24,350 karma · joined December 27, 2014
Some of the things that seemed like they'd cut out lazier bots/scripters involved browser fingerprinting that I didn't want to yet have to deal with disclosures or approval for. But also even some of these browser fingerprinting things were disable-able via flags when you start up Chrome or whatever.
I think what would work overall is to track all requests for a pattern of page access and start blocking other systems that are part of that pattern. But that also wouldn't account for like... landing on the front page of HN, which happens not infrequently.
All of this is aside from per-IP or per-user proof of work. Whenever someone lands on a more expensive page I make the browser do proof of work and store it in a cookie, unique to the IP or user. (Signed in users don't have to do proof of work). This is a perfect solution except for the IP rotation I'm talking about above.
edit: ah also, I don't do SSL termination so can't spot the SSL configuration. But Cloudflare does. And all of this is even after Cloudflare paid bot traffic systems are in place.
edit 2:
> tiny percentage of bots will still get through but the load becomes much more manageable.
The load is not the problem. It's only at most a few bot hits per second. I'm just having trouble removing bot attribution from view counts.
I could build something more complex to discover the patterns, or use Turnstile maybe. I'm not really sure at the moment.
It's an extremely early project but it's been helping me out a bunch already. Would love to hear your bug reports or requests if you try running it on your codebase.
[0] https://theconsensus.dev/p/2026/06/27/the-feature-in-oxcaml-...
* I think you can get this in Clang and maybe GCC with `__attribute__((nonallocating))` though.
As far as I'm aware, Jepsen solely focuses on correctness (which is more than enough for someone to do!), not performance.
https://duckdb.org/2025/07/04/ducklake-02.html
https://ducklabs.com/news/2024/06/03/duckdb-version-100-rele...
https://neovim.io/doc/user/dev_arch
https://www.twelvelabs.io/blog/%EB%B9%84%EB%94%94%EC%98%A4%E...
I haven't yet had time to write it up on The Consensus. So here are some findings you can take or leave.
Configuration CPU s Mem MiB Median Matched Errors
/page (peak) page (of 40)
Chrome, default flags 2.31 1,229 4.4s ref 0
Chrome, tuned 1.98 1,244 3.1s 40 0
Chrome, tuned + block all trackers 1.31 1,338 2.2s 37 0
headless-shell, today's settings 2.30 748 3.9s 39 0
+ stop at network idle 2.16 772 2.6s 39 0
+ block ads/analytics 1.79 748 2.1s 39 0
headless-shell, tuned 1.67 723 2.1s 39 0
headless-shell, tuned + no frames 1.29 696 1.9s 39 0
headless-shell via Playwright 2.58 805 4.2s 38 0
Firefox via Playwright 6.94 2,270 5.6s 38 0
WebKit via Playwright 4.76 4,125 5.2s 36 0
Lightpanda, default 1.31 540 3.6s 35 4
Lightpanda, tuned 1.04 509 1.3s 35 4
jsdom 2.66 2,102 4.3s 4 8
Plain HTTP fetch, no JS 0.002 97 0.05s 0 0The point is to index interesting jobs and articles to 1) help people follow the technologies they're interested in and 2) to help us figure out what to write about.
Articles get tagged with mentioned infrastructure technologies (e.g. Postgres [0] or Lean [1]) and get tagged semantic categories too (e.g. compilers [2] or network protocols [3]). (And all the same tagging happens for jobs as well.) The weekly newsletter [4] features articles and jobs from a few key semantic categories. But you can also build your own RSS feeds or email watchlists for whatever you're interested in.
There's a lot of filtering done to keep out marketing content, listicles, etc. And checking AI tells is the next stage of that.
Limiting to only good quality articles lets us build broader intelligence like the ranking of programming languages [5] and databases [6] and helps us figure out which companies are most focused on the technologies and so on.
[0] https://theconsensus.dev/feed.html?q=projects%3DPostgreSQL
[1] https://theconsensus.dev/feed.html?q=projects%3DLean
[2] https://theconsensus.dev/feed.html?q=topics%3D%22Compilers+%...
[3] https://theconsensus.dev/feed.html?q=topics%3D%22Network+pro...
[4] https://theconsensus.dev/weekly.html
I heard this from someone else today too. I'll have to think of a different icon perhaps then.
> It was relaxing to see some minor typos and stylistic awkwardness in this article, I have to be honest.
whoops
https://theconsensus.dev/p/2026/04/16/who-even-uses-jemalloc...
Unless you guys routinely add assertions to libraries I don't see how you would have caught this?
I mean for sure databases should guard against lost writes but how would you have known to add that particular assert?
https://theconsensus.dev/p/2026/03/12/mojos-not-yet-python.h...
Doesn't 3PC require all nodes to agree, not just a majority?
On the other hand, as a corporate backer for Zig, TigerBeetle is definitely a big deal.
But in terms of exemplary and imitable projects in the ecosystem I would think something like Ghostty is the safer label for "flagship".
const std = @import("std");
fn makeBuffer(n: usize) ![]u8 {
return std.heap.page_allocator.alloc(u8, n);
}
Here are a few examples from the last release of Bun before the rewrite into Rust.https://github.com/oven-sh/bun/blob/bun-v1.3.14/src/install/...
https://github.com/oven-sh/bun/blob/bun-v1.3.14/src/shell_pa...
The allocator via function parameter is only a convention and only even one convention. It is certainly a strong convention (throughout the standard library anyway) but it is just a convention.
Recent Rust also has the ability to pass allocators but that's the same thing. And even if you use no_std in Rust you might call into some other library's no_std function that allocates and you wouldn't be able to grep for that.
https://supabase.com/blog/orioledb-launch
And they continue to work on it.
https://theconsensus.dev/p/2026/05/18/serving-files-three-wa...