News for hackers. Stuff that matters.

ajross

Re:WTF Ubuntu? on Tuesday November 03, 2026 @08:24AM (#50351689)
You can't put a driver stack in a container. You can't put container stacks (c.f. Docker, Snap, Steam, Flatpak) in a container. Containers can't by default do oddball hardware access for oddball stuff like flashing firmware for your keyboard or 3D printer. You can't reflash your motherboard BIOS from a container.

The fact that your mental model of running your foreign Ubuntu software is "in containers" tells me you're probably mostly running backend/cloudy stuff. And yeah, that's largely a solved problem thanks to Docker (and for the same reason, "Dockerfile" is now a standard platform that everyone integrates and documents for by default).

Again, it's not like this can't be done from other distros, it's that it's fiddly and the instructions and defaults are all going to be for Ubuntu LTS.

Re:WTF Ubuntu? on Monday November 02, 2026 @03:48PM (#50343493)
> If Ubuntu disagrees, they should have said something

Exactly. There's room for considered differences of opinion, but that consideration requires discorse and explanation! The lack of communication here is just absolutely baffling. It's like they're deliberately trying to trash their own brand.

I mean, seriously what's going on? We know they have a process for emergency kernel updates, because of course they do. If they're not going to pull the trigger on this particular one (that everyone else is pulling the trigger on) at least make the case.

Re:WTF Ubuntu? on Monday November 02, 2026 @10:53AM (#50338572)
It's just the default target. For backend stuff, you're right that there's really very little true value. But client software just has a lot of complexity. If you run binaries from wherever, they're probably built and tested on Ubuntu first. Like, your vendors won't support distros officially, install scripts and AppImage integrations are going to tend to assume stuff. Driver/runtime integration for things like binary GPU stacks are going to document Ubuntu first. If someone makes an assumption about Python version (a personal peeve -- LOTS of python software ends up lagging the tip, it's not a super compatible ecosystem), it's going to be that you're running Ubuntu LTS version "one before latest", etc...

Are those fatal flaws? No. But lots of people just don't want to deal with it. And there's a market for that.

Re:Private Jet plane crashes in Florida on Monday November 02, 2026 @08:30AM (#50336580)
No, throttle was surely idle. The plane was just flying vertically. In a dive, you have a 1:1 thrust/weight ratio and can go extremely fast. The pilot reported an overspeed warning on the audio (which people should not listen to if they're sensitive).

My gut says this is a sudden icing incident. Folks are pointing out that they appear to have flown straight into the center of a cell at altitude. A developing thunderstorm is MUCH warmer than the surrounding air, because the water condensing out of the rising/cooling mass buffers the temperature (due to heat of fusion). It can even be supersaturated ("higher than 100% humidity") if this happens fast enough. The water vapor is just desperate for a nucleation site to condense on.

So you have a situation where a metal jet body that is maybe 30C colder than the medium suddenly flies through this soup. It can ice over in seconds to minutes, and the plane ends up with bricks for wings and much more weight than it was designed for, and simply can't stay in the air. Then it dives inexorably.

Re:Patrick Stewart taught us what good men do with power on Sunday November 01, 2026 @03:02PM (#50329174)
This sounds much more like "Please Don't Hold My Politicians Accountable" than "I favor accountability", FWIW.

I know decorum here disfavors talking about specific parties and actors, and this thread is 100% sideways. Nonetheless this kind of attitude is at best only a stepping stone to recovery. You can't both-sides your way through a constitutional crisis.

> Isn't the view that people having extra homes they use 5% of the time a very well-known and common criticism?

Not by Sam Altman, surely. Hypocrisy is an individual sin, you don't get out of it because everyone else thinks you're wrong.

To murder the humor: the joke is funny because the idea that we should centrally plan resource usage for the benefit of society as a whole and discourage/disallow individually driven use of those resources for individually popular but socially wasteful applications is... communism, basically.

You can repeat this analysis for pickup trucks or cross-continent travel or desert agriculture, ad nauseum. And we do. And people like Sam Altman tend very strongly to be on one side of the argument. Until they need more DRAM, then it's all "let's pull together comrades".

Late to the game, but I have to call out your shameless cherry picking. That elipsis in your wikipedia quote skips: "which triggered a stock market crash and bank runs in several countries." I mean, dude...

Yes, obviously, the subprime crisis was long in the making and has deep root causes. But the bank runs of 2008 and the frozen global financial system were 100% preventable, as they were a confidence shock (not a fundamentals thing) stemming from the sudden uncertainty due to Lehman.

A little assistance from the Bush administration in 2008 would have very plausibly produced a much softer landing and required a lot fewer bailouts overall. This really isn't controversial.

"Let them fail" is almost always the worst thing to do.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @07:55PM (#50311716)
> Who controls this controls me and that's not OK

I'm lost, are you arguing against Binance or against freezable crypto? Both "control" you! There are like three billion dollars out there in presumably-north-Korean-hands that their owners thought they "controlled". They didn't.

So given the choice, yeah, I'd like some safety please.

That's the logic that led to "Let's just let Lehman fail" and precipitated the 2008 crash. At scale, markets are not zero sum and failures sink all boats.

