News for hackers. Stuff that matters.

guitarbill

Sure, we can ignore that specific example, and that software has an effect on the world, and that people have been trained to expect software to be deterministic and accurate.

Or if you want compare vibe coding with any technology, like electricity. Sure, that one person got electrocuted or their house burned down. But it's just so useful, and "somehow civilization continues to function". I guess they should've known better.

I'm personally not comfortable hyping up the benefits whilst ignoring the risks, especially for lay people.

One counter-example is the Horizon IT scandal. Obviously, you didn't say this directly, but "only a few people died/were affected, somehow civilization continues to function" maybe isn't the best argument.
Re:Heathrow scraps 100ml liquid container limit on Tuesday January 27, 2026 @06:29AM (#46778595)
> Germany has a very sad and weak airport security story.

The system you describe is hardly unique to Germany, so this just reads like hyperbole or inexperience travelling.

> Classic example of government run workflows

This I can agree with.

Re:Embassy: Modern embedded framework, using Rust and async on Thursday January 08, 2026 @10:57PM (#46549889)
I'm a fan of the RP2040 chip. It's a good trade-off between being simple and capable. There are more powerful chips like the STM32's, but frankly there are too many variants and their data-sheets are nightmarish. And there are simpler chips like the Atmel AVRs, but the tooling sucks. ESP chips are also good, but I haven't kept up with them so can't give much advice.

You'll want a dev board, which has the chip plus some supporting components on it. The Raspberry Pi Pico is a good choice because it's so widely used and well documented.

If you care about Rust, you'll also want to get the Debug Probe. Worth the money.

If you don't care about Rust, any Adafruit dev board should run CircuitPython, have good documentation, and likely some projects you can start with. The reason I don't recommend these for Rust is because many of their dev boards do not "break out"/make available the connections for a debug probe.

Edit: Having a project you want to do is good, but just making an LED blink can be magical, too, especially if you haven't done anything with hardware.

Re:Comic Code Reviews on Wednesday November 26, 2025 @10:51PM (#46065393)
I really like the idea... but I have to admit my first visceral reaction was "I hate this". I think it's because the tone and style is quite infantile/childish. A good experiment nonetheless. Maybe there's a middle ground somewhere?
You aren't wrong on either; Germany's tax law is insanely complex but also many people don't want to change the tax law as they can deduct a million and one things.
> Same story with rollover testing.

That's for occupants.

> Furthermore, the NHTSA doesn't do most testing.

Which is why I quoted IIHS and other non-US testing.

> NHTSA standards

Which standards are for e.g. pedestrian safety? The hood ornament thing?

> That's misleading. They don't test for pedestrian safety as part of the normal tests. But they test for it generally

No, it isn't and no they didn't/don't. E.g. GAO report from 2020 [0]:

> NHTSA’s last substantial update of NCAP was in July 2008 (with changes effective for model year 2011 vehicles). This update established additional crash tests and technical standards to protect vehicle occupants, but did not include pedestrian safety tests.

Or from NHTSA itself in 2022 [1], although note this is a "proposal" and "recommendations":

> For the first time ever, NCAP includes technology recommendations not only for drivers and passengers but for road users outside the vehicle, like pedestrians. The proposal [...]. We look forward to reviewing the comments we receive and considering them as we complete this important work.”

They will/might, by adopting Euro NCAP [2]:

> This final decision notice adds a crashworthiness pedestrian protection program to the New Car Assessment Program (NCAP) to evaluate new model year vehicles’ abilities to mitigate pedestrian injuries. Based on its previous research, NHTSA concurs with and adopts most of the European New Car Assessment Programme’s (Euro NCAP) pedestrian crashworthiness assessment methods [...]

> These changes to the New Car Assessment Program are effective for the 2026 model year.

But as of yet, this does not appear on their NCAP ratings: https://www.nhtsa.gov/ratings/resources-related-nhtsas-new-c...

[0]: https://www.gao.gov/assets/gao-20-419.pdf

[1]: https://www.nhtsa.gov/press-releases/five-star-safety-rating...

[2]: https://www.nhtsa.gov/sites/nhtsa.gov/files/2024-11/NCAP-Fin...

Downvote or not, it's true:

> NHTSA conducts frontal, side and rollover tests because these types account for the majority of crashes on America's roadways.

> IIHS tests evaluate two aspects of safety: crashworthiness — how well a vehicle protects its occupants in a crash — and crash avoidance and mitigation — technology that can prevent a crash or lessen its severity.

> As well as assessing how well cars protect their occupants, Euro NCAP tests how well they protect those vulnerable road users – pedestrians and cyclists – with whom they might collide.

Re:Major AWS Outage Happening on Monday October 20, 2025 @05:41AM (#45641925)
First, you try to normalise it:

> It is completely normal for staff to have to work 24/7 for critical services.

> Not only is it normal, it is essential and required.

