News for hackers. Stuff that matters.

patricklorio

Re:Ask HN: Who is hiring? (July 2026) on Thursday July 02, 2026 @10:49AM (#48762510)
Playit - https://playit.gg Eugene, Oregon. REMOTE okay. USA only.

Looking to hire our first full time engineer besides myself. High impact role, over 100k monthly active users. Cash flow positive.

We run a global network to help people host game servers at home. Most of our backend is in Rust with Postgres DB, website is React SPA in typescript.

Engineering work touches many areas: * low level AF-XDP networking * state synchronization across 20 datacenters * custom ddos mitigation logic * product feature development * front end website dev * front end TUI dev * reliability monitoring and alerting * so much, think creating cloudflare from scratch with focus on gaming and you’re not far off

Send resume over email to [email protected]

Re:Tunnl.gg on Monday December 08, 2025 @02:45PM (#46196705)
Want to chat on discord? Maybe we could combine efforts to try and stop people abusing our services :). We have a few vendors sending us automated reports, maybe I could open it up for multiple projects.

feel free to give me a ping on https://discord.gg/AXAbujx @patrick.

Re:Tunnl.gg on Friday December 05, 2025 @12:17PM (#46164233)
Have you found a way to detect xworm c2c servers?
Re:Tunnl.gg on Thursday December 04, 2025 @05:18PM (#46153916)
I run playit.gg. Abuse is a big problem on our free tier. I’d get https://github.com/projectdiscovery/nuclei setup to scan your online endpoints and autoban detections of c2 servers.
IMO bad take. We want quality journalism to be sustainable, having AI launder stolen content and make it free with ads is not better.
Re:Ask HN: Who wants to be hired? (October 2025) on Monday October 06, 2025 @05:49PM (#45496702)
Provided a fake ID when trying to verify identity. Wasted my time, be cautious.
So he received the checks and mailed them to his bank but they were intercepted in the second leg and cashed out. Sounds like the fault is with the banks that cashed out the checks without adequate verification.
Re:Ask HN: Cheapest way to run a time-series database in cloud? on Saturday January 18, 2025 @03:01PM (#42750977)
Highly recommend clickhouse. You can set the partition key to be based on date and delete old data in chunks. Makes life really easy. Also found it much more performant than timescaledb out of the box. Not sure about hosted options but can imagine that translates to better performance for the dollar.
Computers outside of the US sure, but the latest chips used for AI training have export controls so not so much.
I think this is about preventing sanctioned countries or individuals using US technology we don't want them to have access too (like China not having modern GPUs). That goal seems reasonable though there's always a fear that the law is way broader than the high level intent. Why would it be "an absolute nightmare" if it's so easy to migrate?
I read the document a bit, it seems like this is essentially saying that services like AWS need to know the identity of their customer if they suspect they are a foreign entity.

I don't think this would cover VPNs or internet access, mainly just people spending lots of $$ on compute. Is that correct? If so it seems reasonable. If a non US group is spending lots of money using US technology to develop an AI model I do think that falls under foreign trade and should be documented.

756 MW is the peak power rate, not accumulated amount of power that will be generated per year.
Sounds like a smart way to build a high quality dataset of captioned ASL videos while also providing a great service. Guessing in 2 years they’ll have a decent ML model.
I think avalanche transceivers need alkaline batteries because they work better in the cold and have a more reliable voltage drop as the energy is drained. But beyond niche applications, rechargeable all the way :).
Re:Stripe Is Down on Friday June 30, 2023 @10:19AM (#36535389)
Dashboard is having issues but it seems like the API is working right now.
Re:Binance sees $2B in outflows as troubles compound on Tuesday March 28, 2023 @11:58PM (#35352278)
Time to see if the emperor has clothes on.
Re:Ask HN: Laid off folks, are you getting hired? on Thursday February 09, 2023 @12:47PM (#34728012)
why?

> that those laid off folks added their contact info to

They seem to have added their info to the list for it to be floated around.

I run a fairly popular service and have received DDoS attacks from Cloudflare's IP range (~20gbps). I can confirm they respond to SYN+ACK with an ACK to complete the TCP handshake. Through some investigating it seems like a botnet using Cloudflare WARP (their VPN service).
It’s custom software for tunneling (primarily game servers). All the packets are handled directly using AF-XDP. It’s also on an anycast network and this endpoint is used to debug routing issues.
http://ping.playit.gg/ embeds the request epoch in the TCP sequence number to give you your ping.

  Client SYN => 
             <= Server SYN+ACK \w epoch in sequence
  Client ACK =>
             <= HTTP payload calculating ping with NOW - ACK number
Re:In 2019 RX470 were $70, RX580 $100 on Tuesday September 20, 2022 @10:05AM (#32911810)
I’m confused, taxes only apply to profit and you can write off the expenses of the video card.
There's only custom domains (your-choice.playit.gg) for $1/month or $6/year. I'm still working to develop premium features but for now the custom domain subscriptions cover my monthly server costs.
Re:Coinbase is reportedly selling geolocation data to ICE on Thursday June 30, 2022 @07:53PM (#31940285)
It can be done by seeing which crypto nodes propagate the transaction first.
Coinbase is FDIC insured but that's only relevant for USD. The SEC mandates disclosures of all risk and given that a crypto company like this has not gone bankrupt there, isn't precedent on how bankruptcy courts will consider crypto assets held under custody. Therefore it's a risk that should be made transparent.
Re:Ngrok Alternatives on Wednesday February 23, 2022 @04:35PM (#30446818)
I'll need to make a PR to add https://playit.gg :). Been working on it for the past two years. Offers UDP support, ability to tunnel a range of ports, and provides a fixed IP and port. I recently purchased a /24 and moved the entire service to an anycast network. An entire datacenter can go down and connections will keep going .
Re:Be anonymous on Monday February 21, 2022 @01:11AM (#30412458)
It was a tor hidden service. Do domain purchase required.
Re:Ask HN: What tech stack to use for my startup? on Sunday February 06, 2022 @10:29PM (#30239989)
My react build scripts use https://github.com/stereobooster/react-snap to create static files which I deploy. Might be good enough for you. Otherwise I'd suggest moving the app to a different subdomain as someone else mentioned and having separate marketing pages. If you have a lot of dynamic content (ie user generated) that you want SEO'd, server side rendering is the most tried and tested.
Re:Ask HN: Is Digital Ocean Down? on Wednesday July 28, 2021 @12:16PM (#27985568)
I'm back online :). Seems like the network in NY3 went offline for a bit.

Older »