Hacker News Reader

schainkson Replit rebuilt its sandbox engine with microVMs

My read on this is they re-invented the OTP supervision tree, process isolation, hibernation, and actor-to-actor message passing, but had to push the isolation boundary all the way down into Ring -1 (KVM/Cloud Hypervisor) and customized Linux tinyconfig kernels because their "actors" are actively trying to jailbreak the hypervisor.

Is that about right?

schainkson WTF Ubuntu?

Not everyone using Ubuntu is on enterprise support, right?

The entire OS is open source. I've lost count of the number of times in my career when something like this has happened and even with the luxury of enterprise support, we couldn't wait. Just find a fast way to patch until support shows up with an official solution.

Amazing I keep getting downvoted for a comment like this on an OSS Linux distribution that you can fix yourself live in production without someone getting in your way.

schainkson Launch HN: Momentic (YC W24) – Agents that catch bugs by using your app

I like this idea, thanks, Henry!

schainkson Launch HN: Momentic (YC W24) – Agents that catch bugs by using your app

What does this do that UAT doesn't do? Sounds like you're combining UAT with gloves-on red teaming and I guess property testing APIs.

schainkson We halved DNS build delay and cut memory use by 85%

They also read like actual human curated content, to boot.

schainkson WTF Ubuntu?

> This “I demand to speak to the manager” energy should be kept out of open source.

This. You are welcome to publish patches and demonstrate how people can fix their own machines out of band with what Ubuntu does. This costs you... 10 minutes with AI help?

While it's easier than ever to complain this year, I'm patching all the things while on a walk or not at my computer, it's great!

Welcome to the world of tomorrow

schainkson Ask HN: Which TV do you recommend for privacy?

Thread-adjacent question: who is running REA against these tv firmwares so anyone can root their TV?

schainkson CVE 10.0: CVE-2026-112816, Canonical LXD, no emudhra required

You’d be surprised who is running LXD at scale. OVH is one big name.

schainkson Cisco gives engineer unlimited AI tokens to rewrite legacy code

It’s been a while, but configuring their hardware manually in 2016 was bug ridden ridiculousness. Awful UI/UX. Their own techs had specific field notebooks for our make and firmware version that we couldn’t access unless persuaded, detailing various land mines to avoid while working. Literal “don’t click these things in this order” kinds of notes.

A critical security firmware update once brought down redundant pair of firewalls we used because the bug didn’t manifest until a counter buffer overflowed months after application. Three hours into the outage the tech power cycles the thing and our services came back to life.

Cisco is only doing this because some other alternative is more expensive. They had more than a decade to get started.

schainkson Geist Serif

Okay, the special dot choices are pretty pretttttty nify!

This font renders like trash on my 9 year old widescreen, but I am sure it will look gorgeous on a MBP display. Guess I found my excuse to upgrade!

schainkson CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

DHH and team are writing Omarchy components in Rust when possible. I was playing on that in my now downvoted comment.

Obviously Omarchy's kernel, Wayland, and the Hyprland compositor are not Rust and work just fine. If you've seen any of DDH's public speaking, he's willing to burn tokens to Rust all the things, don't tempt him! That was the joke, people.

I am pleasantly surprised to be daily driving Omarchy with minimal friction, by the way. For a relatively new Linux OS, this is no small feat.

schainkson CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

Don't tempt DHH. Omarchy works WAY better than expected, and made my 2017 MBP very usable again.

schainkson CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation

  Debian patched it up
  Red Hat says "Fix is deferred"
  Pull the network plug

schainkson Google Search is now less than half of Alphabet’s revenue

This is exactly what the ad network is meant to do, and their ability to monetize this ability means competitor's ads (like meta) become less valuable.

schainkson Wealth Inequality in America drawn to scale

An awful take from someone who clearly hasn’t studied California itself.

Around 17% of CA residents live below the poverty line, which means MILLIONS of adults that are not students. Elderly are a significant chunk of that number.

https://www.ppic.org/publication/poverty-in-california/

https://calbudgetcenter.org/resources/young-californians-fac...

schainkson Hackers activate automatic defrosting in supermarket fridges across Europe

This is the answer.

No one has to answer for an obviously dangerous risk, not even the company? Ship it!!!!!

schainkson Cyberattack halts construction of tunnel between Denmark and Germany

It fuels the “look how the government sucks at doing its job, vote for us to “fix” the government” narrative for whoever they are propping up with money and bot farms.

Any disruption is an opportunity to inject corruption.

schainkson Apple HomeView

Quick show of hands: who would use this to help with cooking hands free or FaceTiming people while doing dishes?

schainkson Show HN: Minigraf – An embedded, bi-temporal graph database in Rust

What are the benchmarks compared to other tools of equal or similar function in this category? How is Minigraf different than Kùzu or CozoDB?

schainkson Show HN: AI search for every photo and every frame of video on macOS

This. Learn all the knobs and dials, too. Useful performance gains to be made by tuning the right settings.

schainkson Shimano Bicycle Museum Review

Spa World in Osaka is also worth a visit if you're in the area. For reasons beyond my understanding, Osaka happens to have _several_ bars serving ridiculously good absinthe cocktails.

schainkson SlutCon

Great read, but I'm a little puzzled.

My takeaway is SlutCon has successfully re-skinned The Argument Clinic. (https://www.youtube.com/watch?v=TpQlyUjp3vM). Someone enters a commercialized, scheduled space to pay for a raw, spontaneous human experience, only to get trapped in an infuriating debate over the technical definition of the experience itself.

Or am I missing a read-between-the-lines that this event is really to facilitate successful Autistic people in flirting, dating, and relationships?

schainkson AI needs $6T in annual revenue to justify data centre boom

Already built!

schainkson Clef: Open-source decision models, and new RL fine-tuning platform

AMAZING, thanks, Cloudflare!

schainkson Gemini 4 Argon

My use of Gemini recently makes it seem like it's almost bored with the requests being asked of it. It once offered to reverse engineer some obscure controller for an HVAC system for me, unprompted, only because it had trouble finding the manual pdf from a google search.

schainkson America.gov

Yes, but what AI powers the backend right now? Grok? Who's in charge of that and being paid for compute?

schainkson AI needs $6T in annual revenue to justify data centre boom

No, they are dropping expensive people for cheap people who can steer AI. That will reduce their spend by quite a bit.

schainkson AI needs $6T in annual revenue to justify data centre boom

I'm de-FAANG-ing my life. One AI subscription can do the lift of a lot of other subscriptions when it comes to putting OSS tools on my homelab, and I truly don't need _everything_ when I'm on the go.

schainkson Show HN: PaperMono, e-ink fridge magnet shopping list with mobile web page

A gentle breeze from a running child unsticks any sticky note we have anywhere, how do you deal with that?

schainkson Show HN: PaperMono, e-ink fridge magnet shopping list with mobile web page

This is amazing! Please make a 10" or 12" version that can sit on a countertop. I want an at-a-glance food prep schedule that's always on, and am using a spare kindle to do this instead.