News for hackers. Stuff that matters.

rwallace

Re:Northflank Breached on Saturday October 31, 2026 @03:42AM (#50314013)
No. The Chinese have already developed frontier models. And we would be fools to assume that's a permanent end to the list. North Korea has nuclear weapons. Iran has ballistic missiles and leading edge military drones. There is no fundamental reason why both countries shouldn't be able to train frontier AI models.

Trying to protect ourselves by putting restrictions on the technology would be like trying to hide from a tiger by wrapping a towel around our heads on the basis that if we can't see it then it can't see us. That trick only works on imaginary monsters, not real ones.

Re:Linux 7.3 Released on Monday October 19, 2026 @05:58PM (#50158656)
I haven't used Proton, but based on my experience with other cloud storage products and seeing other people's reports thereon, it looks to me like you are running into the problem that there are two different use cases for them with opposite requirements:

1. Local storage is cheap, I have lots of it. I want multiple copies of my data so that they will serve as backups. I want everything in the cloud to be copied locally. (I'm in this category.)

2. Local storage is cheap if you look at the price of external hard disks, but my phone or tablet only has a limited amount of it, and no way to upgrade without buying a whole new device, so it is scarce for me. I want nothing in the cloud to be copied locally, unless I am specifically using it on this device. (Sounds like you're in this category.)

Half the people think the first use case is the obvious one. Half the people think the second is the obvious one. And that includes developers, who will design the product accordingly without giving it much thought. So either half the users get a nasty surprise in the form of running out of disk space, or the other half risk an even nastier surprise in the form of data loss.

Obviously, computers pester us with too many questions these days, but I think this is one case where the software really does need to ask the user which behavior they want. Perhaps with a hint based on how much local disk space seems to be available.

Yes, I think that's what the paper is saying. The validation is the hard part, but the part that provides the value, because it's what makes the result actually useful.
Re:America has become an entrepreneur's paradise on Monday July 27, 2026 @07:54PM (#49077312)
Eh.

There are certainly things wrong with today's economy, starting with housing being treated as a financial asset, which encourages laws that create an artificial scarcity of it. I'm not saying there is nothing to complain about.

But the fact that not everyone is working purely to create necessities, that some of our economic output consists of luxuries? I don't really see that as a problem to be solved. If anything, I think it's a good sign. Let's not fall into the trap of just randomly complaining about everything.

Re:Floor and Ceil versus Denormals on CPU and GPU on Sunday May 31, 2026 @11:19AM (#48346403)
Ah! So let me paraphrase to make sure I understand. In your experience, the real use case of denormals is not that you want to compute with them. It's that they are a useful error signal, because they typically indicate that the equations are badly conditioned, which means the results cannot be trusted. So in that scenario, silently flushing them to zero is bad, but so is silently computing with them. What you really want is for denormals to raise an exception?
Re:Floor and Ceil versus Denormals on CPU and GPU on Sunday May 31, 2026 @10:08AM (#48345811)
The one way I know of for denormals to arise in real calculations is when you have a process that converges on zero. In which case, values will pass through the denormal range on the way from the normal range down to zero. And converting denormals to zero is obviously correct.

What other cases have you seen of denormals arising in real calculations?

Because they believed only a small fraction of customers would care a lot about a better Basic interpreter, whereas the vast majority would care about price. As for giving things away for free, Commodore was already engaged in a cutthroat price war with Texas Instruments that almost sank the company. They could not afford to give anything else away for free.
I didn't know about that event. What did he say to get booed that time?
Re:80386 Protection on Friday February 27, 2026 @08:45AM (#47180439)
I looked into that, concluded the spoiler is Specter.

Basically, you have to have out of order/speculative execution if you ultimately want the best performance on general/integer workloads. And once you have that, timing information is going to leak from one process into another, and that timing information can be used to infer the contents of memory. As far as I can see, there is no way to block this in software. No substitute for the CPU knowing 'that page should not be accessible to this process, activate timing leak mitigation'.

Re:Tell HN: Happy New Year on Wednesday December 31, 2025 @09:37AM (#46444416)
Happy new year from Ireland!
Re:Migrating the main Zig repository from GitHub to Codeberg on Thursday November 27, 2025 @12:58AM (#46066166)
Sure. If you feel the need to write "this is shitty code", fair enough, I'm fine with making allowances for that kind of language. But please leave it at that, instead of also insulting the people who wrote it. There are, unfortunately, plenty of ways for bad incentives to result in competent people creating bad products.

Ask HN: Stories from Users of Minicomputers and Mainframes

I showed up too late to catch more than the tail end of the minicomputer era. I'd like to learn more about the computers that predated the 8-bit micros I fondly remember.There is plenty of information on the technology of machines like the VAX, PDPs, 360 etc. Quite a bit also on how they were built. ('The Mythical Man-Month' and 'The Soul of a New Machine' are generally recognized as classics....

( Read More... | 2 comments | 2 points | on HN )
Re:Cybersecurity Training Programs Don't Prevent Phishing Scams on Thursday October 09, 2025 @10:01PM (#45534801)
In general, if a program is not a Web browser, I do not want that program getting clever with displaying a URL as an active link. Just show it as the URL, https prefix and all, so I can see where it will be taking me if I copy it into the browser. (This is one of my very few gripes with Google docs.)
Re:Seeing Like a Software Company on Wednesday October 08, 2025 @12:25PM (#45517909)
Fair enough! If you ever have the time and inclination to write it up as a blog post or such, I would love to read it.
Re:Seeing Like a Software Company on Tuesday October 07, 2025 @11:46PM (#45511851)
I disagree with your second sentence above. I think it is shallow dismissals that are inappropriate here. Conversely, I have upvoted a number of long explanations of interesting topics.

