frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Linux 7.3 Released

https://lwn.net/Articles/1101143/
111•cjd8•1h ago•42 comments

Rabbits were a medieval royal luxury in England until the Black Death

https://phys.org/news/2026-10-rabbits-medieval-royal-luxury-england.html
78•samizdis•1d ago•58 comments

Hybrid Reasoning Agents: LLM agents that think in latent space, act through text

https://arxiv.org/abs/2610.18861
382•allinonai•12h ago•186 comments

William Gibson and the trademarking of cyberspace

https://colo.to/cyberspace.html
176•Eric_Gullichsen•9h ago•61 comments

There's never been a better time to go into math (by: 3blue1brown) [video]

https://www.youtube.com/watch?v=LKrwhjOI8Nc
357•mdp2021•1d ago•422 comments

How to Train Your Robot

https://www.construction-physics.com/p/how-to-train-your-robot
15•crescit_eundo•3d ago•3 comments

If you don't run your own LLM proxy, how do you know whats going on?

https://jrdsgl.com/if-you-dont-run-your-own-llm-proxy-how-the-fuck-do-you-even-know-whats-going-on/
158•amrrs•11h ago•97 comments

Someone behind the software

https://karrisaarinen.com/posts/someone-behind-the-software/
436•tosh•16h ago•160 comments

Tmux and Claude Code: Sessions, Send-Keys, and the Ceiling

https://crystl.dev/guides/tmux-for-ai-agents/
16•ankitg12•3h ago•6 comments

Laptop Based on 6502 CPU

https://www.maddox.pro/?p=448
116•nanochess•3d ago•50 comments

Superlite: A Faster Alternatie to Superpowers

https://contextfirst.blog/superlite-hand-an-agent-a-spec/
87•iheatuchriswogu•6h ago•33 comments

Dogs seem to agree with humans that 'bouba' is round and 'kiki' is spiky

https://www.sciencealert.com/dogs-seem-to-agree-with-humans-that-bouba-is-round-and-kiki-is-spiky
228•gmays•1d ago•133 comments

RepRapMicron

https://github.com/VikOlliver/RepRapMicron/wiki
388•RobotToaster•19h ago•64 comments

Lant – The Forgotten Resource

https://sites.udel.edu/materialmatters/2018/04/11/lant-the-forgotten-resource/
4•kreyenborgi•3d ago•1 comments

Flatpak – An Insecurity Nightmare

https://oro.gay/posts/flatpak-an-insecurity-nightmare/
26•jannesan•3h ago•16 comments

The DNS Museum

https://dns.museum
65•zdw•2d ago•9 comments

Free Pascal compiler now supports dynamic packages

https://www.getlazarus.org/dynamic/
161•sysrpl•14h ago•38 comments

How Quickly Can the DoD Rebuild and Recast the Munitions Industrial Base?

https://www.csis.org/analysis/how-quickly-can-dod-rebuild-and-recast-munitions-industrial-base
58•gmays•9h ago•64 comments

Verisign .com Domain Name Registry Consumer Class Action

https://www.hbsslaw.com/cases/verisign-com-domain-name-registry-consumer-class-action
95•greyface-•4h ago•42 comments

Show HN: WhatsApp MCP running free on Cloudflare

https://github.com/finereli/whatsapp-mcp
104•zoozla•11h ago•49 comments

PalmOS Lemmings

https://github.com/ardiri/palmos-lemmings
125•memalign•15h ago•32 comments

How Postgres DELETE can actually scale

https://www.dbos.dev/blog/scaling-deletions-in-postgres
13•KraftyOne•3d ago•1 comments

DeepSeek V4.1 Flash 1017 (Max)

https://artificialanalysis.ai/models/deepseek-v4-1-flash-1017
131•theanonymousone•4h ago•43 comments

I built a programming language that LLMs can't use

https://blog.picheta.me/post/killswitch-lang/
179•dom96•1d ago•126 comments

One parser, two bugs, many routers: Exploiting Broadcom WiFi across eCos, Linux

https://quentinkaiser.be/security/2026/10/16/one-parser-two-bugs/
77•zoobab•2d ago•18 comments

A new way to think about borrow checking (in reverse)

https://verdagon.dev/blog/reverse-borrow-checking
77•verdagon•20h ago•7 comments

Java sealed classes and exhaustive pattern matching

https://neilmadden.blog/2026/04/24/java-sealed-classes-and-exhaustive-pattern-matching/
166•hnisjafx40•18h ago•129 comments

macOS 15.8.2 Breaks OpenGL

https://developer.apple.com/forums/verify-human/verify.html?next=/forums/thread/850550
253•Audiophilip•17h ago•283 comments

