www.techzine.eu/news/devices/140058/sony-halts-memory-card-shipments-due-to-nand-shortage/
49•methuselah_in•3h ago•15 comments

Unit: A self-replicating Forth mesh agent running in a browser tab

https://davidcanhelp.github.io/unit/
33•DavidCanHelp•4d ago•2 comments

Researchers find 3,500-year-old loom that reveals textile revolution

https://web.ua.es/en/actualidad-universitaria/2026/marzo2026/23-31/ua-researchers-find-3-500-year...
112•geox•3d ago•14 comments

£5M Funding for supply chain security innovation in UK

https://apply-for-innovation-funding.service.gov.uk/competition/2421/overview/3d6991fa-73b2-48c0-...
4•anonhaven•14m ago•0 comments
Open in hackernews

The RISE RISC-V Runners: free, native RISC-V CI on GitHub

https://riseproject.dev/2026/03/24/announcing-the-rise-risc-v-runners-free-native-risc-v-ci-on-github/
143•thebeardisred•4d ago

Comments

Western0•1d ago
Perfect for snooping on other people’s projects. No one in their right mind would touch this. It’s cheaper to buy the board yourself.
mhitza•1d ago
It seems to be a Linux Foundation project, my trust is implicit higher than what you're claiming. Why wouldn't you trust them?

It's also aimed at open-source projects, for free, with the intent to improve RISC-V support.

heliumtera•1d ago
Why would you trust anyone offering free candies?
PufPufPuf•1d ago
Depends on the context. I'd trust the lady giving free candy samples in a candy store. The incentive is clear here, too: RISC-V needs adoption.
ctz•1d ago
people better not be snooping on my public open source projects!
LeFantome•1d ago
RISE is supported by many legit companies. Stealing is for sure not the intent.

The idea is to promote testing on RISC-V and to eliminate lack of hardware for being the reason not to. Obviously, low budget projects and Open Source are the primary targets. Commercial products can afford real RISC-V hardware.

This is who you are trusting: https://riseproject.dev/members/

jubilanti•1d ago
Yes, what a devious plan: give open source software projects a free CI service so you can... read their open source software code?
downrightmike•1d ago
diabolical
throawayonthe•1d ago
devious
sethops1•1d ago
duplicitous
jrave•1d ago
dastardly
IshKebab•1d ago
Very good move. Hopefully GitHub won't ruin this with their CI charging changes.
woodruffw•1d ago
I’m a fan of this, although I’m concerned about the security/trust model: using a third-party CI orchestrator on top of GHA means trusting them with all of your secrets, potentially sensitive logs, etc. Those concerns are somewhat lessened in the context of public repos, but even public repos contain nontrivial workflows that use configured secrets.
stabbles•1d ago
My experience with RISC-V so far is that the chips are not much faster than QEMU emulation. In other words, it's very slow.
OsrsNeedsf2P•1d ago
Oftentimes slow is fine, when the work is parallel and the hardware is cheap
pelasaco•1d ago
which, sadly, isnt the case right now
dlcarrier•1d ago
It is the case for embedded microcontrollers. An ESP32-C series is about as cheap as you can get a WiFi controller, and it includes one or more RISC-V cores that can run custom software. The Raspberry Pi Pico and Milk-V Duo are both a few dollars and include both ARM and RISC-V view. with all but the cheapest Duo able to run Linux.
brucehoult•44m ago
All Duos run Linux.
LeFantome•1d ago
RISC-V microcontrollers are inexpensive but “application” processors will be expensive until volumes increase.

Performance will get “good enough” over the next 2 years. Prices will drop after that.

detaro•1d ago
That the "good enough" SoCs will be arriving "over the next 2 years" is what the RISC-V advocates have told us for quite a few years now.
LeFantome•22h ago
Well, part of “good enough” is features. The RVA23 profile was ratified a few months ago and the first chips are appearing now. That brings RISC-V to feature parity with X86-64 and ARM, including things like vector instructions and virtualization. QUbuntu 26.04 is compiled to require RVA23. So, the RISC-V advocates got that part right. Of course, the other side of “good enough” is performance.

The SpacemiT K3 has the multi-core performance of a 2019 MacBook Air and higher AI performance than an M4. That is better multi-core than an RK3588. If it were less expensive, the K3 would already be good enough for many people.

Alibaba has the C930 which is faster than the K3. We will see if it gets released to the rest of us.

Tenstorrent will release a chip in a few months that is twice as fast as the K3.

The recently announced C950 is supposed to be even faster but will be a year or more.

Of course, “good enough” is subjective but my statement was based on the above.

But you are right that there have been some false starts.

The SG2380 was just as fast as K3 and was ready to go two years ago. TSMC refused to manufacture it over US sanctions.

Ventana was about to release a very fast RISC-V chip but Qualcomm bought them.

Rivos was very close to releasing a RISC-V GPU but Meta bought them.

But even without these high-end chips, RISC-V is enjoying great success. It is taking over the microcontroller space. And billions of RISC-V cores are shipping.

