News for hackers. Stuff that matters.

killme2008

Re:Malicious Rust crate Arrayref runs a build-time payload on Thursday August 20, 2026 @02:03PM (#49378042)
It's a pity that progress has been so slow.

https://github.com/rust-lang/cargo/issues/17009

Re:Malicious Rust crate Arrayref runs a build-time payload on Thursday August 20, 2026 @02:01PM (#49378021)
We really need Cargo RFC #3923 https://github.com/rust-lang/rfcs/pull/3923

It would allow projects to avoid newly published dependency versions until a configurable waiting period has elapsed.

npm has had a similar min-release-age feature for years.

Re:Git at Any Scale on Thursday August 20, 2026 @01:46PM (#49377794)
It's time to look back on S3's 20-year history

https://blog.fnil.net/s3-at-twenty/

Re: on Tuesday June 16, 2026 @01:44AM (#48551046)
An open-source, cloud-native observability database released v1.0 after four years of hard work.
Re:Ask HN: What Are You Working On? on Saturday June 13, 2026 @06:18AM (#48515620)
Working on a personal project: langfuse on GreptimeDB, try to make S3 optional.

https://github.com/tma1-ai/openfuse

Re:Bringing Clojure programming to Enterprise (2021) on Thursday April 02, 2026 @06:03AM (#47612294)
I wrote Clojure for about five years. Left when I changed jobs, not because I wanted to. It's genuinely one of the most productive languages I've used, and I still miss the REPL-driven workflow.

One thing I built: defun https://github.com/killme2008/defun -- a macro for defining Clojure functions with pattern matching, Elixir-style. Still probably my favorite thing I've open sourced.

Show HN: TMA1 – Local-first observability for LLM agents

https://tma1.ai/

Hi HNI built TMA1 because I wanted better understanding of what coding agents are actually doing — token/cost usage, tool calls, latency, failures, full session replays, etc. The most important part is that I don't want to sign up for or send data to any cloud service.And of course it's opensourced:https://github.com/tma1-ai/tma1

( Read More... | no comments | 2 points | on HN )
Re:Push events into a running session with channels on Thursday March 19, 2026 @09:10PM (#47449000)
Claude caught up pretty quickly. I think OpenClaw’s core value is the channel, heartbeat, and the open-source ecosystem.
Re: on Wednesday February 04, 2026 @09:48AM (#46886456)
Hi HN — I’m the creator of GreptimeDB. We just shipped v1.0.0-rc.1 (our first 1.0 release candidate / feature-freeze milestone).

Highlights:

Online region repartition (SPLIT/MERGE) to adjust partitions at runtime (distributed clusters; shared object storage + GC).

Faster Metric Engine PK filters via memcomparable byte comparisons (microbench: ~20–90× on dense codec).

PromQL planner prefers TSID (skips unnecessary label columns).

Would love feedback from folks running observability/time-series workloads, especially on upgrade paths + repartition behavior in real clusters. GitHub releases/changelog: https://github.com/GreptimeTeam/greptimedb/releases

Re:Logging Sucks on Tuesday December 23, 2025 @04:58AM (#46363965)
This thread overlaps a lot with "Observability 2.0 and the Database for It" (https://news.ycombinator.com/item?id=43789625). The core claim there is: treat logs/spans as structured "wide events", and build a storage/query layer that can handle high-cardinality events so many metrics become derived views rather than pre-modeled upfront. It also argues the hard part isn't "dump it in S3", it’s indexing/queryability + cost control at scale.

In an agentic AI world this pressure gets worse: telemetry becomes more JSON-ish, more high-cardinality (tool names, model/version, prompt/template IDs, step graphs), and more bursty, so pre-modeling every metric up front breaks down faster.

Re:MinIO is now in maintenance-mode on Wednesday December 03, 2025 @01:39PM (#46138228)
I can't believe they made this decision. It's detrimental to the open-source ecosystem and MinIO users, and it's not good for them either, just look at the Elasticsearch case.
Re: on Thursday November 27, 2025 @01:03PM (#46071694)
Hi HN, I'm Dennis from Greptime. This article is based on a talk by our engineer Ruihang Xia, who is also a PMC member of Apache DataFusion.

The most surprising finding for me was the hash seed trick - using the same random seed across HashMaps in a two-phase aggregation gives you ~10% speedup on ClickBench. The bucket distribution from the first phase can be preserved during merge, eliminating rehashing overhead and making CPU cache happy.

We also discuss why Rust's prost library can be significantly slower than Go's protobuf implementation, and how fixing it improved our end-to-end throughput by 40%.

Happy to discuss Rust performance optimization or DataFusion internals.

