frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Beyond All Reason (Free Total Annihilation Inspired RTS)

https://www.beyondallreason.info
209•mosiuerbarso•4h ago•96 comments

Who Owns Your ATProto Identity? Hint: It's Probably Not You

https://kevinak.se/blog/who-actually-owns-your-atproto-identity-hint-its-probably-not-you
58•kevinak•1h ago•38 comments

(How to Write a (Lisp) Interpreter (In Python))

https://norvig.com/lispy.html
3•tosh•4m ago•0 comments

The case against geometric algebra (2024)

https://alexkritchevsky.com/2024/02/28/geometric-algebra.html
89•Hbruz0•4h ago•65 comments

Commodore Made a Digital Detox Phone That Isn't Dumb

https://www.wired.me/story/commodore-made-a-digital-detox-phone-that-isnt-dumb
25•Audiophilip•2d ago•13 comments

David Ahl's Basic Computer Games Ported to C

https://github.com/proteanthread/bcg
34•theanonymousone•3h ago•12 comments

A 3D voxel game engine written in APL

https://github.com/namgyaaal/avoxelgame
101•sph•7h ago•8 comments

Google Hits 50% IPv6

https://blog.apnic.net/2026/04/28/google-hits-50-ipv6/
288•barqawiz•7h ago•283 comments

Two Qwen3 models on one DGX Spark: the residency math

https://www.devashish.me/p/two-qwen3-models-on-one-dgx-spark
32•devashish86•2d ago•21 comments

Loupe – A iOS app that raises awareness about what native apps can see

https://github.com/mysk-research/loupe
414•Cider9986•1d ago•166 comments

Running MicroVMs in Proxmox VE, the Easy Way

https://taoofmac.com/space/blog/2026/06/18/1845
139•zdw•2d ago•17 comments

Smashing the NIMBYs created modern capitalism

https://worksinprogress.co/issue/how-abolishing-the-stakeholder-state-caused-the-industrial-revol...
17•momentmaker•2h ago•8 comments

Renting a sewing machine from the library

https://www.bbc.com/future/article/20260618-the-weird-and-wonderful-libraries-of-finland
288•sohkamyung•16h ago•162 comments

Slow breathing modulates brain function and risk behavior

https://www.cell.com/neuron/fulltext/S0896-6273(26)00339-9
299•croes•17h ago•83 comments

Zigzag Decoding with AVX-512

https://zeux.io/2026/06/17/zigzag-decoding-avx512/
105•luu•3d ago•21 comments

Epoll vs. io_uring in Linux

https://sibexi.co/posts/epoll-vs-io_uring/
211•Sibexico•16h ago•51 comments

A tale of two path separators

https://alexwlchan.net/2021/slashes/
48•dbaupp•4d ago•16 comments

Developers don't understand CORS (2019)

https://fosterelli.co/developers-dont-understand-cors
275•toilet•14h ago•211 comments

Fossil Fuels Are 40% of Freight Shipping Tonnage, but Half Its Fuel Use

https://cleantechnica.com/2026/06/16/shipping-freight-energy-fossil-cargo/
9•choult•57m ago•4 comments

Windows UI evolution: Clicking an unassociated file

https://movq.de/blog/postings/2026-06-20/0/POSTING-en.html
99•jandeboevrie•9h ago•66 comments

15-minute at-home Lyme disease tick test

https://www.bostonglobe.com/2026/06/17/business/lyme-disease-tick-test/
167•bookofjoe•3d ago•121 comments

Rare medieval bookmark exceeds expectations at auction

https://www.thehistoryblog.com/archives/76314
29•speckx•4d ago•8 comments

SMPTE Makes Its Standards Freely Accessible

https://www.smpte.org/blog/smpte-makes-its-standards-freely-accessible-openingstandards-library-t...
276•zdw•22h ago•93 comments

DOS Game "F-15 Strike Eagle II" reversing project needs DOS test pilots

https://neuviemeporte.github.io/f15-se2/2026/06/20/needyou.html
268•LowLevelMahn•1d ago•69 comments

UHF X11: X11 Built for VisionOS and Apple Vision Pro

https://www.lispm.net/apps/uhf-x11/
218•zdw•22h ago•49 comments

Unauthorized alert sent to cell phones across Brazil

https://www.cnn.com/2026/06/20/americas/brazil-hackers-unauthorized-alert-latam
169•zdw•19h ago•124 comments

Proportional-Integral-Derivative Controllers

https://en.wikipedia.org/wiki/PID_controller
58•dhorthy•1d ago•29 comments

Cosmodial Sky Atlas

https://frankforce.com/cosmodial-sky-atlas/
15•surprisetalk•4d ago•4 comments

Guide to the TD4 4-bit DIY CPU

https://www.philipzucker.com/td4-4bit-cpu/
56•andrewstuart•2d ago•6 comments

Alice is impatient

https://brooker.co.za/blog/2026/06/19/waiting.html
133•birdculture•19h ago•36 comments
Open in hackernews

