News for hackers. Stuff that matters.

folex

> The executables in our benchmark often have hundreds or thousands of functions — while the backdoors are tiny, often just a dozen lines buried deep within. Finding them requires strategic thinking: identifying critical paths like network parsers or user input handlers and ignoring the noise.

Perhaps it would make sense to provide LLMs with some strategy guides written in .md files.

this is exactly how I work with cursor

except that I put notes to plan document in a single message like:

   > plan quote
   my note
   > plan quote
   my note
otherwise, I'm not sure how to guarantee that ai won't confuse my notes with its own plan.

one new thing for me is to review the todo list, I was always relying on auto generated todo list

Re:The Gleam Programming Language on Wednesday January 14, 2026 @04:10AM (#46613939)
> static types often reduce to a bunch of optionals, forcing you to null check every field

On one end, you write / generate / assume a deserialisator that checks whether incoming data satisfies all required invariants, eg all fields are present. On the other end, you specify a type that has all the required fields in required format.

If deserialisation fails to satisfy type requirements, it produces an error which you can handle by eg falling back to a different type, rejecting operation or re-requesting data.

If deserialisation doesn't fail – hooray, now you don't have to worry about uncertainty.

The important thing here is that uncertainty is contained in a very specific place. It's an uncertainty barrier, if you wish: before it there's raw data, after it it's either an error or valid data.

If you don't have a strict barrier like that – every place in the program has to deal with uncertainty.

So it's not necessarily about dynamic / static. It's about being able to set barriers that narrow down uncertainty, and growing number of assumptions. The good thing about ergonomic typing system is that it allows you to offload these assumptions from your mind by encoding them in the types and let compiler worry about it.

It's basically automatization of assumptions book keeping.

Re:The Gleam Programming Language on Wednesday January 14, 2026 @04:00AM (#46613876)
> ends up being the same checks you would be doing with a dynamic language

Sure thing. Unless dev forgets to do (some of) these checks, or some code downstream changes and upstream checks become gibberish or insufficient.

Where does the stereotype 'thesaurus = synonyms + antonyms' come from?

I'm not a native english speaker, and I never heard that idea besides in, I'd guess, Friends TV show.

I've used thesauruses since my childhood for exactly the task of looking up meanings, explanations, perhaps some etymology baked in.

For English, I always use WordNet, it is quite good and works offline on Android.

For my basic level of Chinese, Outliers dictionaries are so far the best I have found, but that's mainly due to my heavy reliance on the etymology provided there.

Well, I guess I got carried away a bit. Back to my question, where thesaurus=synonyms+antonyms comes from?

Re:Tailscale vs. Narrowlink on Friday August 11, 2023 @10:44PM (#37096477)
Re:What gets to the front page of Hacker News? on Tuesday July 04, 2023 @03:17PM (#36591389)
I like that the URL is basically the answer to the question.
I wouldn't describe it as a comedy as well.

However, I'd recommend Murderbot series, it is full of humour and shares atmosphere of Bobiverse and this personal approach to characters, as well. Highly recommend.

Re:Ryuichi Sakamoto Has Died on Sunday April 02, 2023 @06:12PM (#35415825)
/05
I'm yet not doing this, unfortunately. API limits wouldn't allow me to load in some IRC chat there.
I can't really wait for tooling to visualise complex technical concepts into nice animations and static images.

Imagine describing how some system works, what it consists of, and get architecture images + process animations.

Retrieve information from public technical chats to provide Q&A on programming languages, technologies, engineering approaches and so on.
I can't wait for a tool that would allow me to draw architecture diagrams, and maybe even process animations to explain how my software works.

https://scribblediffusion.com/scribbles/nca3ivborbebhipju6jg...

Being in the Rust full time for last 2 or 3 years: it is quite a pain to setup a release process for big Rust workspace.

Version incrementing, packaging wasms, dancing around code generation – all doable, but not standardized.

