News for hackers. Stuff that matters.

veltas

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Sunday November 01, 2026 @01:27AM (#50323177)
Here are some CVEs identified in Rust coreutils [1]. These are mostly really trivial issues. I'd bet money that the nastier logic bugs are still in there and that the people who maintained the old C utils or helped identify the old bugs can find similar ones in these utils, although half these issues probably never appeared in the C version because Rust is much more complicated than C so makes it easier to hide logic bugs in plain site, looking at many of the issues in this article they seem like bugs that are extremely unlikely to get written in C, like accidentally forcing everything to be UTF-8, or aborting on routine errors.

[1] https://corrode.dev/blog/bugs-rust-wont-catch/

Re:TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8 on Saturday October 31, 2026 @08:09PM (#50321515)
Counterpoint, more than memory bugs exist, and everything's written in C. You're welcome to rewrite in Rust but you'll create countless bugs that aren't memory bugs that mostly already got fixed in the C version. I can't help but think things like fil-C are the most pragmatic route, despite performance costs, for most people relying on programs written in C.
Re:We Won't "Just Hang Out" on Thursday October 29, 2026 @04:13AM (#50285890)
It’s funny reading takes like this from software engineers that think the only way to meet people is at skateparks, and in… libraries...what?
Re:Arena Allocators in C on Wednesday October 14, 2026 @03:35AM (#50083802)
They wanted shorter aliases for them to make their code clearer, I suppose.
Re:Decade-old RAM is making a comeback on Sunday October 11, 2026 @05:48AM (#50041423)
Fact is that performance intensive code, games or whatever, has always optimised locality and so RAM speed shouldn't usually be a 1:1 impact on performance. Using older generations of slower RAM will be acceptable for many games and workloads.
Re:A minimal kernel in Swift, running in QEMU on Thursday October 08, 2026 @07:26AM (#50004515)
As a counterpoint, you are lumping a lot and generalising a lot there, if we're specific then you can't really trivially replace e.g. the Linux kernel with an AI project in whatever language you want. An incredible amount of work has gone into the Linux kernel and its design, and the infrastructure under that veneer of a "UNIX kernel" is too significant to hand-wave away. The issues facing Linux are well beyond (but not excluding) those created by using a dangerous language like C, or using hacky/outdated UNIX interfaces and conventions.

Yes you can try and take things in an original direction but we're ignoring the incredible amount of work that's gone into Linux, solving most of the problems you can't imagine and that AI will burn though a lot of time and tokens trying to re-solve (badly, without a ton of intelligent intervention).

I think you're more likely to see more people experimenting with existing open source work, rather than generating new projects. These new projects are easy come, easy go.

Wouldn't they have to fine themselves first?
Re:Writing Parquet files using Haskell on Friday September 25, 2026 @03:26AM (#49841277)
That's not what I see reported, they say Haskell tends to have bad memory layout generally and takes a 5x or so hit to performance.
Re:I don't want to read what you didn't write on Tuesday September 22, 2026 @03:36AM (#49797804)
They may have done you a favour if that's what they sack you for, good luck finding another job!
Re:A graphical desktop for the ZX Spectrum on Saturday September 19, 2026 @01:38PM (#49768565)
This is the sort of thing I've wanted to write for a long time. Yes it looks like this is vibe coded but I'm glad this was made because it's cool to see what can be done, and it's interesting seeing how AI can be used as a compiler essentially given the output is assembly.

I'd be interested if the author would tell us more about what they did here and what went into the design and evolution, rather than the AI README.

That's how I feel right now talking in my only language of English.
Don't overthink it, I think you are being a bit cynical. If your kid enjoys it then it's worth the money. If you can't afford that then find other things your kid enjoys.

The reward of a game is playing it, not the 'prize', although that can add to the enjoyment too.