Now you come with the weak "you don't have to take the job" and this gem:

> An employee’s lack of boundaries is not an employer’s fault.

As if there isn't a power imbalance, or employers always disclose everything or chance their mind. But of course, let's blame those entitled employees!

Re:Major AWS Outage Happening on Monday October 20, 2025 @05:27AM (#45641809)
Nice try at guilt-tripping people doing on-call, and doing it for free.

But to parent's points: if you call a plumber or HVAC tech at 3am, you'll pay for the privilege.

And doctors and nurses have shifts/rotas. At some tech places, you are expected to do your day job plus on-call. For no overtime pay. "Salaried" in the US or something like that.

Re:Framework under fire for Omarchy/DHH/Hyprland support? on Sunday October 12, 2025 @12:35PM (#45559521)
As far as I can tell, the author isn't claiming e.g. all of Usenet or IRC was affected. Only that this issue has been happening to communities for a long time in many different online places.
Re:The unexpected productivity boost of Rust on Wednesday August 27, 2025 @12:58PM (#45042147)
Sorry, it's not even close to Rust. Or even C# or Java. It can't provide the same "fearless refactoring". It is better than being blind/having to infer everything manually. That's not saying much.

And that's assuming the codebase and all dependencies have correct type annotations.

In the US, mugshots of people are published before they have been found guilty.

Comparing privacy laws by example is beyond ridiculous. And there are big cultural differences what "privacy" entails.

> law enforcement is in a difficult situation

Are they? More so than usual? This rhetorical device or similar seems to be always used, no matter the situation or time.

"Criminals are so sophisticated, our jobs are so hard, we need more power" - every police force ever.

"We actually need fewer capabilities and more checks and balances" - no police force ever.

> Now they are facing a situation where not just virtually all communications are encrypted

No, they aren't. Phone is unencrypted. Email is unencrypted. SMS is unencrypted. Some messengers are unencrypted.

Communications can be encrypted; I guess only criminals do that. Or banks. Or businesses. Or the government.

> but virtually all forms of evidence that document a crime are encrypted.

No, they aren't. Etc

> I feel like you're defending the system in Germany not because it's a better system as measured by some objective criteria but because it's the system that you identify with. Is there any sort of data to back up the assertion

This thread started by parent telling you how it is in Germany. Meanwhile, you have provided zero data or objective criteria yourself...

> Taxation without representation could not be juvenile thinking, it's a founding concept of my country which seems to be lost today

If by "my country" you mean the US, it's perfectly happy with taxation without representation. Current examples include the District of Columbia, certain situations in U.S. territories, and permanent residents. Past examples e.g. women.

Re:MySQL at Uber on Monday February 17, 2025 @08:15AM (#43078661)
Time and survivorship bias can explain the ultra-large MySQL usage, given it used to be the popular choice.
Re:Just: Just a Command Runner on Saturday December 07, 2024 @04:00PM (#42352824)
> Also has excellent Windows[1] support so I can take it everywhere!

Nit: You mentioned it can be used "everywhere". That would be a useful feature! But while it's kinda true, there's some quite big limitations IMO

Re:Just: Just a Command Runner on Saturday December 07, 2024 @01:53PM (#42351879)
Wait, by "has excellent Windows support" you mean you have to set it to use Powershell or hope `sh` is installed on Windows? I get that your project is Windows-only, but many projects aren't.

So not only do you need just installed, which is yet another dependency, but either you use the default settings and Windows devs need to have `sh` installed, or you set the shell to Powershell and macOS/Linux devs need to have that installed? Sorry, that doesn't sound great.

Edit: Yes, this seems to be true from https://just.systems/man/en/:

> Linux, MacOS, Windows, and other reasonable unices are supported with no additional dependencies. (Although if your system doesn’t have an sh, you’ll need to choose a different shell.)

> Recipes can be written in arbitrary languages, like Python or NodeJS.

Just no.

The post was edited, previously it just said roughly this part: "step 2 and 3 here: https://go.dev/tour/concurrency/1". Which - as far as I can tell - does not mention worker pools...
Re:I Didn't Need Kubernetes, and You Probably Don't Either on Wednesday November 27, 2024 @12:34AM (#42253240)
> Just feels like lots of devs will take whatever random configs they find online

Well it usually isn't a mystery. Requiring a developer team to learn k8s likely with no resources, time, or help is not a recipe for success. You might have minimised someone else's ops work, but at what cost?

> Supply needs to meet demand: we most need new housing where the economy is booming and jobs are being added.

> But you act like we need some federal authority to say, "okay guys, put housing HERE". That's totally unnecessary: if regulations are streamlined sufficiently, developers will build where demand exists. No central authority required.

Relax. I said no such thing.

>> But we also wouldn't have villages dying in the country-side, and extremely expensive cities/metro-areas.

> ???

