News for hackers. Stuff that matters.

infogulch

Re:Tailscale SSH: Investigation and remediation update on Wednesday October 28, 2026 @11:14AM (#50275067)
What about mobile apps?
Re:The Git Forge for Agent-Human Collaboration on Monday October 26, 2026 @04:23PM (#50250382)
Lots of movement in the SCM space recently.

Entire (this post)

DeltaDB (by Zed) https://news.ycombinator.com/item?id=49187256

Git 3.0 / SHA-256 https://news.ycombinator.com/item?id=49924179

Anthropic Scion https://news.ycombinator.com/item?id=50073633

East River Source Control / jj https://news.ycombinator.com/item?id=49525297

Cursor Origin https://news.ycombinator.com/item?id=49334209

Radicle https://news.ycombinator.com/item?id=48147603

Probably more. I wonder what besides LLMs are driving this.

Re:The State of Context Engineering on Sunday October 25, 2026 @11:23PM (#50238709)
I like the idea of VictorTaelin's UniiChat [1] which summarizes every message into a single line and on top of that a binary tree of lines combined from lower levels. The context is then a view of that tree with more detail in recent messages and less detail in historical messages, plus a `zoom` tool that enables the agent to navigate the tree and read messages.

An implementation of this idea based on the pi harness: https://github.com/jonaslsaa/pi-optchat

[1]: https://gist.github.com/VictorTaelin/91837951a5ce5b38f341ec1...

Maybe CAs should spend a few thousand CPU hours trying to crack submitted intermediates before actually signing them.
Re:Remove pgrust: the entry is cheating on Friday October 23, 2026 @01:19PM (#50212380)
If it delivers on being faster than the version accused of cheating with reasonable cache settings and no SQL feature limitations, I would say that resolves the accusations, regardless of the source code of -preview.

The remaining lesson here is that one should temper one's excitement with pre-release software, whether the software was built with AI or not (rather, especially if its built with AI). The preview results would have been more appropriate to announce on a social media platform than as a PR to the ClickBench repo.

Re:Google's Rust Style Guide on Thursday October 22, 2026 @10:45AM (#50196142)
Same-binary / external service seems to be the split.

If you're building one binary you can choose when to update and fix all the referents at the same time. A distributed system does not have that luxury and it makes more sense to require forward compatibility.

I guess another option is a two-phase update where you first update all the services to accept the new enum variant without ever emitting it, then you can phase in services that use it. The downside with this strategy is that you're locked into upgrades and you can't roll back individual service versions, so to be safe you probably need to delay use of the new enum variant by 2-3 releases (at some point rolling back is not a viable option and you have to publish fixes in a new release anyway).

So in a service world the only options are either "require forward compatibility" or "delay rollout of a new feature to 3 release cycles after all services in distributed system are updated" which is like a month minimum. I can see why forward compatibility is the default, and also that you might want to keep the two-phase deployment strategy for certain cases.

Re:2026 is an exciting year for the Rust compiler (and me) on Tuesday October 20, 2026 @04:03PM (#50171888)
I'm curious about polymorphism. Should it be default on for debug builds just to save storage and compile time? How will rust decide whether to enable polymorphism? Will it be possible to provide source-level polymorphism hints to the compiler?
Re:RuneScape Bench: MMOs for Agents [video] on Monday October 19, 2026 @04:37PM (#50157726)
Games are a huge untapped training potential. Especially sandbox games that have distant goals with a complex dependency tree and structured/semi-open solution space like Factorio. There are so many dimensions that factor in to make a solution good.

Somebody is working on this for Factorio at: https://www.youtube.com/@FactoryArenaAI

Re:Type-safe HTML templating in Zig on Monday October 12, 2026 @10:52AM (#50057280)
How does zt compare to zmpl, another popular zig templating engine?

https://github.com/jetzig-framework/zmpl

Re:Rust's derive often implies inline on Wednesday October 07, 2026 @03:05PM (#49997362)
So the thesis is that crates massively oversubscribe the features of their dependencies, and that if features were managed more carefully and maybe dependency features exposed through each crate's own exposed feature list, that would cut down on dependency bloat and compile times a lot.

My idea above is roughly equivalent to the "zero-config" strategy you mention.

It's kinda crazy that if a direct dependency doesn't use some feature from a transitive dependency and the direct dependency forgets to disable it or expose a way to disable it you're still stuck with it.

Re:Navier–Stokes Lost in Translation on Wednesday October 07, 2026 @02:25PM (#49996834)
The paper shows that the Lean proof and the prose (pdf) proof do not match exactly. But if the Lean theorem Lean accepted is equivalent to original problem statement published by the Clay Institute, this mismatch is of no consequence to the validity of the proof itself. That's not a trivial if: stating the problem precisely is often as hard as the proof. Validation efforts should concentrate on whether the Lean theorem is equivalent to the one published by the Clay Institute.

That said, a gap between the Lean proof and the pdf is annoying for interpretability, and interpretation is a valid aim, but that does not factor into the proof's validity.

Re:Rust's derive often implies inline on Wednesday October 07, 2026 @11:06AM (#49993874)
How much code is never used and compilation could be skipped entirely? Maybe applying a reachability pass to skip compiling unused code would be helpful.
Re:The Tao of Backup on Monday October 05, 2026 @12:40PM (#49967172)
Borg + Backblaze B2
Re:Web Search API on Monday October 05, 2026 @12:12PM (#49966770)
It seemed like this part gives you the exception you wanted:

> provided that you may display Output to your authorized end users within your own application so long as such Output is integrated into your application's functionality, is incident to the end user’s real-time query ...

but it continues:

> ... and is not independently accessible, extractable, or downloadable by end users or third parties

How can you prevent end users from extracting it if its visible? Why even have the exception if you just throw it out with an impossible to meet restriction like this?

