News for hackers. Stuff that matters.

FreakLegion

Re:Much Ado About None: Sentinel Values in Python on Sunday November 01, 2026 @12:46AM (#50322786)
Most languages can do this if it's what you want. In Python it would be:

    class Some[T]:
        value: T

    type Option[T] = Some[T] | None

    def get_owner(id: DocumentId) -> Option[Option[UserId]]: ...

    match get_owner(document_id):
        case None:
            ...
        case Some(None):
            ...
        case Some(Some(x)):
            ...
Re:Steal My Bitcoin CTF PoC on Monday October 26, 2026 @06:00AM (#50241431)
> there aren’t swarms of automated pwnbots out there that will insta-root your server

There are, they just didn't have a working exploit. Anyone with a honeypot can tell you attempts were widespread going back to early last week, but it wasn't until Saturday that we started to see successes.

Re:Bringing uv and ty together on Sunday October 25, 2026 @08:50PM (#50237609)
They're all CLI tools and they all support LSP. The only setup advantage here is Pylance's, by virtue of shipping with VS Code. Other tools take two clicks to enable, plus or minus typing the tool's name into a search bar.
Re:Bringing uv and ty together on Sunday October 25, 2026 @01:15AM (#50228540)
Pyrefly and Zuban are faster. Pyrefly and Zuban use less memory. Pyrefly and Zuban score higher on the type system conformance test.

Use whatever tools you want, but don't kid yourself. There's a reason Google adopted Pyrefly.

No, he didn't. He was missing an address leak.
There were no known breaches or end-to-end exploits as of Friday. I've seen LLM hallucinations purporting to be exploits and real exploits missing pieces (address leaks), but nothing complete. Friends at some of the bigger IR practices (CrowdStrike CAO, Unit 42, Talos) have said the same thing.

It'll happen sooner or later, but all signs are that this was first and foremost a process nightmare. It wasn't another Log4Shell.

Re:Bringing uv and ty together on Saturday October 24, 2026 @03:47AM (#50219084)
Ty isn't a compelling option. If you want support for dynamic libraries, mypy is king. If you want speed and strict conformance, Pyrefly and Zuban are better.

Ty's original pitch was that it would have strong inference and be useful for gradually typing existing, untyped codebases, but AI made that moot. Adding types to existing code is now trivial.

Re:One Hash Bloom Filters on Thursday October 22, 2026 @01:46AM (#50191624)
More cache misses, and also an increased false positive rate from doing multiple lookups. A similarly optimized cuckoo filter (cache line-sized buckets/windows and SIMD queries) is both smaller and faster.
Re:The Decoherence Trap on Wednesday October 21, 2026 @10:16PM (#50190347)
I've seen the mods change account names for folks in the past. You can reach out to them at [email protected].
Re:The Decoherence Trap on Wednesday October 21, 2026 @05:34AM (#50178067)
I wouldn't say plain, but it's a generic LLM design. Which made me curious whether the blog was around with a different look before AI was commonly used for such things, and it turns out it was, at https://www.pzuraq.com (which now redirects to the current site).

One article survived the move, so you can compare:

https://web.archive.org/web/20220426154343/https://www.pzura...

https://maevyn.codes/four-eras-of-javascript-frameworks

Edit: Loading any page of the old blog on archive.org always errors out initially. Click back to the blog list and then on the article again.

Re:One Hash Bloom Filters on Tuesday October 20, 2026 @06:17AM (#50163872)
It's absolutely a speed optimization, although more for reads than writes. The 64-byte cache line bit is a standard blocked Bloom filter. Add SIMD queries and that's about as fast as these things get.

The other side of the tradeoff is bumped ribbon retrieval. Blocked Bloom filters are about 50% bigger than BuRR.

Re:One Hash Bloom Filters on Monday October 19, 2026 @11:11PM (#50160912)
I'm describing the data structure from the article, which is partitioned twice: first into 64-byte, then into pairwise coprime-sized chunks. The 64-byte chunks are what you're quoting as "blocked", the pairwise coprime-sized chunks as "partitioned". The space inefficiency I mentioned applies to the 64-byte chunks.
Re:One Hash Bloom Filters on Monday October 19, 2026 @08:03PM (#50159640)
NB: You're trading non-negligible space efficiency here, which gets worse as you lower the false positive rate. Partitioning means uneven occupancy rates across partitions, and either you accept low occupancy (increased filter size overall) or you're pretty much guaranteed to have hot blocks (increased false positive rate for specific partitions).
Re:Artificial Insanity on Tuesday October 13, 2026 @12:51PM (#50074793)
I shouldn't have borrowed 'misrepresent' from the person I replied to; 'misunderstand' or 'misinterpret' would've been a better choice. My read of the paper is that you can posit a stable model with perfect recall capable of doing genuinely useful things and it doesn't meaningfully affect the argument, which is more philosophical than technical.

I don't mean to defend the paper in general, though. It has plenty of problems.

Re:Postgres isn't slow, your storage is on Monday October 12, 2026 @04:53AM (#50053397)
Column Tetris is one example: https://stackoverflow.com/questions/2966524/calculating-and-....

Optimizing column layout has been enough for me to leave OLAP workloads in Postgres a few times when I otherwise would've had to spin up something dedicated for them.

