Low-level craft is still a big draw: exploits, allocators, and 'standard' C

A strong cluster of systems posts rose today. Go 1.27 improves HTTP/1 connection reuse, and the thread debates a changed behavior: closing a response body no longer reliably skips downloading it, and it won't drain bodies for Connection: close. Others include 'Your C is not standard C', the Double Headed Stack Allocator, HRT tracing mystery network traffic with eBPF across its global cluster, Libreboot 26.10 with UEFI and Chromebook support, and Ubuntu 26.10. There were also two hardware-hacking stories: a nine-year Xbox 360 softmod and a post titled 'Wanted to download an ISO, ended up writing a kernel exploit'.

The Ubuntu thread had a good fight over Ubuntu holding back security updates unless you pay for Ubuntu Pro. The kernel exploit thread shows a modern wrinkle: a commenter notes the author had the Cyber Verification Program enabled and it still didn't help, which is a hint about how AI safety gates sit in the middle of security research workflows.

The pattern is that depth earns attention. People still read about stack allocators, FLT_ROUNDS, and eBPF with real appetite.