frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Ask HN: How much are you spending on your GPU in terms of energy?

1•Simorgh•1m ago•0 comments

Gemini Enterprise

https://cloud.google.com/gemini-enterprise
1•RyanShook•1m ago•0 comments

What is the most durable, portable, and secure form of software?

https://gods.art/articles/single_file_web_apps.html
1•calebm•2m ago•0 comments

There's No Speed Limit

https://sive.rs/kimo
1•dgs_sgd•6m ago•0 comments

Generalized Consensus: Discovery and Propagation

https://multigres.com/blog/generalized-consensus-part7
1•sougou•6m ago•1 comments

Design Tomorrow – A podcast about design, technology, and being human

https://podcasts.apple.com/us/podcast/design-tomorrow/id1433919260
1•rootforce•6m ago•0 comments

Ukraine Gamifies the War: 40 Points to Destroy a Tank, 12 to Kill a Soldier

https://www.nytimes.com/2025/10/31/world/europe/ukraine-war-drone-game.html
1•ceejayoz•7m ago•0 comments

Gen Z used Discord to overthrow governments

https://www.theguardian.com/world/video/2025/oct/31/how-gen-z-used-the-gaming-app-discord-to-brin...
1•c420•8m ago•0 comments

Perplexity's new AI tool aims to simplify patent research

https://www.theverge.com/news/811340/perplexity-ai-patent-research-tool
1•protik49•8m ago•0 comments

I made a tiny macOS CLI to instantly check and remove quarantine flags (OSS)

https://github.com/jurek-zsl/homebrew-antiQuarantine
1•jurekdev•13m ago•0 comments

Palantir sues former employees for allegedly stealing company secrets

https://www.wsj.com/tech/ai/palantir-lawsuit-jain-cohen-trade-secrets-6aedc42c
1•hhs•13m ago•0 comments

Show HN: VoiceBrief – Turn textbooks into 1-hour audio lectures with AI

https://voicebrief.io/
1•dm118•14m ago•0 comments

Portableapps.com – Portable software for USB, portable, and cloud drives

https://portableapps.com/
1•notRobot•15m ago•0 comments

Midori Browser – Built-in ad and tracker blocking

https://astian.org/midori-browser/
1•nmridul•16m ago•0 comments

Scientists can't define consciousness, yet we think AI will have it

3•f_of_t_•16m ago•1 comments

Escape from Duckov is not what I was expecting at all

https://www.eurogamer.net/escape-from-duckov-is-not-what-i-was-expecting-at-all-and-its-another-s...
1•PaulHoule•18m ago•0 comments

All Qwen3 VL versions now running smooth in HugstonOne

https://old.reddit.com/r/Hugston/
1•trilogic•19m ago•1 comments

Exposing the Gambling Epidemic

https://www.youtube.com/watch?v=9Ii1ROzeSwU
2•indigodaddy•20m ago•1 comments

Show HN: Fed Market Watch – Live FOMC Odds from CME, Kalshi, and Polymarket

https://www.oddpool.com/fed-market-watch
1•codelemons•21m ago•0 comments

Interstellar Comet 3I/Atlas: Evidence for Galactic Cosmic Ray Processing

https://arxiv.org/abs/2510.26308
1•bikenaga•22m ago•0 comments

Google Maps is working on an minimalist power saving mode

https://www.androidauthority.com/google-maps-power-saving-3611409/
2•jmsflknr•22m ago•0 comments

Maryland's new privacy law puts strict limits on how companies use your data

https://technical.ly/civics/maryland-data-privacy-act/
2•Philadelphia•22m ago•0 comments

Vercel AI SDK 6 Beta

https://v6.ai-sdk.dev/docs/announcing-ai-sdk-6-beta
1•rbitar•23m ago•0 comments

How did the Windows 95 UI code get brought to the Windows NT code base?

https://devblogs.microsoft.com/oldnewthing/20251028-00/?p=111733
1•Aloha•23m ago•0 comments

Optical Single Red Blood Cell HbA1c measurement and glycemic history assessment

https://www.science.org/doi/10.1126/sciadv.ady1318
1•PaulHoule•24m ago•0 comments

Everything You Need to Know About Building Software That Plays Well with Others

https://medium.com/@DocTaco/multi-tenant-apps-101-everything-you-need-to-know-about-building-soft...
1•0dj0bz•24m ago•1 comments