Who Owns Your ATProto Identity? Hint: It's Probably Not You

https://kevinak.se/blog/who-actually-owns-your-atproto-identity-hint-its-probably-not-you
58•kevinak•1h ago

Comments

verdverm•1h ago
Probably doesn't matter for the "40M+ users", most of them have churned at this point and growth is negative. This is good critique for the next iteration of open social protocols, but fundamentally atproto did not fail because of technical reasons. The next iteration should make privacy the default and core to protocol, and be very mindful of how the leadership / social dynamics played out.
singpolyma3•1h ago
Based on all the traffic and development activity I'm not sure on what basis one would say "failed"
ftfish•51m ago
Source?

What I see here doesn't look good.

https://bluefacts.app/bluesky-user-growth

Never mind the pivot to reddit.

https://www.cnbc.com/2026/06/04/bluesky-twitter-rival-reddit...

adithyassekhar•50m ago
What’s the definition of success here? Instagram like user counts?
bikelang•29m ago
Arguing that success is purely about the ultra high numbers seems to miss the forest for the trees. Is HN a failure because it did not reach the level of DAU as Reddit? The quality of discussion and community here is certainly substantially higher. I feel the same about Mastodon and Bsky vs Twitter. I’ll take community I actually want to engage with over sheer numbers any day.
pessimizer•40m ago
https://bsky.jazco.dev/stats
jacobgold•34m ago
Bluesky / AT is the most successful open social network in history and the only one to become culturally significant. It has been adopted by presidents, celebrities, journalists, and mainstream users.

Bluesky has sustained 1M+ daily active users and 3M+ monthly active users for roughly two years, and there is no obvious reason to believe it will fall substantially below that number.

It is also in the process of adding (decentralized) subcommunities, which I expect to have a huge growth impact.

scyclow•1h ago
This is where non-financial use of blockchain could really shine, IMO. Self-sovereign identity management with a smart contract-based process for recovering ids if keys get lost or hacked. Blockchains are pretty out of favor these days, but I really don't see a better solution for decentralized identity management.
AndrewStephens•55m ago
What is the incentive for an individual to participate in a non-financial blockchain?

Bitcoin-style blockchains “work” because everyone gets the possibility of a little reward for all the hassle and non-negligible CPU time of being a node.

vid•48m ago
What's the incentive for people to participate in file sharing networks? To some degree it's access to a world of free media (same as access to a world of decentralized identities), but to a large degree it's an interesting hobby/excuse to be interested in tech. Some people have racks of hard drives dedicated to hobbies like this, just because it's interesting and is worthy.
SkiFire13•47m ago
> smart contract-based process for recovering ids if keys get lost or hacked

How would that even work?

TheDong•27m ago
If someone's account gets lost or hacked, the person with the most incentive to own that account is usually the original owner, so just give it to whoever is willing to pay the most, problem solved. We can call it "proof of stake", where you always stake a certain amount to keep owning your account, and when contested, whoever stakes the most gets it.

Poor people don't deserve rights on the blockchain anyway, it's not like they can afford the transaction fees, if they didn't want their account stolen they should have tried being rich, or buying into nearer the top of the pyramid.

Don't worry about people who pass away or lose internet for an extended period, we'll deal with that in v2, when we get "proof of death" and "proof of internet disconnectivity" on the blockchain somehow.

/s if it's necessary

triyambakam•51m ago
What's the evidence for this? I'd be very keen to understand. This looks Claude written which is fine but adds an extra layer of skepticism for me.
Noaidi•50m ago
Centralization is always a trap.

No idea why people have such a hard time joining and supporting the Fediverse.

sheo•48m ago
Because there is no single "default instance that is always a good choice and wouldn't go down randomly because of lack of funding". That's both a strong and a weak side of fedi
webdevladder•45m ago
Higher friction and fragmentation are Fediverse features (not bugs) that give it a different grain. ATProto has different tradeoffs that lead to a different form of social media. I'm glad both exist, and bridging efforts are worth paying attention to for anyone frustrated with the distinctions.
iand•29m ago
How is the fediverse different. Can't the owner of an instance post as you? Can they read all your data stored on their instance and pass it to anyone they want to?
skybrian•46m ago
Most people don’t worry about it for the same reason they don’t worry about GitHub abusing their GitHub account and are even willing to use “login with GitHub” to access their other accounts. Account takeover by a third party is a bigger risk. If you’re concerned about supply chain risks, there are more important concerns than “what if GitHub itself is a bad actor.”

It’s solvable if you’re willing to self-host your PDS.