There are no good answers here. But pointing fingers and assigning blame is for sure one of the worst ways to do the analysis.

Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @09:02AM (#50303277)
I'm just saying that the scale of those cuts matters in the analysis. How many billion dollars of paychecks have been frozen?
Re:Binance-hacker-1029 – $5.6B stolen from Binance on Friday October 30, 2026 @01:06AM (#50300048)
> Freezing crypto is so disgusting to me I don’t know…

The feature literally appears to have just saved over two billion USD from being stolen! I mean, fine, "disgusting" is subjective. But the need for the feature is real and quantifiable (and very large) and it did what it advertised.

Re:Python's experimental JIT to be removed on Thursday October 29, 2026 @04:46PM (#50295665)
> LuaJIT handles double, strings, and dictionaries at near C level performance.

Yeah, but again you don't reach for C when you have a string or hash-based logic problem, which is the reason that other platforms are favored. You reach for Python[1] to solve those problems, and it works fine.

You reach for C when you care about cache footprint or memory layout. You reach for C when you need SIMD parallelism. You reach for C when you care about doing the math in single precision or 32 bit integers and will handle the precision worries yourself.

You emphatically don't reach for python (or Lua) in those situations. But notably you can reach for numba, and implement your small core of performance code in python next to the other logic you already have. And there's value there.

Screaming about using Lua instead is just nonresponsive. Lua is arguably better at performance code than Python. Lua is absolutely not faster than numba, nor will it ever be (absent a numba-like translation layer) and repeatedly trying to argue so is very much missing the point.

[1] Or fine, Lua or JS or whatever. But I'm trying deeply not to let this turn into a frothing language flame, and this is after all a python discussion.

Well, we all (hopefully) agree this should be legally protected.

But no, that's silly. The folks running these protests are the same population that's been protesting law enforcement in other contexts forever, and ACAB is a founding principle. They know as a matter of unshakable faith that the fuzz will cheat and lie and commit atrocities, and the the paradigm of the protest is to catch them in the act.

So failing to apply that to your IT work is... bad praxis, sorry. The one argument I can see here is if they actually wanted to get caught to troll an article just like this one. Which would make the operator in question a martyr and not a dummy, I guess.

These benchmarks and rankings seem more noise than signal these days. They're uniformly divorced from sincerely-attested real world experience. And the real world experience isn't driving any consensus either.

So here's a meta-benchmark: at what point does the act of choosing an LLM product for a reasoning task become less reliable (in the sense of "predictive of future success") than hiring a human being for that same task? Have we already cross that threshold? I think we might have.

And once we do... what happens then? Will the truly elite models be hidden in a sea of mediocrities simply because the goofball "managers" doing the hiring are too dumb to recognize their genius?

Re:Python's experimental JIT to be removed on Wednesday October 28, 2026 @05:10PM (#50280941)
> When OP wrote "inline Cython" they didn't seem focused on numerics, they talked about "proper C speed"

Isn't that basically what I said? Lua isn't "proper C speed", nor is PyPy, the cancelled Python JIT in question, nor even V8. That's a different problem area with different technologies. The fact that you like coding backend stuff in Lua or whatever isn't really saying much about whether numba is great.

But it is. Numba is great.

Re:Python's experimental JIT to be removed on Wednesday October 28, 2026 @03:07PM (#50279212)
Yeah, this is sort of the disconnect. Lua is a fast dynamic interpreter, sitting well above Python but rather below e.g. V8 in its ability to run scalar code over "interpreter types" like doubles and strings and vectors and hash tables.

The upthread comment was about an idea for "inline Cython", which was then hijacked because that's largely what numba is. These are technologies aimed at optimized native code running over native types to do stuff like numerics and ML and other HPC tasks. Lua isn't any more responsive to this domain than Javascript has been, it's not really the subject under discussion.

That's not actually true, though. In some sense all governments are posessed of "weapons" like this, the cost of use being only the violation of some norm. Or even law. The "rule of law" is a gentelemen's agreement at its core. Yet the world is filled with basically good governments who broadly follow that code!

So the way you treat that is by calling out and resisting the attempts to weaponize the government in new ways, not just throwing up your hands because it was "eventually" going to be used anyway. No, it's bad. You should say that it's bad and take action to oppose it.

Not really the bent of the article, but it's also worth pointing out that this shows some really terrible opsec practice by the activists in question. Like, no, you don't just spin up a cloud server to coordinate your protest activity and then ssh into it from your home IP. Dude...
There's no "selling" of data. These are just connection logs kept as part of routine auditing/anti-spam/anti-abuse practice by the ISP (something we all agree here is a good thing). And ICE appears to have gotten a warrant for them, which showed them the personal IPs of their targets.

You can argue the warrant was poorly justified (and I'd agree!), but I don't see a plausible world where "ISPs aren't allowed to do connection analysis on their own networks" is going to help anyone. Well, anyone except spammers. They'd love that.

Both-sides-ism is probably the single worst stance to take here. You're tacitly siding with whoever actually holds and wields the power. Not caring which one wins isn't helping anyone at all, even you.
Re:Python's experimental JIT to be removed on Tuesday October 27, 2026 @10:44PM (#50268755)
> Saying it can't be fast ever is a huge cop-out.