Expanding Access to XR: Google Cardboard Comes to Monado

https://www.collabora.com/news-and-blog/blog/2025/10/31/expanding-access-to-xr-bringing-google-ca...
3•losgehts•25m ago•0 comments

Time to Privatize U.S. Air Traffic Control–Copy Canada's Model

https://marginalrevolution.com/marginalrevolution/2025/10/time-to-privatize-u-s-air-traffic-contr...
2•bikenaga•27m ago•1 comments

I am looking to work or partner with Startups as a Product Designer

1•anas_ahmed•27m ago•1 comments

Ask HN: What are you using for Semantic Monitoring?

1•harlequinetcie•28m ago•1 comments
Open in hackernews

Show HN: A fast, dependency-free traceroute implementation in pure C

https://github.com/davidesantangelo/fastrace
26•daviducolo•6h ago

Comments

9029•5h ago
Is this vibe coded or is it just the readme that's AI-generated?
raphman•5h ago
The commit messages (with dozens of semi- and unrelated changes in each commit) suggest so.

https://github.com/davidesantangelo/fastrace/commit/79d92744...

(For me, this does not necessarily say anything about code quality. However, if a whole project is AI-generated, the author has no enforceable copyright IMHO, and thus, the 2-clause BSD license is void.)

Sesse__•5h ago
I wish ChatGPT could have told the author about the existence of mtr before starting this :-)
checker659•4h ago
I was skeptical at first, but this does stink of auto-generated code. I want to believe it is not.
ohyoutravel•5h ago
I take issue with the Author section. You’re the only one listed. Shouldn’t you give ChatGPT credit, or even further afield, all the developers who wrote the code and answers that ChatGPT trained on to produce this, as far as I can tell, meaningless tool?
alt187•5h ago
ChatGPT isn't an author, so it shouldn't be listed. Instead, every single piece of human creation that's been sloshed and slurried to produce this drab drivel should be put as authors. That would be fair.
ohyoutravel•5h ago
This only seems fair.
akritid•4h ago
If FSF trained a net on all the code that has Copyright assigned to FSF, could it be used to ethically vibe code free software retaining the same Copyright and license? Perhaps even pointing to a file on fsf.org with all the author's names?
pavlov•5h ago
It used to be that if someone released a tool that's 700 lines of C, they probably had an actual need and a problem they solved by writing that code because debugging even that amount of C tends to be non-trivial.

Today all bets are off. Does the tool do anything anybody needed? Does it work? Who knows. It might just be 700 lines of convincing-looking C churned out by a model.

checker659•4h ago
It could be a vehicle to learn about traceroute / ICMP.
anonymous908213•4h ago
For whom? What is the creator going to learn from pasting code they've never read? What are readers going to learn from reading code the "author" themselves didn't read, let alone write? If you want to learn about something, reading an LLM-generated repo seems to be about the worst possible way to do it. That's not even to say LLMs are useless for learning; you could ask directly about concepts without having it write all the code for you, but this is the lowest effort application of the tool and is more of a vehicle for anti-learning than anything.
checker659•55m ago
I meant that IFF the author wrote it themself. IFF.
pjmlp•4h ago
Well I was surprised that it actually makes use of "-Wall -Wextra" as good practice.

However both PVS-Studio and clang-tidy have a few complaints about the code, since it is a single file, it is rather easy to try out on Compiler Explorer.

https://godbolt.org/z/n4M1vGccq

As for your remark, most folks seem to have not followed that C authors also created lint in 1979, Dennis Ritchie proposed fat pointers to WG14, Plan9 was going to use Alef, which failed but its ideas were re-used for Limbo on Inferno, and they were also involved with Go.

Finally Rust's borrow checker ideas steam from AT&T research with Cyclone, as way to create a safe C.

As such the real question is why still use C in new projects, when even the language authors have moved beyond it, or at least reduce their use of it on userspace applications.

johnisgood•4h ago
We live in a world where now using "-Wall -Wextra" is a positive outlier. :D God damn. I have ALWAYS used these options, along with "-pedantic", "-std=c99" and so forth.
matltc•4h ago
I picked up C for fun last year and this is exactly the flags I have always used by default. Can't remember where I picked that up, but glad to hear I'm doing it right
johnisgood•3h ago
Yes you are.

