News for hackers. Stuff that matters.
Re:Local privilege escalation vulnerabilities in Linux by est31 on Wednesday November 04, 2026 @09:02PM (#50374154)
I think the pgrust controversy should be resolved now?

https://news.ycombinator.com/item?id=50209450

Re:Local privilege escalation vulnerabilities in Linux by anonymous908213 on Wednesday November 04, 2026 @09:10PM (#50374219)
I don't consider a cheater downplaying their cheating to resolve the fact that they cheated, no. Every cheater has a defense when caught, and theirs was not convincing. At this point I think the only thing that could redeem their brand would be paying for a Jepsen analysis to verify pgrust is as good as they claim it is; I have zero reason to trust the words from the horse's mouth.
Re:Local privilege escalation vulnerabilities in Linux by malisper on Friday November 06, 2026 @10:47AM (#50393808)
You don't have to take my word for it. The ClickHouse CTO (who opened the original removal PR) updated his post after reviewing our explanation and our fully open-source v0.4-beta submission[0]:

> We clarified with the author - while the binary had signs of optimization for specific benchmark queries, we have a reason to believe that the actual runtime didn't use per-query kernels... The usage of a query condition cache and cached statistics per granule is legitimate. The submission of a closed source preview version fine-tuned for benchmark was shady nevertheless. However, the new submission #2751 should move us post all the concerns.

Submitting an incomplete, closed-source preview build was a mistake on my part. Since then, we open-sourced a new version with full SQL support, ClickHouse merged it back into ClickBench, and the new version actually runs 7% faster (geomean) than the preview build that was removed.

[0] https://github.com/ClickHouse/ClickBench/pull/2165