"I'm on a war footing": Terry Tao and the crisis in math

https://www.nytimes.com/2026/10/16/us/math-ai-terence-tao.html
176•vinipolicena•2d ago•338 comments

Open MicroManipulator – A sub-micrometer 3D motion control plattform

https://github.com/0x23/MicroManipulatorStepper
194•_Microft•21h ago•16 comments
Open in hackernews

Linux 7.3 Released

https://lwn.net/Articles/1101143/
110•cjd8•1h ago

Comments

mdspan•58m ago
First time hearing about failfs. Does it have a niche use case or is it just for testing?
degamad•55m ago
Reading the description, looks like a stricter chroot for purely-network applications, maybe?
rustyhancock•51m ago
It looks like it's useful for sandboxing by preventing any possible filesystem movement.

https://docs.kernel.org/next/filesystems/failfs.html

rwmj•47m ago
For sandboxing: https://hackaday.com/2026/08/07/this-filesystem-is-born-to-f...

A process which is chrooted into failfs cannot open new files. It is limited to the set of filesystem file descriptors it already has open (presumably set up before the chroot or inherited into the process from some container runtime).

shevy-java•35m ago
So basically more fine tuned jail controls.

I'd love if chrooting would become easier. In particular a requirement to have bash or a specific shell is annoying; imo a simple REPL should suffice already there. I wrote one that works years ago, need to look into what is all needed for a chroot (I always used bash for this but I'd also want to change to my own shell eventually).

rwmj•30m ago
We wanted capabilities[1]. Instead we get this over-complicated series of system calls with no design consistency that you have to use very carefully, else they can be bypassed (see the list of caveats on the failfs page).

[1] https://en.wikipedia.org/wiki/Capability-based_security

saint-evan•35m ago
Failfs is a pretty cool pseudo-filesystem where every path lookup fails. So if yu place a statically-linked process into failfs with ONLY pre-allocated file-descriptors at process birth, close down unneeded sockets and enforce a default-deny firewall discipline, compromised applications are effectively isolated and unable to access local files or spawn shells during an exploit. An attacker can NOT move adjacently from the exploited process to other parts of the system because to do so they'll need to navigate from root and that would fail since yu set root as failfs and you've got yourself a pure, isolated data-processing pipe that can only interact via the exact file descriptors it was given!!

Unfortunately, yu can't use dynamically-linked apps anyway since failfs would break absolute path resolution loading system libraries.

EDIT:: But I guess yu could put a statically linked app on the socket, wrap it in failfs and gave it proxy requests to a dynamically-linked app process if your app must use something like python.

wpyoga•23m ago
Is it possible to load the dynamic libraries before fork()ing and somehow prevent the path lookup and library loading? This will open up new possibilities for hardened security models.
saint-evan•15m ago
That's a fun idea but take python (very familiar)... It's very deeply dynamic and even if yu run imports at the top of your code yu still have many large libs with lazy code execution baked deep inside their internal functions so that assumes yu actually know what code paths the application will hit later. More importantly this goes in the opposite direction of Python's lazy imports thingy.. basically you've got a bomb and yu wouldn't wanna do that. Also, imagine the startup time for large apps. I'd just put a statically-linked binary in front and proxy back to the dynamically-linked process if I can't rewrite the main app in something like Go or Rust.
pandemic_region
sippingabonedry•52m ago
Linux has an in-kernel SMB server like Solaris? When the hell did this happen?
tecleandor•49m ago
~2021: https://news.ycombinator.com/item?id=28355754
sirnicolaz•50m ago
> This release is a record-breaker on all fronts; it brought in 18,765 non-merge commits from 3,021 developers, 807 of whom were first-time kernel developers.

hopefully without kernel-slops :P good job everyone btw!

colesantiago•30m ago
I believe this is the first vibe coded or slop release of the kernel from Linus using AI.

Update accordingly.

LtdJorge•29m ago
It might be written by the LLM, but I'm pretty sure Linus hasn't vibe coded it. Do you think he won't look at the output and nitpick to death?
sedan_baklazhan•27m ago
There was a recent proof that he did
pandemic_region•17m ago
https://lwn.net/Articles/1100449/

During peer review a race condition was found in his code. Would he have spotted it himself when writing the code manually? Maybe, maybe not. He's only human, and the AI is only AI.

