News for hackers. Stuff that matters.

kllrnohj

I have seen a significant number of excellent engineers just seemingly turn their brain off entirely and resort to just spitting out "but AI said <blah>" or "AI reported <foo> which I found surprising but I didn't analyze or dig into that result whatsoever". So anecdotally, yes, this absolutely matches my experience.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @08:13AM (#50179608)
As a percentage of websites, though, Java is far from ubiquitous. It's probably not even double digit percentages. PHP, meanwhile, is some 70% of websites. So in terms of exploit targets, this is 10x that of Log4J, maybe.
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @07:40AM (#50179238)
> While Go/Node have grown much more than PHP, PHP is definitely alive.

PHP still powers approximately 70% of websites

> xhtml was just a bad idea creating tons of problems and solving none.

Well an XHTML parser (and serializer) is a lot simpler, which is a pretty meaningful problem to solve.

What problems does xhtml create?

Re:Tesla Roadster on Friday October 16, 2026 @07:59PM (#50126393)
The thrusters are primarily pointed rearward and to the ground. It's not capable of doing much at all for a flat spin, the typical scenario of a car spinning out
I don't have a MacOS comparison point, but steam for me is pretty equivalent to the numbers in the article. ~10 seconds for a cold start, half a second for a warm start. Unless you have a very different definition of "take forever"? What are you seeing on MacOS?
> The Steam client is terrible

Things nobody has said since like 2005? A faster startup is certainly appreciated, but steam's 10 second cold launch time is hardly a big deal. Especially when everyone just leaves it running anyway. There's far more significant aspects like memory usage, game library, and general features.

Re:Passkeys Are Not a Trap on Wednesday October 14, 2026 @08:19PM (#50097498)
> as long as password-based login remains as an option.

which they have to be, right? since passkeys are "temporary" in that they are easily lost/destroyed/temporarily unavailable, and sites are supposed to support multiple of them?

Re:Linus Torvalds's first LLM-assisted patch series on Wednesday October 14, 2026 @02:49PM (#50092937)
I don't see anything in those criticisms that are remotely unique to C++.

Linux also built up inefficient abstractions in C that are used simply because they are easy to use. Linked lists being a go-to default choice being an obvious example.

Re:New Apple TV 4K on Tuesday October 13, 2026 @08:40PM (#50080959)
> Fair, but I just wasn't willing to put up with Android TV.

When I bought my Shield TV's I actually liked Android TV. Very nearly every update since then has just slowly made it worse and worse.

Now it's absolutely disgusting as it shows straight up advertisements (not "recommended shows", like literally ads for car insurance or whatever).

So I guess there's really just not much to choose between regardless. It's spyware + adware regardless of price vs. Apple's lack of local backup support :/

Re:New Apple TV 4K on Tuesday October 13, 2026 @03:53PM (#50077670)
The appeal of the Shield Pro is you don't have to deal with custom flashing a "no-name" device and you don't have to dual box to keep streaming services happy.

It's frustrating that nobody else seems to care about attempting to be the all-in-one box given how much Shield is showing its age now. It's really sluggish

I don't get why Apple just refuses to allow audio pass through or DV Profile 7. They're clearly on board with DV in general and don't hesitate to play Dolby's branding games, so why not profile 7 support???

Re:I guess I'm using WebP now? on Monday October 12, 2026 @12:33PM (#50058883)
You have that backwards. HEIF is the container format. HEIC is a HEIF file using HEVC.
Re:I guess I'm using WebP now? on Monday October 12, 2026 @12:32PM (#50058861)
HEIF is a container not a codec. HEIC is HEIF + HEVC.

AVIF and HEIC both use HEIF

Re:I guess I'm using WebP now? on Monday October 12, 2026 @10:57AM (#50057359)
RIFF itself is fine, but in the context of webp it's pointless. WebP doesn't make any use of being in a riff container. Like it still internally has its own chunk system anyway. So you end up with a single RIFF chunk for the webp file that itself then can contain multiple, non-RIFF chunks
Re:I guess I'm using WebP now? on Sunday October 11, 2026 @11:09PM (#50050916)
well that depends on the size of the image. But a modern cell phone is shooting 50mp+, and at that size you're talking 50-200ms for a jpeg vs. a couple seconds for HEIC. Which is borderline instant-feeling vs. extremely not instant.
Re:I guess I'm using WebP now? on Sunday October 11, 2026 @09:12PM (#50050064)
hardware-decoded HEIC is around 10x slower than JPEG.

software-decoded HEIC is around 100x slower than JPEG.

WebP is something like 20-50% slower than JPEG, so still solidly an order of magnitude faster than best case hardware-accelerated HEIC decoding.

Re:I guess I'm using WebP now? on Sunday October 11, 2026 @05:26PM (#50047975)
Only for HEIC realistically, and that only still causes it to struggle to match jpeg or webp performance anyway
Re:I guess I'm using WebP now? on Sunday October 11, 2026 @05:24PM (#50047956)
Yes, it's important to distinguish annoyances of the codec from annoyances of the ecosystem.

