HNHacker News
TopNewBestAskShowJobs

vaylian

3,653 karma · joined August 18, 2018

submissionscomments
vaylian··on Clj.rs – a Clojure dialect implemented in Rust
One of the killer features of Clojure is it's seamless interop with the host platform. On the JVM you do something like

(Integer/parseInt my-variable); this calls Integer.parseInt(my_variable) in Java-land

I tried to find examples for how to call Rust code and the best I could find is:

https://github.com/csm/clojurust/blob/b847a29b46e2b6b3fbe624...

It looks like you need to do a lot of leg work to introduce Rust functions into Clojure namespaces. I guess there is no way around it and this is not a criticism of clj.rs. But it doesn't seem to be as seamless as on the JVM.

vaylian··on We know 15k websites are infected. how do we tell them?
The problem is not the GDPR, but the fact that this public contact data was abused. If some assholes had not decided to spam people, we would probably still have public contact info.
vaylian··on MS Paint Remote Code Execution Vulnerability
Remember Windows Vista? Cancel or Allow?
vaylian··on If you love a website, back it up
This. Aggressive AI crawlers have ruined many parts of the web. I guess you have to ask the owner of the site nicely, if they would provide a complete copy of the site for your personal archive.
vaylian··on European RISC-V Industrial Computing Initiative
What is CPEU? I don't see that acronym on the page.
vaylian··on The federated code forge
What are your thoughts on https://forgefed.org/?
vaylian··on AlpineBSD
AI causes massive environmental harm in a time where ecosystems and the climate are already under severe stress.

We also see a lot of AI-based pull requests to open source projects that completely overwhelm maintainers. Bug bounty programs have already been canceled to remove the incentive to bombard maintainers with alleged security issues. AI is harmful for small libre and open source projects.

AI is forced on people because of capitalist incentives. People who care about their craft are labeled as old-fashioned, because they do not like to use AI. Even if the end product (the software) is as good as the GGP comment wishes, the way the software was produced might have been a very joyless process, because AI was doing all the fun work.

AI in programming also leads to deskilling and makes it less likely that junior programmers become as good as the current senior programmers. This might lead to a software quality crisis in the future. And in the meantime AIs will run dry of new high-quality learning material.

Free software licenses are based on copyright. These licenses are supposed to protect the freedoms of the end user (because that's the ethical thing to do). However, the situation with AI-generated output and copyright is far from clear: https://constitutioncenter.org/blog/supreme-court-denies-art... AI-contributions to software projects might be incompatible with the license of that project, because the contributor does not have the necessary rights to the contribution.

edit: And AI can do shady things that we shouldn't normalise: https://news.ycombinator.com/item?id=50284255

vaylian··on AlpineBSD
> I want software that is brilliant and well audited, no matter who or what produced it.

Not caring about ethics is selfish.

vaylian··on Evidence of a spying operation by ICE against left-wing social movements
> I really do miss the internet before the 2nd and 3rd waves of "Eternal September" (Facebook then Smartphones)

Very apt. These two things did really make the internet a lot worse. I would even add AI as the 4th wave, with all the captchas and slop we now need to deal with :-(

vaylian··on Three new discoveries in mathematics, computer science, and physics
Then the open question simply becomes how to make humans give a fuck.
vaylian··on Three new discoveries in mathematics, computer science, and physics
How about AI solves climate change next? That's an important open problem.
vaylian··on Why Gopher in 2026?
HTML and CSS describe how a document should look like. Afaik with Gemini/Gopher it is entirely up to the client how it should be rendered.
vaylian··on Why Gopher in 2026?
What is a good starting point for getting more experience with actually using Gopher/Gemini?
vaylian··on Why Gopher in 2026?
What would an eternal September look like for Gemini? I don't think it's possible, because it's a protocol for putting basic documents online.
vaylian··on Why Gopher in 2026?
What about https://neocities.org/? It's fairly straightforward and gives you the full power of HTML and a free subdomain.

I think the barrier is much more a matter of awareness of how web sites can be created than actual technical limitations.

vaylian··on Around a dozen banking apps began specifically permitting GrapheneOS
I wonder how many of these supported apps are supported, because there are some geeks on the inside of the banks who want to have their favorite mobile OS supported.
vaylian··on LLMs are making formal software verification feasible at a much larger scale
I'm not in the field, but afaik most of the work is done with the Lean proof assistant[1] which uses logic that is already formally verified to be true. The LLMs typically bridge the gap between the original problem statement and a proper Lean definition that then can be processed by the Lean software.

I think there are more details, but this is the gist of it. However, you need to manually verify that the LLMs produce Lean definitions that actually match your problem statement.

[1] https://en.wikipedia.org/wiki/Lean_(proof_assistant)

vaylian··on Docker is weird
By nspawn you mean systemd-nspawn?[1]

[1] https://wiki.archlinux.org/title/Systemd-nspawn

vaylian··on Quad9 to exit France
The article rightfully mentions the Sony case, but the article is actually mainly about another company:

> beIN, a Qatari company with offices in France, previously sought to force Quad9 to block resolution for a set of domain names they assert are participating in copyright infringement of its audiovisual rights on sports event broadcasts.

This seems to be the relevant wikipedia article: https://en.wikipedia.org/wiki/BeIN_Channels_Network

vaylian··on Quad9 to exit France
WP article: https://en.wikipedia.org/wiki/Sony_BMG_copy_protection_rootk...

While it is indeed 20 years ago, it should not be forgiven, if they continue to pull off shitty things like this lawsuit.

vaylian··on Today's PHP security release, and how we're strengthening security
and the increased costs of maintenance of a code base that humans will be reluctant to read.
vaylian··on PHP 8.2.35
en.wikipedia.org works for me
vaylian··on Major ICQ security hole (1998)
More importantly: Are you and your girlfriend still in contact with each other today?
vaylian··on AdFection: Targeted ads turned into a pipeline for zero-click mercenary spyware
> That's the entire explanation.

Not quite. Most people in society are completely oblivious to this happening. And their lack of awareness is why the exploiters don't face more public opposition.

vaylian··on AI is a tool and using it well takes skill
Please don't copy complete articles from other sites. Quoting parts for highlighting is fine.
vaylian··on What agents mean for Rust (and vice versa)
I also wonder if some deprecated practises and packages will linger in the training data for a long time. I remember the Python 2 to 3 transition. A lot of people parroted all kinds of outdated information on Python 3 and that made people hesitant to switch to Python 3.
vaylian··on Telegram Desktop vulnerability allowed any user's file to be stolen
I agree. But sometimes I struggle with finding the right files under /dev or /sys so that the necessary hardware is accessible to the program. Is there some documentation that gives a good overview over the different device and system files? For example, if a program wants to use my web cam, how would I figure out which files to mount?
vaylian··on Telegram Desktop vulnerability allowed any user's file to be stolen
XKCD 327: Exploits of a Mom: https://xkcd.com/327/
vaylian··on What should we tell our students?
The trajectory of a ball can be predicted. The trajectory of the job market for mathematicians is far too uncertain at this point to make reasonable predictions. This is not a matter of intelligence.
vaylian··on Denmark data breach exposes 8.8M people's personal data
Was Signal an option you have considered? It's designed to be secure even if the user is non-technical.
Page 1 of 34Next →