It was probably flagged because however much you (and for the record I, and most other people here) may think that the rise of sports betting and prediction markets are a problem, this particular article is full of nonsense and really quite bad.
Re:Artificial Insanity on Sunday October 11, 2026 @11:05PM (#50050880)
LLMs collapsing into piles of gibberish is a misrepresentation, too. The paper doesn't mention it and the argument doesn't hinge on it, or even benefit from it, really. But the other bit:

> Her argument claimed that while we perceived legible text coming from ChatGPT, we were actually being fooled by our innate pattern-matching instincts

This is an accurate summary, I think, and the point the authors are making sits somewhere in the coordinate space of a simplified reframing of the Chinese Room, Grice's account of intention in meaning, Wittgenstein's "Say 'It's cold here' and mean 'It's warm here'" challenge, and a whole bunch of the hermeneutic tradition.

Very roughly, you might say that an LLM doesn't mean anything when it emits text, but that the text still has meaning (which I think is all tptacek wants from "meaningful outputs", but you could take that further as culturally or scientifically 'meaningful', i.e. 'significant').

Philosophically, there are people who hold the position that something has to have been meant to have meaning, or that something has to have meaning in the first place to be meant, and so on. There were always interesting edge cases to these accounts (actors delivering lines, or the Dada/Burroughs cut-up technique), but LLMs are challenging in a way that e.g. Racter wasn't.

"Stochastic parrot" is a fitting term for this because the parrot's words have meaning, but the parrot itself doesn't mean anything by them. Not literally, anyway. And that's it. That's the whole analogy.

Have some people watered the term down to "LLM dumb"? Yes. Is that what Gebru meant in the first place? Not in my reading. Is it incorrect to use the term today? Depends, uh, on what you mean by it.

Your clever strategy of not saying anything in particular, so that there's no argument to respond to, is noted a rejected.
And let's be clear, these claims are nonsense.

DraftKings was founded in Boston and funded by Boston and other East Coast VCs.

Polymarket was founded in New York with funding from all over the world.

Crypto wasn't created in any particular place, and crypto companies are probably the least geographically concentrated kind of tech company there is.

Venture capital and modern business planning weren't invented in Silicon Valley, either.

Statistical models have been around for hundreds of years.

This is "not even wrong" territory.

There are just as many saying otherwise. For every Hinton or Bengio there's a LeCun or Reddy. In other words: Beware of confirmation bias.
We're talking about the question that spawned this thread:

> what is even the purpose of a board in a multi-class share structure with the founder holding above 50% voting shares.

This is a question about governance in general. The details of what happened at Automattic are irrelevant.

The board can sack the CEO, usually with a simple majority vote. That's just how boards work.

What's not normal is any kind of special investor right to sack the CEO unilaterally.

robocat was answering a general question about the relationship between ownership and control. And they're right that representing 84% of the voting shares doesn't mean anything. It's standard for major investors to have their board seats guaranteed, plus veto rights over things like creating new stock and selling the company. (It's not standard to have "the ability to sack the founder and take control", though.)

Founders are almost always outnumbered on the board by Series B, but like I speculated in https://news.ycombinator.com/item?id=49638676, Automattic is unusual here, and Mullenweg may control it. There's still a decent chance that True Ventures left in protest rather than being booted, though, and has the right to a seat[1]. It's just, what's the point if Mullenweg has them beat 4-1?

1. Edit: The article confirms that Toni Schneider resigned, but not whether True Ventures (his firm) has the right to a seat.

Re:Sex, AI, and the Apocalypse on Saturday September 19, 2026 @02:44AM (#49763998)
>>> having read a few chapters of HPMoR, which I agree is standard for anyone who spends enough time on the Internet

>> You have to be quite unaware of your bubble if you think knowing about a niche Harry Potter fanfic is "standard" for people on the Internet.

> "niche"? It's literally one of the most read pieces of fanfiction of all time.

You jumped into a conversation about the ubiquity of something for people on the Internet. Either your claim is about that, in which case it's wrong, or it's not about that, in which case it's irrelevant.

Re:Matt Mullenweg put on 'leave of absence' on Thursday September 10, 2026 @01:23AM (#49638747)
> While he technically holds the votes required to disband the board

This is very unlikely. True Ventures almost certainly controls at least one seat. (Until Phil Black left last year they actually held two seats, but that doesn't mean they had the right to. Either way, at the moment it's just Toni Schneider.)

Re:Matt Mullenweg put on 'leave of absence' on Thursday September 10, 2026 @01:08AM (#49638676)
In most venture-backed companies no, because board seats are one of the things you give major investors in exchange for their money.

In this case? Possibly! Ann Dunwoody and Sue Decker look like independents, and he might be able to unilaterally replace either or both of them.

Re:The Growing Threat of Docusign Phishing Attacks on Wednesday July 29, 2026 @08:41PM (#49104878)
There's no spoofing involved. DKIM would do quite literally nothing.
*> That's not what I said.

So close to spotting the mistake you made in your response to skippyfish, yet so far!

The onus is always on the writer. No one is owed an audience.
skippyfish: > the cost of reading [an infinite supply of arguments ...] remains high

you: > The cost of reading this story is not high

Do you see where you went wrong?

Older »