> I'm sorry, are you unaware that most jobs aren't remote or something? This is a very strange and simple thing to misunderstand.

I'm just going to quote this for posterity, noting that you cut off "In an ideal world, it works." on purpose. Let's keep things civil, and not try to misrepresent.

Sure, absolutely. But we've also seen that landlords/owners are sometimes happy to keep units vacant. Or just use RealPage. How many vacant units are required? And where?

For what it's worth, I agree housing is nutty. But few desirable places have solved it. Not in the US, not in Canada, not in Europe. The "just build more" argument seems a bit simplistic. In an ideal world, it works. But we also wouldn't have villages dying in the country-side, and extremely expensive cities/metro-areas.

> Western governments have just become NIMBY-entrenched. The whole culture and bureaucracy is designed to make building things expensive, painful, and time-consuming, and then we look around and wonder why we can't seem to build enough housing.

Time and time again, companies have shown they will cut corners to make money. Much regulation exists to prevent people from being injured or killed, or for other legitimate reasons. Let's at least start by acknowledging that. (Of course petty bureaucrats and regulation do exist.)

> The various regulations were mostly well intentioned, but we've obviously gone too far.

How is this obvious? By the fact there is not enough housing where people want to live, and too much housing in other less desirable places? In the Western world in general? In Canada? In the US? In specific areas of the US/Canada?

> If private companies are unable to provide more of a product even when demand is obvious and prices are high, something is very wrong.

Unable... or unwilling? There's a difference between affordable housing and available housing. And ways to fix that other than flooding the market with so much housing to force an overabundance. That's kind of wasteful, too. For example, allowing developers to pay a one-time fine if they don't provide any affordable options in a new huge apartment block is probably a poor strategy.

I'm all for making things better. The "too much regulation" thing is just a bit too facile of an argument. In the US at least, there usually exist places where there is less regulation. Weirdly, people don't automatically move there.

Re:Why I love Rust for tokenising and parsing on Friday November 08, 2024 @12:21AM (#42084394)
rust-analyzer, the Rust LSP used in e.g. VSCode, can expand declarative and proc macros recursively.

it isn't too bad, although the fewer proc macros in a code base, the better. declarative macros are slightly easier to grok, but much easier to maintain and test. (i feel the same way about opaque codegen in other languages.)

Re:Using Rust in Non-Rust Servers to Improve Performance on Monday October 28, 2024 @11:09AM (#41971812)
I have a similar experience. Was drawn to Rust not because of performance or safety (although it's a big bonus), but because of the tooling and type system. Eventually, it does get easier. I do think that's a poor argument, kind of like a TV show that gets better in season 2. But I can't discount that it's been much nicer to maintain these tools compared to Python. Dependency version updates are much less scary due to actual type checking.
Re:Using Rust in Non-Rust Servers to Improve Performance on Monday October 28, 2024 @11:01AM (#41971694)
I don't really understand this argument, and it isn't the first time I've heard it. What problem other than name squatting does it solve?

How does a Java style com.foo.bar or Golang style URL help e.g. mitigate supply chain attacks? For Golang, if you search pkg.go.dev for "jwt" there's 8 packages named that. I'm not sure how they are sorted; it doesn't seem to be by import count. Yes, you can see the URL directly, but crates.io also shows the maintainers. Is "github.com/golang-jwt/jwt/v5" "better" than "golang.org/x/oauth2/jwt"? Hard to say at a glance.

On the flip side, there have been several instances where Cargo packages were started by an individual, but later moved to a team or adopted. The GitHub project may be transferred, but the name stays the same. This generally seems good.

I honestly can't quite see what the issue is, but I have been wrong many a time before.

Wasn't alive in the 60s and don't have a US perspective only a UK/EU one. My parents did see the Stones in the day and I distinctly remember them struggling to decide whether they should go see them in the 00s because tickets were 100€+ (seems cheap now!). But they are not "super-fans" I guess.

I also remember festivals getting more expensive 15-ish years ago, so my friends and me often decided to go hiking instead. IDK if that's a typical case but there are alternative "experiences". With the rise of social media I could understand there's additional incentive to go to more well-known events for the photos, over smaller live-music venues. At least it seems like a lot of photos are taken.

This is all anecdotes, so makes for an unsatisfying answer. But I think it's possible (certain) "experiences are more valuable to generations today". It's at least interesting to consider.

It sure seems that things like concerts, festivals, theme parks, even movies are more expensive than e.g. 20 years ago - though I don't have inflation-adjusted data on hand. If true, people are willing to pay more for these kinds of "experiences", and I'd have to agree with parent. Although I'm not sure if it really is a generational thing.

This doesn't mean what Ticketmaster is doing is right, but they are hardly the only ones. E.g. cinemas or theme parks don't use them.

Huh, "Hast du das gechecked?" used to mean "Hast du das kapiert?", with a quite negative connotation.

Older »