Re:.name Termination on Sunday September 06, 2026 @04:36AM (#49584462)
That's actually the point of the .name TLD is that it's not for businesses, it's for individuals. This whole situation demonstrates ICANN is more for businesses than individuals. It should just be there for everyone and every organisation that's trying to use URI's, shame that it's not worked out that way. This is exactly what the big tech companies want, they might as well hand ICANN over to Facebook or Google, they wouldn't do much worse.
Re:Nitter has more working instances than before the takedowns on Sunday September 06, 2026 @04:30AM (#49584447)
Okay but that's not really relevant as the name changing is not a reason to leave/boycott?
Re:Nitter has more working instances than before the takedowns on Sunday September 06, 2026 @03:44AM (#49584188)
I feel like I'm living under a rock reading this post. What are the problems with Twitter, why does it need boycotting?
Re:.name Termination on Thursday September 03, 2026 @03:09PM (#49555099)
Yet that is a problem the owner of such a domain has freely entered into by buying that domain, it's their right to keep it despite this apparent problem, if they wish.
Re:Gloomberb on Friday August 14, 2026 @01:22AM (#49295003)
In defense given the amount of web content being processed it makes a lot of sense to use JS and related tech. It's put to good use here.
And I'll add that whether the style guide or the journalists, BBC articles tend to be like this: constantly saying sentences without giving the full context needed to understand them. This is why as a right wing person I tend to read The Guardian (famously left wing) instead of the BBC, because their articles just read better.
This isn't written by AI, this is just how BBC news articles are written. I find it frustrating too.
Re:Recursion is lying to you on Wednesday August 05, 2026 @10:49AM (#49183797)
Here is the conventional use of Big O notation where the input is a number:

https://en.wikipedia.org/wiki/Miller%E2%80%93Rabin_primality...

As you'll see they are using the number of digits, not the value of the number, because the number of digits is the size of the input.

You can find countless examples of this in literature. So this is not a 'personally-interesting' way as you assert.

Re:Don't be a meat proxy on Monday August 03, 2026 @07:28AM (#49154330)
This is the new "Let Me Google This For You".
Re:Recursion is lying to you on Thursday July 30, 2026 @07:02AM (#49108294)
What do you mean by this? I was interested in article and parent, that's why I responded.
Re:Recursion is lying to you on Wednesday July 29, 2026 @07:48AM (#49096237)
If you want to measure growth based on another variable you are allowed to do so, but for most algorithms I'm more interested in the growth of time according to input size.
Re:Recursion is lying to you on Tuesday July 28, 2026 @05:37PM (#49090257)
Really it's worse than exponential, because the size of the input is not n, it's the number of bits needed to store n i.e. log n. So as the number of bits k grow, it's growing phi^(2^k).
Re:Teaching Kids Forth on Monday July 27, 2026 @04:09AM (#49066520)
To be clear, I'm not accusing you of plagiarism at all. I'm just saying this kind of typo unfortunately doesn't prove anything.
Re:Teaching Kids Forth on Monday July 27, 2026 @03:37AM (#49066239)
This is exactly the kind of spelling mistake ChatGPT makes if you ask it to make spelling mistakes to make text look more authentic.

What seems to happen is it will get a lot of words like curriculum wrong that people rarely spell incorrectly because they're long enough that if your English isn't confident you would look it up or use a spell checker, or spell words incorrectly that people don't usually spell wrong like 'imediate' or 'puzzel'.

Re:Teaching Kids Forth on Sunday July 26, 2026 @05:52PM (#49062809)
I really love Forth and spend almost all my free programming time playing with it and I'd never teach it to a class of kids.
Re:Don't Take the Black Pill [video] on Saturday July 25, 2026 @07:42AM (#49046760)
It's really easy to miss the value in Pointless Rewrite 5 of Core Module 4, but the grad who rewrites it will at least understand it afterwards and can fix the bugs they introduced and add new features to it easier. But the hard pill to swallow is they spent $200K of the engineering budget making the code worse.

The way to understand the value is to see the engineer as an asset. Engineers aren't interchangeable and no codebase can truly be documented and CI'd to the point where expertise doesn't matter.

Re:It's a shame what's happened to radio on Wednesday July 22, 2026 @03:41AM (#49003122)
Also listened in the car but since they've recently shut down the LW tower I can't receive it anymore in the midlands, only occasionally get FM signal.
The original joke for anyone who doesn't know or remember, Michael, the manager, asks his accountant to explain what a surplus is like he would to an 8 year old. Michael doesn't understand this and asks for how he would explain it to a 5 year old, which Oscar does a very good job with explaining and Michael finally understands.

Later the security guard is called upstairs to break a tie on votes for what to spend the surplus on, and Michael starts reciting Oscar's 5 year old explanation, and the guard cuts him off saying he knows what a surplus is.

I have to imagine this is sort of a joke about the audience too as inevitably the writers were considering that audience members might not know what a surplus is, and this kind of joke is an opportunity to explain it.

Older »