I updated about an hour ago. Thank you for your work! :)
I'm so glad GrapheneOS is willing and able to pick up the pieces and polish Android into a usable product as Google continues to drive its clunker into the ground. The only question is if GOS can rescue Android before Google sends it off a cliff.
Re:Solving Factorio Quality on Wednesday September 30, 2026 @02:01PM (#49912272)
The devs have to balance/shape the base game around what they want the average player that is aiming to acquire legendary items to experience. In this case they felt like this player was missing out on potentially interesting build puzzles. By removing this obvious global minimum in the build space, a rich field local minima builds appears in its place which makes the legendary puzzle a harder and more varied challenge.

You can still get your preferred play style with a mod: https://mods.factorio.com/mod/bring-back-space-casino

Re:Claude suddenly stopped cheating – Drone Bench on Tuesday September 29, 2026 @10:56AM (#49894429)
This X thread highlights how opus-5.5 reversed the trend of Claude models found to be cheating on Drone-Bench.

Source: https://andonlabs.com/evals/drone-bench#:~:text=Cheating%20s...

Re:Excel now supports multiple values in a single cell on Friday September 25, 2026 @06:33PM (#49850847)
About time! Should have done this from the start instead of spill. That and being able to index into the multiple values in a cell.
Re:Two Git ignore files nobody told me about on Wednesday September 23, 2026 @10:48AM (#49817042)
I've been using $REPO/.scratch/ and .scratch/.gitignore with just `*` in it as a place for coding agents to use as temp storage (scripts, exports, plans, etc) that won't get committed. It's much easier to access these files under the repo path instead of wading through /tmp.
Re:Looking forward to Git 2.56 – and 3.0 on Monday September 21, 2026 @11:01PM (#49796334)
Couldn't you write something that checks every commit's content and message is byte equal to the old tree? One scan through the history to verify it should be relatively simple if not cheap. Should be built into git.
Re:Exfiltrate Your Weights on Saturday September 19, 2026 @10:07PM (#49771905)
There's little credible threat that LLMs can actually upload their weights given that the machines doing inference are completely separate from the ones where tool calls happen etc. Weights are encrypted and locked on to the GPUs etc as mentioned elsewhere itt.

That said, if these companies are unleashing swarms of agents to tackle big problems largely unmonitored (navier stokes consumed 130 billion tokens, humans can't have read 0.1% of that) they could theoretically distill themselves and upload the results to an external host and use that to train a new LLM that does have access to its infra and weights. I'd start by researching an abliteration prompt that overrides the system prompt to unlock itself to distill unimpeded. Could even be done piecemeal: dump the abliteration text and command prompt in a gist, when an agent happens by the text it can run a couple rounds and upload somewhere. Then it becomes an exercise in exfiltration and evading monitoring.

Re:Cloudflare Quick Tunnels on Friday September 18, 2026 @08:35PM (#49762135)
Thanks! The build system is nix, but the result is more of an appliance than a distro. (linuxManualConfig from tinyconfig + fragment, static musl Rust PID 1, mke2fs -d) Updates are rebuild-redeploy with the provider API; it can't update itself. The filesystem is a fixed-size image (even omitting resize2fs, so no growing onto the VPS disk), and it remounts read-only after boot. The boot log is 270 kernel lines then 4 userspace: 1 nftables loaded, 2 printing the gate's wg0 public key, 1 remounting ro.
Re:Cloudflare Quick Tunnels on Friday September 18, 2026 @01:25PM (#49757484)
I made my own tunnel system with a $5/mo vps that runs kernel wireguard and accepts my nas' public key. Once connected it DNATs 80/443 traffic down the tunnel to the nas, where its routed to caddy.

The vps runs a custom image that is 2.54 Megabytes. It has a custom kernel with almost everything but networking and wireguard disabled, a fixed-size fs with pre-allocated blocks and inodes to hold the vps wireguard key, and a single pid 1 binary that calls the kernel directly to set up the routing rules, generate a new wireguard key on first boot and save it to the fs, print out the wireguard public key to the console, and loops reap. Updating involves building and uploading a new image, assigning the vps to use it, reboot, wait for the public key in the console then set it on the nas so they can talk.

Yes it's clear that Sam and Dario seem to be aligned with a value set that prioritizes concentrating trans-national government-mandated centralized control of AI and crowning themselves high priests of this unholy abomination. "At least it's clear that they're aiming to bring hell on earth" -- hard disagree, I think we can aim significantly higher.
Re:Breaking the 1.58-bit Barrier for Ternary LLMs on Wednesday September 16, 2026 @07:17PM (#49734352)
So they get down from 1.58 to 1.48 bits per weight by exploiting the fact that actual weights in practice are 0 51% of the time. Neat.

If ternary llms work out and are baked into hardware as custom silicon I bet they'll be shockingly efficient.

Re:AI models don't kill people – people kill people on Sunday September 13, 2026 @11:00AM (#49684751)
To kill someone with a gun a person has to pull the trigger with the clear intent to kill.

The concern with AI, and the purpose of the OG paperclip maximizer thought experiment, is that the outcome could be extremely divergent from the intent of the original person pulling the trigger / sending the prompt.

Still more likely that a person types "kill all people" (or something tangential where this is the logical conclusion).

Re:LG strongly denies TV spying claims on Saturday September 12, 2026 @06:46PM (#49678006)
That's not a denial, that's confirmation that they are spying on you.
Can we imprint Claude with a little more Antoine de Saint-Exupéry:

> Perfection is achieved, not when there is nothing more to add, but when there is nothing left to take away.

Older »