Ecosystem being slow to adopt it is something that can be fixed or improved, but also more importantly (given jpegxl & avif comparisons) are things that will impact any new image format.

Meanwhile annoyances of the codec tend to be things that are dramatically harder to deal with. Like HEIC being a license minefield and also slow as shit. Or that many of these newer image codecs do not have ways to work with them in a memory efficient manner like jpeg does (see eg libjpeg-turbo's sample size & skip scanline options). Or WebP insisted on being in a RIFF container for... uh... absolutely no fucking reason whatsoever afaict. Fortunately RIFF is so trivial that this overhead doesn't actually matter in practice, but then HEIC & AVIF dials up the annoying container bullshit to 11 thanks to their video heritage with ISOBMFF

Re:Git 3.0's upcoming SHA-256 default will be a costly mistake on Thursday October 01, 2026 @07:57PM (#49928388)
> Yes us Hacker News users have plenty of use cases for IPv6, like self-hosting

Funnily enough, self hosting is why I can't use IPv6. I want vlan isolation, but only get a /64 from my ISP.

Fortunately the lack of IPv6 also isn't a meaningful loss anyway so whatever

Re:Linux support is coming to Snapdragon X2 Series on Thursday September 24, 2026 @01:03PM (#49833592)
The Snapdragon X2 laptops are typically not fanless, either. Fanless just results in thermal throttling if you ever do push on it.

Fanless just means slower.

Re:Linux support is coming to Snapdragon X2 Series on Thursday September 24, 2026 @11:46AM (#49832333)
So get a newer, better, and cooler CPU? That really has nothing to do with ARM or x86.
Re:Linux support is coming to Snapdragon X2 Series on Thursday September 24, 2026 @09:40AM (#49830449)
> Needing the kernel to be changed for each device is an Androidism

It's an Armish not an Androidism. It's an embedded legacy that really doesn't make sense anymore. But inertia is powerful enough that even Apple is still using device trees, even on their M series SoCs ( https://asahilinux.org/docs/fw/adt/ )

Re:What Zig felt like, coming from Rust on Saturday September 19, 2026 @12:38PM (#49767975)
> Zig is aiming to be lower level than Rust.

Zig and Rust are equivalently "low level". Zig isn't any closer to the hardware than Rust is.

> but I believe its advantage over Rust for that specific application is that you have tighter control over exactly when memory is allocated and deallocated, and how data is laid out in it.

Rust gives you all this, too.

Zig's primary (possibly only) advantage over Rust is that it has much faster compilation times.

Re:What Zig felt like, coming from Rust on Saturday September 19, 2026 @12:34PM (#49767930)
Zig is exciting to people that still actually like C. Is that a rationale choice? Not very often. Is it a wrong choice? Also again not very often. At least, not for anything in scope of a solo dev.

The industry where it seems strongest positioned is embedded. Will it actually break into that domain? No idea.

Re:What Zig felt like, coming from Rust on Saturday September 19, 2026 @12:09PM (#49767707)
std::allocator was so painful to use it was almost always easier to just reimplement the container instead (especially for trivial ones like vector).

I haven't used the relatively new C++17 polymorphic_allocator, though, maybe it fixes this.

Re:What Zig felt like, coming from Rust on Saturday September 19, 2026 @11:10AM (#49767194)
And those games do so in a language (C++) where allocators is not a headline feature, and is barely even supported at all in the standard library.

The important part is a language where the standard library isn't special, and Rust has this property, too. So in domains where things like per-frame allocators are useful, you can still have them. That capability just isn't cluttering up the more common path where that isn't useful.

the trillion dollar AI companies will be the chip designers for the hyperscalers, and probably not worth a trillion dollars as a result
The labs still have performance as a differentiator for coding usages and similar, and for other things there's still all the same reasons people switched cloud hosted stuff in the first place. AWS & friends didn't get popular because the hardware was out of reach, after all.
Re:Java 27 Released on Tuesday September 15, 2026 @11:34AM (#49714138)
> There's only a platform version,

And of the 4 non-preview JSRs in the Java 27 release, only 1 of them is actually part of the "platform version".

The other 3 are strictly changes to Hotspot internals with no platform involvement at all. They did not change any aspect of any Java platform in any way whatsoever. That is what I'm referring to. I'm not referring to the fact that the core library, language syntax, and runtime specs are all part of the same version. I'm referring to the fact that Hotspot specific behaviors and adjustments are also branded as being part of the platform release.

Like there's no Java 27 platform spec that says that G1 is the default garbage collector. That would of course be an absurd platform spec change. But that is still somehow a "feature" of the Java 27 release according to Oracle.

Re:Java 27 Released on Tuesday September 15, 2026 @10:12AM (#49712832)
Fair, although even there I don't know if I'd call that "lots" at just 23 added or modified methods that aren't in preview

Older »