Re:Ion: Modern System Shell in Rust on Monday November 17, 2025 @06:12PM (#45959528)
Yeah, that’s true — Microsoft’s report (https://www.microsoft.com/en-us/msrc/blog/2019/07/why-rust-f...) says the same thing, and Google’s recent post on Rust in Android (https://security.googleblog.com/2025/11/rust-in-android-move...) backs it up too.

We’ve been using Rust for about seven years now, and as long as you stay away from fancy unsafe tricks, you really can avoid most memory safety bugs.

Re:Compiling Ruby to Machine Language on Monday November 17, 2025 @06:08PM (#45959494)
Glad to see that Ruby Under a Microscope is still being updated. It’s an essential read for anyone who wants to understand how Ruby works internally — and I truly enjoy reading it.
Re:I can't recommend Grafana anymore on Sunday November 16, 2025 @01:30PM (#45947242)
I didn’t mean SQL over PromQL — they’re designed for different layers of problems. SQL has a broader theoretical scope: it’s a general-purpose language that can describe almost any kind of data processing or analytics workflow, given the right schema and functions.

PromQL, on the other hand, is purpose-built for observability — it’s optimized for time‑series data, streaming calculations, and real‑time aggregation. It’s definitely easier to learn and more straightforward when your goal is to reason about metrics and alerting.

SQL’s strengths are in relational joins, richer operator sets, and higher‑level abstraction, which make it more powerful for analytical use cases beyond monitoring. PromQL trades that flexibility for simplicity and immediacy — which is exactly what makes it great for monitoring.

Re:I can't recommend Grafana anymore on Saturday November 15, 2025 @12:37PM (#45939086)
Hi there, I’m from the GreptimeDB team.

Thank you for giving GreptimeDB a shout-out—it means a lot to us. We created GreptimeDB to simplify the observability data stack with an all-in-one database, and we’re glad to hear it’s been helpful.

OpenTelemetry-native is a requirement, not an option, for the new observability data stack. I believe otel-arrow (https://github.com/open-telemetry/otel-arrow) has strong future potential, and we are committed to supporting and improving it.

FYI: I think SQL is great for building everything—dashboards, alerting rules, and complex analytics—but PromQL still has unique value in the Prometheus ecosystem. To be transparent, GreptimeDB still has some performance issues with PromQL, which we’ll address before the 1.0 GA.

Re: on Thursday November 13, 2025 @07:21PM (#45922442)
A technical discussion on the limits of current observability stacks and what a merged data model could look like.
Re:Harder, Better, Faster, Stronger Version of Uber H3 in Rust on Tuesday November 04, 2025 @07:04AM (#45809988)
Hi. I am from GreptimeDB team. We use h3o library to implement h3 functions:

https://docs.greptime.com/reference/sql/functions/geo/#h3

These functions encode and decode latitude/longitude to H3 cells and provide utilities for querying cell properties, neighborhoods, distances, and relationships.

Thank you for evaluating GreptimeDB.

We agree that fine-grained access control is important. A read-only user role will be available in the next major release.

Re: on Thursday July 17, 2025 @02:45AM (#44590435)
Insight: Claude Code uses Haiku model for lightweight tasks, Opus for complex ones.
Re:The Dawn of Nvidia's Technology on Tuesday May 20, 2025 @02:39PM (#44044523)
Really fascinating story—thanks for sharing! Graphics programming has been a major driving force behind the widespread adoption of object-oriented programming, and the abstraction of devices in this context is truly elegant.
This article summarizes our experience from a commercial project that runs on an in-vehicle Android system. In this project, we needed to invoke Rust code(DB) from Java(App), so we couldn't directly use the project’s source code for demonstration. Instead, we created a demo project: https://github.com/GreptimeTeam/rust-java-demo

1. I agree that using Rust doesn't necessarily mean faster performance; it simply gives you the opportunity to implement some compute-intensive modules in Rust, which is a possible approach.

2. This is a great suggestion, and we organized our project in the same way. You don’t need to use unsafe for every call. However, if you want to call JNI APIs from Rust, unsafe is required.

3. Sorry, some details were missing here. We use AsyncRegistry(Java) as an intermediary. Before initiating an async operation in Rust, we need to call Java code in advance to register a future and obtain a unique future ID. After the async execution completes, we retrieve the registered future by its ID, and then complete it or complete it exceptionally depending on the async result. You can refer to this code: https://github.com/GreptimeTeam/rust-java-demo/blob/90ffa0ba... and https://github.com/GreptimeTeam/rust-java-demo/blob/90ffa0ba...

4. This article was not generated by AI; it’s just that our official blog has a fixed template at the end. Sorry for the inconvenience.

Older »