Hacker Newsnew | past | comments | ask | show | jobs | submit | morkalork's commentslogin

LG must have had some real FOMO watching Samsung piss on all over their fridge customers?

I suspect that for every case like yours, there's dozens of companies of lower quality where the AI slop is "good enough"

In addition to what the sibling commenters are saying: Set up guardrails for what you expect in your project's documentation. What is the agent allowed to do when writing unit tests vs say functional tests, what packages it should never use, coding and style templates etc.

If you haven't already tried it, Allopurinol is an effective and almost entirely side-effect free treatment.

I lament the time I lost living without it!


Is the trade off here having more secure code in exchange for added complexity/difficulty? This is a real question, has the Tor code itself been exploited by bad actors before? All the incedences I've seen in the news were some other software running over tor that would be exploited to phone home or give up user data.

It seems they worry about it, which I can understand. But now with Rust I worry about about new logic bugs, supply chain issues, and lack of proper security updates.

Well, given that this has been going on for years, you can already start to empirically evaluate that question.

> (So far, it's a not-very-complete client. But watch this space!)

Yes, it's a beginning not the end.

Or, you could look at other projects who have been using Rust for many years, and consider these factors there too. The folks who have have generally concluded the opposite.


The distribution I use already has limited security updates for Rust: https://www.debian.org/releases/trixie/release-notes/issues.... which reduces my security. The cargo supply chain issues are also very obvious, I am far more worried about this than I ever will be about memory safety, but hopefully tor reduces its reliance on random dependencies.

I find that surprising given that Debian breaks Rust programs up into individual apt packages, but ultimately, other distros do not have this issue. It’s also about userspace programs and not the kernel, which does not use external packages and so sidesteps this completely.

Debian forky has Rust in the kernel on by default.


I guess the want to be able to update individual libraries to provide security updates.

Right, from my understanding, Debian was packaging Rust programs in the same way as C ones. So they’d update the individual library and it should be all good. They deduplicated all of the dependencies in their trees.

This seems reasonable to me. If you have a tarmaggeedon, you update one library instead of thousand of packages. Although I am not sure how well this can work in Rust with monomorphization.

[flagged]


Do you think the sibling comment was flagged to "protect me" whatever that means, or is it because "Are you high on Prozac?" is not really a productive comment?

EDIT: And now that I've scrolled down, I see you've left this comment many times as random replies. I'm sure those will get flagged, but for spam reasons, not due to some grand conspiracy.


I will google for something in French when I don't find the results I want in English. Sometimes google will return links to English threads (that I've already seen and decided were worthless!) auto-tranalated to French. As if that were any help at all..

They don't need fingerprinting, all the American social media has probably already been given a sealed FISA order to hand over account lists with ip access logs.

I feel like it's the same as the "I am not a terrorist" declaration check-box. You know your socials, they know your socials. They want to see if you lie.


>Besides, why would you want to come if you don’t like it here?

Good ol "if you don't love it, leave it" argument. Nothing beats that!


Wasn't that a whole tent pole of LLVM?

I may die but my quips shall live forever

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: