News for hackers. Stuff that matters.
Re:Local privilege escalation vulnerabilities in Linux by est31 on Wednesday November 04, 2026 @08:45PM (#50374019)
> Just a prompt away, right?

Humans manually typing out the bytes of source code has been an outdated method, since around a year. It simply doesn't scale as much as those same humans directing agentic teams. So yes, it would be about prompts.

The hard part isn't the technology for the language transition, that one is present today. pgrust shows the way. It's ensuring maintainers are cooperative, i.e. a social problem. Eventually you diverge too much if you do a fork, so it's better done in cooperation with upstream.

Just check how long it took LLVM or GCC to switch off svn for example, and a language switch is much more involved than a VCS switch.

Re:Local privilege escalation vulnerabilities in Linux by anonymous908213 on Wednesday November 04, 2026 @08:47PM (#50374036)
> pgrust shows the way.

You mean the pgrust which was recently caught for cheating benchmarks and incapable of even performing basic queries outside the benchmark set? Would love to see pgrust analysed by Jepsen like this other AI-generated, written in Rust, "formally verified" scam software.

https://jepsen.io/analyses/particledb-1.1.4

Re:Local privilege escalation vulnerabilities in Linux by est31 on Wednesday November 04, 2026 @09:02PM (#50374154)
I think the pgrust controversy should be resolved now?

https://news.ycombinator.com/item?id=50209450

Re:Local privilege escalation vulnerabilities in Linux by anonymous908213 on Wednesday November 04, 2026 @09:10PM (#50374219)
I don't consider a cheater downplaying their cheating to resolve the fact that they cheated, no. Every cheater has a defense when caught, and theirs was not convincing. At this point I think the only thing that could redeem their brand would be paying for a Jepsen analysis to verify pgrust is as good as they claim it is; I have zero reason to trust the words from the horse's mouth.
Re:Local privilege escalation vulnerabilities in Linux by malisper on Friday November 06, 2026 @10:47AM (#50393808)
You don't have to take my word for it. The ClickHouse CTO (who opened the original removal PR) updated his post after reviewing our explanation and our fully open-source v0.4-beta submission[0]:

> We clarified with the author - while the binary had signs of optimization for specific benchmark queries, we have a reason to believe that the actual runtime didn't use per-query kernels... The usage of a query condition cache and cached statistics per granule is legitimate. The submission of a closed source preview version fine-tuned for benchmark was shady nevertheless. However, the new submission #2751 should move us post all the concerns.

Submitting an incomplete, closed-source preview build was a mistake on my part. Since then, we open-sourced a new version with full SQL support, ClickHouse merged it back into ClickBench, and the new version actually runs 7% faster (geomean) than the preview build that was removed.

[0] https://github.com/ClickHouse/ClickBench/pull/2165