LiamPowell•11m ago
I wonder if humans would have spotted this one if no one knew a LLM wrote it. Obviously it's nearly impossible to test that though.
theden•48m ago
SMB improvements (https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...), I've moved to borg, but depending on how this goes may give time machine another try:

   - Add opt-in Apple Time Machine support

     Implement the AAPL negotiation and related Finder, stream,
     COPYCHUNK, sparse-file, CHANGE_NOTIFY, and RPC compatibility
     required for Time Machine shares, allowing macOS backupd to use
     ksmbd for backups
https://www.phoronix.com/news/Linux-7.3-KSMBD

Still sucks that it has to be reverse-engineered

raverbashing•39m ago
Wait so Time Machine works over SMB? Huh
robin_reala•33m ago
Yep. My household backs up to a Synology NAS via Time Machine: https://kb.synology.com/en-global/DSM/tutorial/How_to_back_u...
tonyedgecombe•32m ago
Works might be a stretch. Every time I hear someone complaining about Time Machine it turns out they are trying to do it over SMB.
egorfine•17m ago
djfergus•9m ago
>ARM

> Device Tree Updates

> Apple platform gains support for M3 Pro, Max and Ultra SoC

Incredible how fast support for Apple silicon is progressing.

•
13m ago
Sorry man I've been out of the loop with the hip crowd for a good while, but is "yu" now a thing like "thru" once was?
saint-evan•11m ago
no biggie... I just like how 'yu' looks. It's an aesthetic.
jack_pp•7m ago
idk if it's just me but deliberately using "yu" instead of "you" is annoying and makes me not really take whatever you say seriously
aa-jv•25m ago
I think this is yet another case where Linus is leading the pack and showing the industry how to adapt to new technology, and indeed, adopt standard best practices for its application.

I'm in the "AI is great!" optimist camp myself, which is how I felt in the very early days of "this little crappy hobbyist Linux kernel thing that'll never go anywhere important" minix-list flamewars.

Once again, Linus demonstrating that those who understand the code, own the code.

outadoc•12m ago
"Showing the industry how to adapt to new technology", as in, don't blindly trust whatever the big probability box committed to your repo but actually perform a good code review with the same standards as human-written code?

I think this says way more about the industry being completely out of touch and less about Linus leading the pack.

teekert•28m ago
Please stop with the "AI assisted development" = "Vibe coding slop" narrative. It comes across as pretty dumb nowadays. Please experiment with LLMs, find your way (or don't, but), learn to talk about it in an informed way and don't post obviously inflammatory one liners that are essentially just "AI is bad m'kay".

There are intelligent arguments against using AI, your comment is not referring to any of them.

In short: Linus feels responsible for the quality of the Kernel, he expects the same of other devs. He does not care about the tools used to generate the code. He (or some other human) will call out submitted slop, whether LLM generated or human generated.

amelius•27m ago
Is Linus still checking every commit?
Hendrikto•17m ago
That‘s what subsystem maintainers are for.
cjd8•13m ago
Only if he finds something odd in the pull request summary.
For like 15 years.
teekert•37m ago
Over my life I have found that with any Apple technology it may work great with anything outside Apple's control... Until it doesn't, usually out of nowhere.

My father is mostly on Apple and tries to use his iPad as a PC, ie with files and "the filesystem", he tries to get out of using extra iCloud for pictures (using Proton, or he asks me about Immich, or he wants to use an external HDD, or use Synology Photos and backup). He's mostly on the iPad + keyboard because it's a nicely managed device update-wise and "what I can install"-wise, virus-wise.

But I recent told him: Just give up. Buy (rent!) the storage, you are too depended on me, there is always something with the non-Apple solutions. Yes, your iTunes library is a mess on the filesystem, just don't look at it through anything else than "Music". Yes, Proton Drive eats 400 GB of your iPad storage now, I don't know how to trim that regularly. I'm sorry, it's either Linux and I can help set some things up, or full Apple. Choose. His current mixed, "trying to get best-of-both-worlds", approach is just pure unexpected pain, every time again.

Edit: I also have an iPad, it does work for me, but where my father is trying to use his iPad as a central, primary device (the hub), for me it is a client (spoke) of my own infra. Apps get access to information and I never use Apple services for anything. So indeed, Immich, Proton, Home Assistant, government and banking apps, etc. My iPad is throw-away: If it dies, it dies... I buy a new one, log into all (self-hosed) services and I'm 100% back up and running. Doing the same for my father is also pain, because his Home Assistant will have issues, or his Immich instance, and it's real work to fix, and he won't tell me for months if it does not work and work piles up. So, I tell him to surrender to Apple... It die a little inside.

amelius•23m ago
I think AI might change that. Reverse engineering has just become a lot simpler and more reliable.
teekert•19m ago
Apple will also use AI to make it at least as painful and as unexpected as before. It's their business model (I have come to believe).

Edit: But good point of course, but I believe it will remain cat and mouse.

Hamuko•29m ago
Gotta say, using SMB with Apple clients is a massive pain in the ass. I imagine a large part of that is just Microsoft cruft, leaving you to deal with limitations designed around Windows. And you don't really have another option after Apple deprecated AFP.
crossroadsguy•10m ago
[delayed]
spwa4•4m ago
Wait ... the linux kernel has an SMB server?