But I’m skeptical of the attempts to make a PDS an “everything account.” Why should you use the same PDS for your social media posts and your git repos and your blog posts? Seems like we need to get better at locking things down in practice before that kind of centralization?

NetOpWibby•26m ago
This "social coding" thing Tangled has going on is cool but I don't want it. I hear they're figuring out private repos but for me, I don't want the same account I use for social for my code.

I'm probably in the minority though.

jacobgold•40m ago
One of the core features of AT is the ability to move your repo hosting provider (PDS) at any time. This is the "data portability" problem that ActivityPub never solved.

Bluesky Social, PBC runs a PDS service (bsky.social) for free, there are a number of free public alternatives, and thousands of users self-host.

Self-hosting your own PDS can be done with Raspberry Pi or $5/mo VM and requires very little work. It runs in a Docker container with SQLite.

https://github.com/bluesky-social/pds

opem•27m ago
Except it isn't as straightforward as most people would think. The last time I checked this, I think there were some issues with Bluesky app view and it didn't show accounts from a self hosted PDS
jacobgold•20m ago
You may have seen a temporary bug.

It's completely straightforward and it works. Tens of thousands of users are doing it successfully.

https://blue.mackuba.eu/stats/

mdasen•23m ago
You have the ability to move, as long as Bluesky Social PBC allows it.

They hold the keys for your DID. If they don't allow you to move to another PDS, you can't move. The original theory was that you'd hold the private keys, but that's something that would hugely limit adoption so they decided to hold the keys themselves.

In terms of moving your backlog of posts to a new server, part of the issue is liability (not merely legal liability, but reputational as well). When you have a user on your platform and they're posting stuff, you're moderating them in real time. If they turn out to be a horrible troll, you've get the reports. Let's say a horrible troll has been on EvilServer and EvilServer has been ignoring the reports against them. They now want to move to your GoodServer and bring all their post history with them. As an admin of GoodServer, you can't see that everyone has been reporting this troll for years. They're now moving over lots of horrible, inflammatory, potentially illegal posts to your server.

rbren•39m ago
Who owns your domain name? Hint: it’s probably not you. Your hosting provider could take down your domain, or even steal traffic and direct it to their own IPs
PunchyHamster•33m ago
But without private keys they can't pretend to be the same you. There is a very big difference here.
chuckadams•22m ago
Right, if Bluesky ever does do something hinky with your PDS, the operation will be signed with their key and persisted in the operation log which they're unable to touch. You can outright remove Bluesky's key if you want, though I think that only works within some number of days of creating it.
opem•32m ago
that is why you have did:plc in ATProto but that doesn't resolve the concerns raised in this article.
handoflixue•29m ago
Can you move a DNS record AND make it look like I signed off on it?

The author's concern seems to be more focused on impersonation

jimmydoe•38m ago
It seems most ppl who dislike X has already settled, a small amount moved to DeSo like atp or ap, most just stayed or went offline. Unless China GFW magically collapsed, there seems no reason ATProto user base will continue to grow. So, when will the monetization/enshitification phase begin?

I'm asking this not bc I like enshitification, but the app view design seems such a perfect fit for user data mining/targeting, that it's hard to believe it was not part of design consideration in day one.

theamk•30m ago
Is author new at the whole web thing? Yes, people trust remote web servers. Yes, if you link multiple apps to an identity server (be it atproto, google, or self-hosted OpenID server), and your identity server is compromised, attacker will be able to impersonate you or lock you out.

This is just how the web works, and there is no easy around it without losing features people care about. Sure, you can do client-side encryption and pretend serve can't see the plaintext, but it's just a theatre, see Hushmail incident for example.

And having people export uber-key by default is pretty terrible idea. Sure, allow advanced users (like post author) to do it. But for the common person, the exported key is just another way to get account compromised, via malware or backup provider hacking. Or if they are not backing up stuff, then the key will get lost next time they upgrade.

noname120•27m ago
AI fluff
opem•13m ago
and what makes you say that?
Zopieux•10m ago
It has all the tells. There are websites which list them, please search "LLM tropes".
Zopieux•11m ago
So annoying to read. Meanwhile, the key information ("backup key with higher priority") is mentioned in a sentence without any kind of elaboration or link to some follow-up/how-to.
opem•21m ago
Both nostr and atp sucks at key management imo. The Farcaster network does a good job here with their chain of trust model and a smart contract on etherium blockchain to recover identities in case of losing access to a private key. Ironically its also the blockchain aspect of Farcaster for which I never tried it.
Muromec•9m ago
So does a CA issuing my certificate, but there is some oversight in what they do.
chuckadams•19m ago
You can add your own keys to your DID, and IIRC you can even remove bsky's keys within a given timeframe (days).
jacobgold•16m ago
You can also opt for a did:web identity using your own domain in which case did:plc is irrelevant to you.

https://atproto.com/specs/did