LeFantome•14h ago
I should have replied differently.

“Good enough” here was meant to mean good enough to sell more, and therefore to drop prices.

That is already happening. It just needs to happen more. And I think it will. If you don’t find the RISC-V boards of 24 months from now “good enough”, that is ok with me. I just want them to get cheaper.

The other thing that is happening on that front is that microcontrollers are getting more powerful and staying inexpensive. You can get RISC-V microcontrollers today with similar performance to the original Raspberry Pi and with things like WiFi, Bluetooth, and USB. They are crazy cheap and there are many projects for which they are now “good enough”. And, of course, they keep getting better.

LeFantome•1d ago
That has been the case so far but is changing this year.

The SpacemiT K3 is faster than QEMU. Much faster chips are expected to release over the next few months.

I mean things like the Milk-V Pioneer were already faster but expensive.

One thing that has been frustrating about RISC-V is that many companies close to releasing decent chips have been bought and then those chips never appear (Ventana, Rivos, etc). That and US sanctions (eg. Sophgo SG2380).

mshockwave•1d ago
One thing I observed is that RVV code is usually slower in QEMU
brucehoult•46m ago
Of course it is. Emulating parallel operations on 4 or 8 or 16 or 32 elements one at a time using scalar instructions is expected to be slow.
k_roy•1d ago
Same experience here.

At least for SBCs, I’ve bought a few orange pi rv2s and r2s to use as builder nodes, and in some cases they are slower than the same thing running in qemu w/buildx or just qemu

wyldfire•1d ago
Some of that could be related to the ISA but I'm hoping that it's just the fact that the current implementations aren't mature enough.

The vast majority of the ecosystem seems to be focused on uCs until very recently. So it'll take time for the applications processors to be competitive.

LeFantome•1d ago
The RISC-V ISA can be fast.

Tenstorrent Ascalon, expected later this year, is expected to be AMD Ryzen 5 speeds. Tenstorrent hopes to achieve Apple Silicon speeds in a few years.

The SpacemiT K3 is about half as fast as Ascalon and available in April. K3 is 3-4 times faster than the K1 (previous generation).

This should give you an idea about how fast RISC-V is improving.

adgjlsfhk1•1d ago
I'd be pretty surprised if Ascalon actually hits Zen 5 perf (I'm gessing more like Zen2/3 for most real world workloads). CPU design is really hard, and no one makes a perfect CPU in their first real generation with customers. Tenstorrent has a good team, but even the "simple" things like compilers won't be ready to give them peak performance for a few years.
snvzz•1d ago
>I'd be pretty surprised if Ascalon actually hits Zen 5 perf

Certainly not in the Atlantis SoC, due to the older fab node used. Zen2-3 territory IPC is the expectation, with lower clocks than these actually got.

By the time they have the necessary scale to use the best fabs, they'll be tapping out something newer than the Ascalon that went into Atlantis.

Tenstorrent expects to reach parity with the best x86 and arm chips by 2028.

brucehoult•40m ago
All RISC ISAs are basically the same thing as far as compiler optimisation is concerned, and there is 40 years of work into that already.

I can't see any reason why the father of Zen and the designer of the M1 can't make a core for the simpler RISC-V ISA with basically the same (or better) µarch than the M1.

pjmlp•1d ago
Assuming AMD, Intel, ARM, Apple in a few years haven't released new CPUs, otherwise the difference is the same as today.
snvzz•1d ago
The arrival of the first RVA23 chips, which is expected next month, will change the status quo.

Besides RVA23 compliance, these are dramatically faster than earlier chips, enough for most people's everyday computing needs i.e. web browsing, video decoding and such. K3 got close to rpi5 per-core performance, but with more cores, better peripherals, and 32GB RAM possible, although unfortunately current RAM prices are no good.

And it'll only get better from there, as other, much faster, RVA23 chips like Tenstorrent Alastor ship later this year.

snvzz•1d ago
s/Alastor/Atlantis/g.

Alastor is something else; a core from Tenstorrent that is considerably smaller than Ascalon.

ncruces•22h ago
I've added it, to one of my repos, and yes, it's slower than using emulation.

Particularly for my use case, Go cross compilation, QEMU and binfmt work really well together.

Still, for some things, it's nice to test on actual hardware.

Here's a workflow so you can see both approaches working: https://github.com/ncruces/wasm2go/blob/main/.github/workflo...

camel-cdr•1d ago
Sadly still on quite old hardware, with no RVV. Hopefully scaleway will have some newer servers in the future and this can be simply updated to the new devices.
LeFantome•1d ago
You can get RVV instances from Saleway.
camel-cdr•1d ago
Oh, cool, I didn't see them on the website. (https://labs.scaleway.com/en/em-rv1/)
boredatoms•1d ago
..is this RVA23?
LeFantome•1d ago
Not yet

RV64GC (C910 cores)

singpolyma3•1d ago
GitHub only :(