Object Storage in HEL1 has been partially degraded since 2026-09-09, with a subset of buckets experiencing elevated response times, stalled requests and occasional timeouts. Engineers traced the symptom to intermittent stalls in low-level commit operations that can last several seconds and affect different parts of the cluster unpredictably. The situation was temporarily contained with a workaround that brought the cluster back online, but intermittent delays continued. Increased utilization of the Object Storage product is cited as contributing to an I/O bottleneck that underlies the performance issues.
To resolve the I/O problem, Hetzner is performing background bucket migrations within HEL1; these migrations are intended to rebalance load and do not require any customer action. Updates across September and early October report ongoing monitoring, continued investigation of the root cause, and stepwise mitigation: the workaround reduced direct impact to buckets, and migrations aim to restore full performance. As of 2026-10-08 the incident remains in monitoring with occasional delays still possible for affected customers until migrations and underlying fixes are complete.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.