Maybe, but the world is still waiting for the counterexample. Python is simply not a runtime well-suited to optimization.

In the meantime, those of us who actually enjoy real HPC problems are using numba and rolling our eyes about all the confuffery around JITs. Maybe one will arrive that proves us wrong, but numba is fast today.

Re:Python's experimental JIT to be removed on Tuesday October 27, 2026 @10:30PM (#50268666)
> That's a really intense restriction.

Is it? An object field access in python is a dynamic hash lookup followed by a method call as a fallback (itself involving hashed lookups up the class hierarchy). That's not an "interpreter vs. native" kind of thing, that's just the semantics of the language that have to be preserved. And that's just not going to be "fast" in the way that the user of a JIT would want. Code dominated by Python datastructures is going to be "slow" in ways that JITs can't fix, ever.

Which is why Python appears to have given up on the effort in this space. PyPy too[1] really never delivered on the desired performance gains (like 5x or so on typical code) without forcing the user into careful optimization.

Numba, to its credit, doesn't even try. It falls back to python if it must for python stuff, but is quite clear that it's providing no benefit if that's what you're doing. And the stuff it does do is obvious and clean and extremely useful.

[1] PyPy is also looking pretty moribund recently.

Re:Python's experimental JIT to be removed on Tuesday October 27, 2026 @10:59AM (#50260388)
Yeah, this is numba. I find it really frustrating the extent to which people don't know about it.

Folks, numba is great. To first approximation: write your python function to "look like C"[1] and work over the numpy arrays you probably understand, put a "@jit" decorator on it, and you're done. It JITs and runs your code natively at native performance.

With some extra effort, there are features for SIMD vectorization and thread parallelism, and even GPU backends (that, full disclosure, I've been pretty frustrated by -- but they do work).

[1] Which is to say, don't touch Python interpreter data structures. No dicts or objects or lists or strings, etc... If you're bound by the interpreter[2] you're bound by the interpreter and nothing is going to help you.

[2] A corrolary here is that the kind of C code numba is NOT good for is "following pointers between structs", which is something that can't be expressed in either python or numpy.

I'm "going so hard" on this because you and the rest of the folks here are spinning so hard you're basically lying. You, at least, cite sorces. But your sources are attacks on the product. No one can do this on their own, you need resources and luck and the right combination of stuff. And... maybe it works, and maybe it doesn't. But it probably doesn't, the proof being that no one is getting unmasked/pwned/embarassed by this stuff.

The bottom line being that what you have amounts to a plausible security flaw. Which the market has been treating as such, reasonably effectively.

Yet you are all claiming that Google is literally offering "here's user data for sale at a price". Which they are not and never have. And that's not the same thing, and you know it.

It's one thing to claim a company's product is bad or insecure. It's quite another to lie about them. And fine, that produces a (sigh) "reactionary and emotional outburst". HN used to be so much better about rational discourse. Now it's all about who our enemies are.

They clearly don't sell "access to data". Selling "data" means I can pay them and ask a question about something and get an answer. That's what "data" is in common usage. It's information. Google doesn't sell anyone information like that. Period. Again, this is not in question.

Now, can you PLEASE try to restate your complaint in a way that isn't just a lie? Maybe construct it about how the "exploit" data that they hold internally? It can be done. But not like this. This is lying.

I know what upthread said, I literally (literally!) quoted it in my post. What you are claiming is (again, using the words from upthread post) categorically wrong. Google does not sell "access to" anyone's data[1]. Period. And if you genuinely believe you do I invite you to cite otherwise.

[1] I do note that you're the one caveating here, by trying to qualify "access" meaning "targeted adverts and content", which needless to say is not actually access to the data. Extensive attempts have been made over the years to try to deanonymize the ad feed (as often as not to get clicks at sites like this) and only a handful of holes have been found. There is no access to the data, period.

> As a deliberately hyperbolic example: "We're not selling child slaves, we only offer a marketplace where clients can bid for the use of the labor of the child slaves."

Then have that argument, please. If your argument is that "privacy impacts of advertising are bad and here's why Google's business model doesn't improve that" then that is one thing. Telling people that Google is selling your data is a lie.

Not by selling downstream clients access to my browsing data. Like, seriously: who do I call at Google and how much do I have to pay to get your browsing data? They don't sell that.

It's fair to allege all kinds of externalities and privacy impacts and such around the advertiser-driven content economy. And HN is 100% here for that.

But this is stepping across the line into a simple lie. They don't sell data.

> Google [...] sells downstream clients access to [your data]

This is categorically false. I don't know what you're trying to allege here, but it's not that.

The claim would be that the decisionmakers at Samsung are general industrialists and not people who understand the tech industry.

If you (an external entity in the example upthread, or just a random middle manager) walk up to Zuckerberg or Jassy with a proposal to tap their data for some comparatively small payment, they'd laugh in your face because they know how valuable what you're doing is and what the long term impact on their business will be. Samsung is far more likely to view that as "free money" and green light something awful.

Older »