There's a release-please to automate all that, but it's not an easy task to set it up in all of your repos.

Besides, if in addition to Rust projects, you have projects in other languages like JavaScript, then you have to do it twice and struggle with understanding all of the package management systems provided by all languages you have.

A single swiss-army-knife package manager would be amazing.

Yes!

I'm in a team that works on a pet prog lang for distributed systems, and we did some research of using an existing package managing system. We've settled on NPM for now, but god I wish there would be a better generic package manager out there.

Re:Ruby on Jets: Like Rails but Serverless on Sunday January 22, 2023 @04:56AM (#34475888)
we're building open serverless-centered cloud-like p2p network to aolve exactly this issue. to eliminate vendor lock and make it open so anyone can both provide and consume compute resources and develop backends on top of that.

https://fluence.network

Re:A command line tool that draw plots on the terminal on Friday January 13, 2023 @05:37AM (#34366062)
awesome!
pile of tickets is a very nice metaphor
Re:Show HN: Kitchen Renovation ideas using Stable Diffusion on Monday October 10, 2022 @11:26AM (#33152588)
Do you think it's gonna be a tool used by these "average teams" or like a standalone self-serve product without any service human involved? I'd bet on a former, but why do you think?
Re:Make-A-Video: AI system that generates videos from text on Thursday September 29, 2022 @11:10AM (#33021795)
I wish to have such a tool to generate tutorials for different technologies. Like distributed systems, consensuses, replication, this kind if stuff.

Something like: there are 10 peers, A sends to B, B waits for C, yadayada.

Re:Ask HN: Who is hiring? (August 2022) on Monday August 01, 2022 @11:51AM (#32307820)
Fluence | Full Remote | Worldwide

Distributed VM over a p2p network.

https://fluence.one/join.html

https://github.com/fluencelabs

One of the target audience are distributed systems researchers: we provide a high-level strong-statically typed prog language for distributed systems.

Looking for:

    - Scala / Haskell people who are into writing compilers and designing prog langs are most wanted;
    - Distributed systems engineers and researchers;
    - People proficient in scaling p2p networks (if you exist!);
    - Engineering Manager;
and more :)
Awesome! Can it be used for Rust?
Re:WebAssembly: The New Kubernetes? on Friday January 21, 2022 @12:41PM (#30027014)
It depends on specific WASM runtime implementation, but usually you have to be explicit about allowing each syscall.
Re:WebAssembly: The New Kubernetes? on Friday January 21, 2022 @07:53AM (#30022752)
> This post describes something like Erlang actors, but if each can be a pure function encoded in WASM...

Not just a dream. https://github.com/fluencelabs/fluence

Re:WebAssembly: The New Kubernetes? on Friday January 21, 2022 @07:47AM (#30022699)
I'd say that article compares WebAssembly to Docker/moby/other container runtimes, not k8s.
Re:WebAssembly: The New Kubernetes? on Friday January 21, 2022 @07:36AM (#30022551)
Multiplexing between several WASM modules is exactly how services are organized on https://fluence.network

Each peer in a p2p network can host multiple services and expose their API to the network. Each service, then, is a collection of WASM modules that interact with each other in FFI manner.

How about XMPP performance on low-performance networks like mobile ones?

I believe poor networking performance was one of the reasons XMPP had to be customised in WhatsApp and overall didn't become as widely used as I'd like it to be :)

Is it still the case? Or was that problem addressed at standard level somehow?

Re:A not so gentle intro to web3 on Monday January 03, 2022 @09:56AM (#29781361)
take plain old database, then add requirements 1) to be public, 2) not controlled by a single entity, 3) stored data is objectively consistent, and you basically get a blockchain
Re:How Telegram Messenger circumvents Google Translate's API on Friday December 31, 2021 @07:20AM (#29747375)
such APIs could be running on https://fluence.network with an interoperability and composition across different services

Older »