hackney 4.9.0 is out.
New: max_body_size caps buffered response bodies, 512 MiB by default.
Hardening: stricter SSRF checks, pinned CAs, redirect credentials and proxy TLS.
Fixed: a slow host no longer stalls the whole pool.
github.com/benoitc/hackney/r…
hackney 4.8.7 is out. It's a security update: quic 2.1.2 fixes session ticket reuse across listeners and closes two ways a hostile peer could stall or flood HTTP/3 and WebTransport connections. Upgrade recommended.
github.com/benoitc/hackney/r…
Livery 0.10.6 is out, now on quic 2.1.2 with its security fixes.
Uploads over the size limit on HTTP/2 and HTTP/3 now get a proper 413, not a stream error. And a GET over HTTP/3 no longer hangs when your handler reads the body.
github.com/benoitc/livery/re…
erlang_quic 2.1.2 is out. It fixes 4 security issues, including one high severity, and adds reader-driven flow control with quic:set_stream_flow_control/3 and quic:consume/3.
Please upgrade.
github.com/benoitc/erlang_qu…
hackney 4.8.6 is out: large HTTP/2 downloads over slow links no longer time out, and now run about as fast as HTTP/1.1. certifi 2.18.0 drops the compromised eMudhra CA certificates. #Erlang
github.com/benoitc/hackney/r…
certifi 2.18.0 for Erlang is out.
Removes the distrusted eMudhra emSign roots (C1, C3, G3). The CA bundle now matches Mozilla's trusted set as of 2026-10-20 (118 roots).
hex.pm/packages/certifi
github.com/certifi/erlang-ce…
vmm(4)/vmd(8) gain support for multi-processor VMs
undeadly.org/cgi?action=arti…
This weekend I'm cleaning up AS209823 and preparing its move to full NFV.
Taking inspiration from Facebook's RFC 7938, I'm moving toward a simpler, BGP-only network. No more MPLS.
The goal is to replace any server without redesigning the network. Hardware should be disposable.
We shouldn’t worry about AI replacing parts of the development process. We had FileMaker, Access, Dreamweaver, and others. Anything that helps people build their own interfaces with the world is a good thing.
But software development is more than coding. It’s an art of understanding and interacting with the world. Learning languages and writing code have always been the easy part.
Benoît retweeted
As all programmers start taking the work of their coding agents completely for granted, the AI notices who still reads every line. 😍
New slopcore from yours truly!
h/t @anabology for Claudia
Benoît retweeted
Happy birthday, AS25091! 🥰🎂🔥
@ip_max
bgp.tools/as/25091
Benoît retweeted
Built a small tool for DGX Spark owners.
One command finds every Spark on your network over ssh, caps the GPU clock on each, and installs a system service so it survives reboots.
I use it myself - it reduces power consumption and heat with almost no effect on decode speed.
github.com/MiaAI-Lab/sparkLi…