If you don't have time to write a detailed refutation, that's entirely understandable! But if you do, I would love to read it.

I did appreciate your paragraph length comment on the matter elsewhere in this thread.

Re:Arenas in Rust on Sunday October 05, 2025 @11:09AM (#45482073)
Or unless delete is a rare operation. So yeah, to make the best decisions here, you need to know expected numbers as well as expected access patterns.

As far as I can see, you are indeed going to incur one extra memory access apart from the object itself, for any design other than just 'Temporarily flag the object deleted, sweep deleted objects in bulk later' (which would only be good if deleted objects are uncommon). It still matters how many extra memory accesses; deleting an object from a doubly linked list accesses two other objects.

It also matters somewhat how many cache lines each object takes up. I say 'somewhat' because even if an object is bulky, you might be able to arrange it so that the most commonly accessed fields fit in one or two cache lines at the beginning.

Re:Arenas in Rust on Saturday October 04, 2025 @02:23PM (#45475459)
No problem!

As to what would be better - this is also a reply to your sibling comments above - I don't have a single across-the-board solution; the equivalent of std::vector everywhere is fine for some kinds of application code, but not necessarily for system code. Instead, I would start by asking questions.

What kinds of entities are you dealing with, what kinds of collections, and, critically, how many entities along each dimension, to an order of magnitude, p50 and p99? What are your typical access patterns? What are your use cases, so that you can figure out what figures of merit to optimize for? How unpredictable will be the adding of more use cases in the future?

In most kinds of application code, it's okay to just go for big-O, but for performance critical system code, you also need to care about constant factors. As an intuition primer, how many bytes can you memcpy in the time it takes for one cache miss? If your intuition for performance was trained in the eighties and nineties, as mine initially was, the answer may be larger than you expect.

Re:Arenas in Rust on Saturday October 04, 2025 @10:12AM (#45473453)
To clarify a couple of things:

I'm aware of the reasons Linux uses doubly linked lists. I'm still of the opinion this design decision made a lot of sense in the 1990s, and would make less sense in a new project today. You may disagree, and that's fine! Engineering is constrained by hard truths, but within those constraints, is full of judgment calls.

I'm not a member of the evangelical Rust community. I'm not proclaiming 'thou shalt rewrite it all in Rust'. Maybe you have good reasons to use something else. That's fine.

But if you are considering Rust, and are concerned about its ability to handle cyclic data structures, there are ways to do it, that don't involve throwing out all the benefits the language offers.

Re:UTF-8 is a brilliant design on Saturday September 13, 2025 @06:51PM (#45235937)
Yes, that was exactly the reason. CJK unification happened during the few years when we were all trying to convince ourselves that 16 bits would be enough. By the time we acknowledged otherwise, it was too late.
I read that paragraph, but my reading of it was different from yours. As far as I can see, it only discusses training time and experience. No mention of time for sleep.

Though yes, I do give it credit for going at least a little of the way - not far enough, but a little - in pushing back on the 'human error' scapegoating, in favor of asking questions about procedures and policies.

In several similar incidents, it was clear that the, or at least a major, cause of the accidents, was that the officers on watch had been forced to work overtime and deprived of sleep to the point of cognitive impairment.

How many hours had the officer on watch in this case worked that week? How many hours of sleep did he have?

And why is no one except me asking those questions?

Re:Introduction to Ada: a project-based exploration with rosettas on Wednesday September 03, 2025 @09:33AM (#45115590)
I predict that it will never make sense for artificial neural networks to directly generate machine code, for most of the same reasons it doesn't make sense for biological neural networks to do so.
Re:Ask HN: Why hasn't x86 caught up with Apple M series? on Tuesday August 26, 2025 @05:14AM (#45024148)
That's an interesting question about the number of levels of address translation. Does anyone have numbers for that, and how much latency and energy an extra layer costs?
Re:Ask HN: Why hasn't x86 caught up with Apple M series? on Tuesday August 26, 2025 @03:18AM (#45023302)
I'm not aware of any CPU invented since the late eighties that doesn't have paged virtual memory. Am I misunderstanding what you mean? Can you expand on where you are getting the 4x number from?
Re:Why OS Yamato Lets Your Data Fade Away on Monday August 25, 2025 @01:24AM (#45010498)
As I understand it, the philosophy dates from centuries before that, and was inspired at least in large part by the frequency of earthquakes there.
Re:Ask HN: Who is hiring? (August 2025) on Saturday August 02, 2025 @02:23AM (#44765249)
I'd like to apply, but the job pages just offer 'see open positions' in a loop, no clear way to get to an application form, and the 'contact us' page doesn't accept a Gmail address. Am I missing something?
Re:Coding with LLMs in the summer of 2025 (an update) on Monday July 21, 2025 @10:06AM (#44635260)
I'm seeing quite a few people on this site recently talking about their Kagi subscriptions, claiming it is sufficiently better than Google to be worth the money.
I leave a handful of actually important notifications on, like the one that says 'someone just made a purchase using your bank account, making sure it was you', but most of them, I do indeed turn off.
Beware of concentrated benefit and diffuse cost. Sure, let a seconds clock be available to call up the 0.1% of the time when you want it. But it shouldn't be in the system tray presenting a small but ongoing attention drain the other 99.9% of the time.

Older ยป