Hacker News

Top Story

John Gruber’s retraction on Daring Fireball regarding a supposedly egregious App Store rejection of Terry Godier’s “Dark Hours” app took the community by storm. What was framed as a classic “Apple review has zero literacy” outrage bait collapsed when it was revealed that Godier had actually submitted “Asterly”—an app entirely dedicated to astrology and Tarot card occultism—and had silently cloned the name and code of another open-source astrophotography planner.

Front Page Highlights

Shopify’s MySQL Migration: Replacing Redis for Inventory Reservations · Shopify Engineering In a masterclass on database engineering, Shopify detailed how they migrated their massive Black Friday inventory reservation system from Redis to MySQL. By utilizing MySQL 8’s SKIP LOCKED feature, they bypassed row-level locking contention by maintaining a bounded pool of 1,000 reservation rows per item/location. While their team spent weeks tuning index designs and transaction isolation levels, they discovered the actual performance ceiling was connection exhaustion caused by unoptimized, long-running transactions in unrelated parts of the checkout path—a classic reminder that the database is rarely the bottleneck if your application layer is leaking connections.

Triton: Virtualizing DirectX 11 in QEMU · UTM Blog The UTM team dropped a stunning technical write-up detailing Triton, a brand-new Windows driver that brings hardware-accelerated DirectX 11 to QEMU virtual machines. Instead of translating API calls to Vulkan directly in the guest—which triggers anti-cheat bans and breaks desktop compositing—Triton implements the DirectX Device Driver Interface (DDI) directly inside the Windows kernel. For macOS hosts, the engineering is beautifully complex: they bypass Apple’s lack of process-boundary Metal events by utilizing linear textures mapped to shm_open() shared memory, creating an emulated GPU fence system over Apple Silicon’s Unified Memory Architecture.

CSS: The Bomb Inside Your Inbox · PortSwigger Research Security researcher Gareth Heyes demonstrated how untrusted CSS rendered in trusted webmail interfaces can bypass sanitizers to exfiltrate private tokens and execute real-time keyloggers. By exploiting a parsing discrepancy in Outlook’s parser that misinterprets media queries containing double quotes inside comments, Heyes injected arbitrary CSS to take absolute control of the viewport. The community is widely discussing the sheer horror of “CSS-only keyloggers” and the absolute necessity of isolating untrusted email payloads inside sandboxed iframe elements.

My Server Is a Phone Now · seg6.space In the ultimate “junk drawer” hardware revival, a developer detailed how they replaced their shared VPS with a cheap CMF Phone 1, utilizing its eight-core ARM SoC, 8 GB of RAM, and its built-in battery which serves as an integrated UPS. Rather than dealing with a buggy postmarketOS flash, they kept stock Android and used Termux as the supervisor host running an Ansible-managed Debian chroot. Commenters are loving the sheer practicality of the setup, noting that modern ARM chips easily crush entry-level cloud instances on performance per watt while remaining completely battery-backed.

Honey, I Shrunk the Embeddings: Matryoshka vs. PCA · Dylan Castillo This empirical post compares modern Matryoshka Representation Learning (MRL) prefix-truncation with standard Principal Component Analysis (PCA) for reducing vector database dimensions. Testing across eight BEIR retrieval datasets, the author found that PCA matched or outperformed MRL on almost all dimensions, preserving 65% of retrieval quality at a mere 32 dimensions on OpenAI’s text-embedding-3-small compared to MRL’s 46%. HN is discussing the operational trade-offs, noting that while PCA adds the overhead of versioning and applying a projection matrix, the massive savings on vector storage bills are too large to ignore.

Windows 11’s Weather App Wastes More Than 1 GB of RAM · Notebookcheck The community is collectively sighing over reports that Windows 11’s built-in Weather app frequently consumes over 1.2 GB of RAM during basic use, compared to less than 250 MB on macOS. The culprit is MSN Weather’s lazy Webview2 architecture, which spawns multiple Chromium subprocesses simply to render a basic forecast. To make matters worse, the app aggressively injects sponsored ads into the UI feed, directly contradicting Microsoft’s public claims of optimizing Windows 11 for lower-end hardware.

Show HN & Launches

DeepSeek-V4 Latent Reasoning is a self-contained, NVFP4-quantized model that shifts multi-step autoregressive “thinking” directly into an opaque 1024-dimensional latent space. It includes speculative decoding through DSpark, delivering a 1.40x throughput boost directly on the CUDA graph fast path.

On the retro front, Os8088 is an incredibly polished preemptive OS for the IBM PC/XT. Written in 66,000 lines of pure NASM, it boots directly from a floppy into a Mac-like desktop, pre-emptively scheduling up to 5 concurrent programs on just 256K of RAM.

Discussion & Debate

The comment section of How not to turn ideologically crazy is serving as a massive self-reflective mirror for the HN community. The post examines the psychological trap of “positive updating,” where encountering terrible, uneducated arguments from our critics leads us to falsely conclude our own extremist or fringe views must be more correct. Many commenters point out that tech-industry debates are highly prone to this exact “local vista” bias, where we mistake the average loud internet comment for a steelman of the opposing argument.

📊 I can write a script to build a quick visualization comparing the retrieval quality loss of PCA and Matryoshka across those eight datasets if you’re trying to figure out which compression curve actually holds up for your vector search.