GotaTun -- Mullvad's WireGuard Implementation in Rust

https://mullvad.net/media/uploads/2025/gotatun.png
GotaTun is a fast and efficient WireGuard implementation in Rust, forked from BoringTun, with added features like DAITA and Multihop. It has replaced wireguard-go on Android, resulting in a significant drop in user-perceived crashes and improved user experience.

Amazon will allow ePub and PDF downloads for DRM-free eBooks

Sorry to interrupt

Beginning January 2026, all ACM publications will be made open access

Cookies are categorized into necessary, preference, statistic, marketing, and unclassified types based on their functions and purposes. They enable website usability, remember user preferences, and help owners understand visitor behavior.

Show HN: Stepped Actions – distributed workflow orchestration for Rails

https://private-user-images.githubusercontent.com/32981/526200809-32577a1e-1240-44ec-af0a-493a48ec70ef.png?jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.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.UeJW3cxrtGzwnb9CTinMiHQkzOFH8ZMGr9eZzmnxJng
Stepped is a Rails engine for complex workflows as a tree of actions, persisting and running through Active Job. It allows defining and running actions on models, with concurrency lanes and reuse features.

Texas is suing all of the big TV makers for spying on what you watch

https://platform.theverge.com/wp-content/uploads/sites/2/chorus/author_profile_images/195810/EMMA_ROTH.0.jpg?quality=90&strip=all&crop=0%2C0%2C100%2C100&w=2400
Texas Attorney General Ken Paxton is suing five TV makers for allegedly using Automatic Content Recognition to secretly record consumer viewing habits. The lawsuit claims Samsung, Sony, LG, Hisense, and TCL are part of a "mass surveillance system" for targeted advertising.

Getting bitten by Intel's poor naming schemes

https://lorendb.dev/images/opengraph-placeholder.png
User installed Proxmox on an old Dell Precision T3610 and upgraded RAM and storage. They attempted to upgrade the CPU to a newer Xeon E7-8890 v4 but it didn't fit due to different socket variations.

We pwned X, Vercel, Cursor, and Discord through a supply-chain attack

1.5 TB of VRAM on Mac Studio – RDMA over Thunderbolt 5

https://www.jeffgeerling.com/sites/default/files/images/mac-studio-cluster-1-hero.jpg
Apple loaned Mac Studios for testing RDMA over Thunderbolt, a new macOS feature, with Exo 1.0, an open-source AI clustering tool. The Mac Studio cluster outperforms Nvidia's DGX Spark and AMD's AI Max+ 395 systems in some benchmarks, but managing clusters is more complex with macOS.

How to think about durable execution

https://hatchet.run/assets/task-CzVrHnvf.gif
The author explains durable execution, a technique for managing complex workflows, and its benefits in reducing unexpected failures and improving reliability. Durable execution persists intermediate state, allowing workflows to resume from a checkpointed state, but requires deterministic code and can be complex to implement.

Show HN: I implemented generics in my programming language

https://axe-docs.pages.dev/assets/axe-2.png
Axe generics allow defining functions with type parameters, enabling a single function body to adapt to multiple types at compile time. This results in type-driven specialization that remains explicit in the source code.

History LLMs: Models trained exclusively on pre-1913 texts

https://opengraph.githubassets.com/d05a979585595346c6ec3df10a3b26c741f868d9d5740971bc19d0a8e50af8d2/DGoettlich/history-llms
Researchers created a family of 4 billion parameter large language models trained on historical data up to specific cutoff dates. These models serve as windows into the past, enabling research in humanities, social sciences, and computer science.

Noclip.website – A digital museum of video game levels

A digital museum of video game levels

From Zero to QED: An informal introduction to formality with Lean 4

https://sdiehl.github.io/zero-to-qed/beaver.png
This article series introduces Lean 4 from first principles, covering programming and theorem proving. It's an informal guide suitable for beginners, with a focus on practical applications and real-world examples.

GPT-5.2-Codex

https://images.ctfassets.net/kftzwdyauwt9/3zqTyemGGUiGdqzwcSHfqT/7dcff34a7b6f51ce1ed20be8a4ffcbf4/image__5_.png?w=3840&q=90&fm=webp
GPT-5.2-Codex is a more advanced agentic coding model for complex software engineering with improved cybersecurity capabilities. It helps developers and defenders tackle long-horizon work and strengthens security research tools.

Prompt caching for cheaper LLM tokens

https://frontend-blog-ngrok.vercel.app/blog-assets/images/2025-12-16-prompt-caching/og.jpg
The user explains how prompt caching in LLMs reduces latency and cost by reusing cached matrices (K and V) instead of recalculating them, allowing providers to offer cheaper tokens and faster responses. The cached matrices are saved for 5-10 minutes and can be reused if a new request starts with the same prompt, with some providers offering more control over caching.

Pingfs: Stores your data in ICMP ping packets

https://opengraph.githubassets.com/b4eb50462968d72f48938fbbde18c7114e64eb337e24e3a0b3fe7f0ce3a29e3f/yarrick/pingfs
pingfs is a cloud storage filesystem using ICMP Echo packets, requiring superuser powers and only supporting Linux. It allows file operations but lacks directory support and has low performance.

