Sunday, 1 November 2026

19 entries · final
Concept of the day · concurrency

Structured Concurrency

A task cannot outlive the scope that started it.

The mechanism. Concurrent tasks are bound to a lexical scope. The scope does not exit until every child task has finished, been cancelled, or failed. Errors propagate to the parent; cancelling the parent cancels all children. Concurrency gets the same shape as a function call: one entry, one exit, no escapees.

What it fixes. Fire-and-forget concurrency loses errors (a rejected promise nobody awaited), leaks tasks (a goroutine blocked on a channel nobody will write to), and makes cancellation impossible, because there is no handle to the work you started three layers down. The classic symptom is a service whose goroutine or task count climbs monotonically until it dies.

Where it exists now. Python's asyncio.TaskGroup (3.11+) and Trio's nurseries, which started this whole line of thinking. Java's StructuredTaskScope (JEP 453, finalised with virtual threads). Swift's async let and task groups. Kotlin's coroutineScope. In Go, errgroup.WithContext is the idiomatic approximation — the language itself lets a bare go statement escape any scope, which is exactly the hole.

The rule that follows. Never start work you have no handle on. If a function starts a task, either it waits for it or it returns something the caller can wait on.

Takeaway. go and asyncio.create_task are the goto of concurrency. Scopes are the structured replacement.

0 of 19 read

Top Reads

5

Articles and engineering write-ups worth the full read.

Jepsen: ParticleDB 1.1.4

https://github.com/jepsen-io/particledb

jepsen.io·Lobsters +1·238 points / 136 comments·2 sourcesdatabasestestingthread →

Switch lowering in GCC

xoranth.net·Lobsters +1·205 points / 44 comments·2 sourcescompilersperformancethread →

HackerTube: YouTube built from videos recommended by HN

YouTube-style UI over 6,454 videos sourced from 39,834 HN comments since 2007. https://hackertube.org/

karpathy.bearblog.dev·Hacker News·1035 points / 312 commentsthread →

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

atlasum.net·Hacker News·447 points / 208 commentsthread →

The Kluever Maneuver

jordi.inversethought.com·Lobsters·38 points / 19 commentstestingthread →

Shipped

4

Releases, changelogs, cloud and language news.

Enlightenment 0.28.0 Release

Their alternative to Qt/GTK (EFL) also got a new release: https://www.enlightenment.org/news/2026-10-31-efl-1.29.0

enlightenment.org·Lobsters·13 points / 1 commentslinuxreleasethread →

OpenShot 4.1 Released With Auto-Optimize, CLI Automation & ARM64 Linux Builds

OpenShot is closing out the month of October by releasing OpenShot 4.1 as the latest major feature release for this useful open-source video editing solution...

phoronix.com·Phoronixpress

Spring News Roundup: First Release Candidates of Boot, Framework, Data, Security, Modulith, AI

There was a flurry of activity during the week of October 19th, 2026, highlighting: first release candidates of: Spring Boot, Spring Framework, Spring Data, Spring Cloud, Spring Security, Spring for GraphQL, Spring Session, Spring Integration, Spring HATEOS, Spring Modulith, Spring REST Docs, Spring AI, Spring Batch, Spring AMQP, Spring for Apache Kafka, Spring LDAP and Spring Web Services. By Mic

infoq.com·InfoQspring web servicesjavaspring ai

[In preview] Public Preview: Support database-level managed identity (including FIC) in Create Database Scoped Credential T-SQL

With database-level managed identity in Azure SQL Database, you can use a user-assigned managed identity for each database to query files in Azure Blob Storage and Azure Data Lake Storage Gen2 through external tables and OPENROWSET. You can authenticate t

azure.microsoft.com·Azure Updatesin previewdatabaseshybrid + multicloud

Repos

3

Projects gaining real traction, and what they actually do.

ytdl-org/youtube-dl

Command-line program to download videos from YouTube.com and other video sites

github.com·GitHubpython

ccch1mneyyy/dsh-Go

dsh-go — DeepSeek Harness 装进口袋:手机本机运行,也能遥控你的电脑。

github.com·GitHubdartai-agentandroid

valentderah/totk-pc-recomp

Static recompilation of The Legend of Zelda: Tears of the Kingdom to native Windows x86-64, with a Vulkan renderer. Game files not included.

github.com·GitHubc

Discussion

3

Threads where the comments are the content.

French national assembly votes 0.055€/GB internet tax

lesnumeriques.com·Hacker News·138 points / 158 commentsthread →

Tell HN: Scribd Breached

Not seeing anything posted about this anywhere, received on Monday, 26th of Oct 2026: Subject: Notice of Security Incident This notice is being sent on behalf of Scribd, Inc., the parent company of Scribd, Slideshare, Everand, and Fable, by Epiq, Scribd Inc.’s notification partner. Hello, We are writing to let you know that Scribd, Inc. recently experienced a security incident that may have affect

news.ycombinator.com·Hacker News·339 points / 121 comments

Rationale for filtering LLM usage links as off-topic

Hi, I've been following recent moderation changes and the discussion around them. I understand that the vibecoding tag was conflating multiple meanings and uses, and how moving to the building-LLM-tooling makes it more precise for that subset of the discussion. I also see how people may be tired of the LLM discussion and want to completely filter out anything LLM related. What I don't quite unders

lobste.rs·Lobsters·9 points / 11 commentsaskmeta

AI

3

Capped on purpose, so it does not eat the edition.

How We Took Over ChatGPT Accounts

How We Took Over ChatGPT Accounts Parameter Labs describe an exploit they found against ChatGPT's implementation of the artifacts pattern (OpenAI used to call this "Canvas" but it looks like the latest revision is called HTML previews ), where interactive custom HTML apps are displayed in a sandboxed iframe. It's important that HTML in these stays tightly sandboxed to avoid untrusted code interact

simonwillison.net·Simon Willison +1·318 points / 157 comments·2 sourcesiframesjavascriptsandboxingthread →

Malware uses LLMs to rank victims by how much they're worth

blog.talosintelligence.com·Hacker News·243 points / 131 commentsthread →

Anthropic takes steps to block Claude from reverse-engineering video games

mashable.com·Hacker News·129 points / 79 commentsthread →

Deep

1

One paper or long teardown.

Nearly-Optimal Time-Sample Trade-off in Consensus Dynamics

How does the number of sampled opinions affect the time required to reach consensus in distributed consensus dynamics? We study the synchronous $h$-\textsf{Majority}, in which every node independently samples $h$ nodes uniformly at random with replacement in each round and adopts a most frequent sampled opinion, breaking ties uniformly at random. We show that $h$-\textsf{Majority} achieves the nea

arxiv.org·arXiv CScs.dccs.dsmath.pr

Revision

2 from earlier editions

Answer each one before you open it.

What property makes a CRDT converge without any coordination?3d ago

Data types whose merge function is associative, commutative and idempotent — so replicas converge without coordination.

Concept · CRDTs
Whose health is a circuit breaker actually protecting - the dependency's or yours?10d ago

Stop calling a dependency that is already failing, so you fail fast instead of piling up.

Concept · Circuit Breaker