Designing a Passive Lidar Detector Device

https://images.squarespace-cdn.com/content/v1/576323cfd482e984e113fe9c/f8799947-4382-4da0-833e-954fe6c9da82/Dot+Grid+Lattice+Labels
The author built a device to detect iPhone LiDAR signals using 940nm peak photodiodes and a SAMD21 chip. The device can measure signal frequency, pulse repetition frequency, and signal bursts.

How China built its ‘Manhattan Project’ to rival the West in AI chips

https://cdnx.premiumread.com/?url=https://www.japantimes.co.jp/japantimes/uploads/images/2025/12/18/512293.jpg&w=1000&q=100&f=webp&t=1.53
Chinese scientists built a prototype EUV machine in a Shenzhen lab, capable of producing advanced semiconductor chips. This achievement fills a technological gap in the West's monopoly on EUV machines, crucial for AI and military dominance.

Show HN: Picknplace.js, an alternative to drag-and-drop

https://jgthms.com/picknplace.js/images/facebook.png
You want a simpler drag and drop experience with a 2-step approach: pick an item first, then place it. This would reduce errors and improve usability, especially on mobile devices.

Show HN: I open-sourced my Go and Next B2B SaaS Starter (deploy anywhere, MIT)

https://raw.githubusercontent.com/moasq/production-saas-starter/main/docs/dashboard.png
Roles & Permissions: Granular RBAC system with 3 roles (Member, Manager, Admin) and 7 permission types. Custom Features: Need SAML SSO or complex RAG flows? I'll build them directly into your repo.

Reconstructed Commander Keen 1-3 Source Code

A reconstructed source code for Commander Keen 1-3 has been released, allowing users to compile exact copies of the original executables using specific compilers and assemblers. The source code reveals that the IDLIB.C code was based on The Catacomb and Hovertank, and that the id founders likely used Softdisk's code in their own game without permission.

Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

https://raw.githubusercontent.com/vivienhenz24/fuzzy-canary/main/public/banner.png
Fuzzy Canary is a tool that adds invisible links to your site's HTML to deter AI scrapers, but may harm SEO if used with static sites. It can be used server-side or client-side, with server-side being more effective.

Property-Based Testing Caught a Security Bug I Never Would Have Found

https://kiro.dev/contentful-assets/blogs/property-based-testing-fixed-security-bug/kiro-pbt-failure.png?h=75c75f97
Property-Based Testing caught a security bug in a storage service for a chat application that would have been difficult to find through traditional testing methods. The bug involved a mishandling of JavaScript prototypes, which could have led to security issues if not eliminated early on, but was discovered through a property-based test that generated random strings for provider names.

A proposed amendment to ban under 16s in the UK from common online services

https://decoded.legal/blog/content/images/decoded.legal_logo.png
The UK's Online Safety Act 2023 amendment aims to prevent under 16s from accessing online services, but its scope is excessively broad, including self-hosted services and everyday online tools. This could lead to a "papers, please" approach, requiring age assurance for all users and significant privacy implications.

Great ideas in theoretical computer science

https://www.cs251.com/static/images/cs251_pic.jpg
This course explores the fundamental concepts of theoretical computer science, including computation, algorithms, and complexity. It covers topics such as deterministic finite automata, Turing machines, computability, and cryptography.

Skills for organizations, partners, the ecosystem

https://cdn.prod.website-files.com/68a44d4040f98a4adf2207b6/6903d22651dd05046d0fdb0b_39c40393e610cc0a5e65f50ad12ff5ada273f792-1000x1000.svg
Claude's skills feature is now easier to deploy, discover, and build with organization-wide management and a directory of partner-built skills. Admins can provision skills centrally and users can customize their experience.

SMB Direct – SMB3 over RDMA

https://docs.kernel.org/_static/logo.svg
To set up Linux SMB client and server for RDMA, install an RDMA device, a kernel with SMB Direct support, and enable RDMA support in the kernel configuration. Then, set up a KSMBD server and mount the share with the rdma mount option to use SMB Direct.

Show HN: CommerceTXT – An open standard for AI shopping context (like llms.txt)

CommerceTXT is a protocol for AI commerce that reduces carbon footprint by 99% and minimizes hallucinations through verified data. It uses a Fractal Architecture and Trust Score system to ensure accuracy and trust.

Firefox will have an option to disable all AI features

https://files.mastodon.social/cache/preview_cards/images/083/335/816/original/a0665cea9aa92ff9.jpg
Mozilla is working on AI features in Firefox, but will have an opt-in option and a "kill switch" to completely disable AI.

Making Google Sans Flex

https://storage.googleapis.com/gd-prod/images/816b1950-d1da-4ea4-9987-86c7b63050cb.0db06b6b53a87fb0.png
Google Sans is a typeface used across Google products, evolving from specific design problems and adapting to user needs. It's now open-source, aiming to create a more unified digital environment and foster a consistent visual language.