I always use "-std=c99 -Wall -Wextra -Wpedantic -Werror". You could replace "-Wpedantic" with "-pedantic" though (it is more supported). You may omit "-Werror".

Sometimes I also use "-D_XOPEN_SOURCE=700" and "-D_FORTIFY_SOURCE=2" along with "-fstack-protector-strong".

For debug builds you want "-O0 -g" at the very least.

I also have a make target that uses "scan-build", "cppcheck", and "clang-tidy".

9029•2h ago
While we are at it, here are some more useful warning flags I have used: https://github.com/cpp-best-practices/cppbestpractices/blob/.... Some C++-only though, some are a bit opinionated (like -Wsign-conversion) and some useful C-only flags might be missing.

Few C-specific references I found just now, but haven't tried myself yet:

https://github.com/systemd/systemd/blob/0885e4a6e7ca93d3aef8... https://github.com/airbus-seclab/c-compiler-security

Also a good idea to regularly run the program with sanitizers, using them in tests is a good way to do that I think. Why not during development as well if the performance is acceptable for that specific program.

jstimpfle•2h ago
I've looked at a couple of these complaints by clang-tidy, and as it unfortunately often is, all of them were false positives and overzealous nitpicks. All the complaints about memcpy and memset for example, clang-tidy could easily be improved to see that these are just fine and being dogmatic about using the "new and right way" to do things is not helpful.

In practice I've found -Wall with GCC to offer a good warning level and clang-tidy to not offer a lot of constructive feedback (besides it being very slow). For more ambitious projects, it's possible to fine-tune GCC warnings.

You can also, you know, just _use_ a program and see if there are any anomalies when running it. With some discipline to code structure, many problems get hit on the first run, and extensive testing can come a lot closer to static verification than you would think. For non-real-time constrained stuff there is also valgrind and other run-time instrumentation.

pjmlp•1h ago
Instead of ranting, you should have realized that is the default output without configuration file, which isn't that easily to provide in compiler explorer, without going through the trouble of a project template.

Naturally on a real project there would be an heavily customised static analysis tool, that would only allow a build to succeed with the feedback from the SecDevOps team, alongside feedback loop from pentesters.

We have seen how far just _use_ the program has been a thing tracking down C security issues for the last 37 years, starting with Morris Worm.

And to quote Dennis Ritchie,

> To encourage people to pay more attention to the official language rules, to detect legal but suspicious constructions, and to help find interface mismatches undetectable with simple mechanisms for separate compilation, Steve Johnson adapted his pcc compiler to produce lint [Johnson 79b], which scanned a set of files and remarked on dubious constructions.

-- https://www.nokia.com/bell-labs/about/dennis-m-ritchie/chist...

jstimpfle•13m ago
Instead of ranting and showing a huge warnings output to make a point fitting your agenda, you could have just disabled the false positives yourself (like I did, by the way) and you would have seen that that vastly reduces the warnings.

Oh, and to disprove your other claim, here is a link to the godbolt with added clang-tidy flag: https://godbolt.org/z/G31Ws8aa1 . This has the clang-tidy invocation changed to disable a single warning category : --checks='-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling' . Running with that, there remains only a single warning. Which is probably a false positive as well.

If there are real concerns about this code, show them. I'm not saying there can't be any. But it doesn't help your credibility if you continue to push words that are easily disproved.

raphman•4h ago
Honest question: why would this code clamp the reported round-trip time? By default, min = 0.05 ms and max = 800 ms [1].

           if (rtt < config.min_rtt)
                rtt = config.min_rtt;
            else if (rtt > config.max_rtt)
                rtt = config.max_rtt;
Wouldn't this hide bugs in the code or network anomalies? Replies from localhost seem to typically arrive in less than 50 µs.

Comments in an earlier version [2] make no sense to me:

            /* Use standard timersub for more accurate results */
                    if (rtt < 0)
                        rtt = 0;

                    /* Cap at reasonable maximum to handle outliers */
                    if (rtt > 1000)
                        rtt = 1000;

[1] https://github.com/davidesantangelo/fastrace/blob/5b843a197b...

[2] https://github.com/davidesantangelo/fastrace/commit/79d92744...

roygbiv2•4h ago
Because it's AI generated.
9029•3h ago
It has now been changed to

  if (rtt < 0.0)
  {
      fprintf(stderr, "Warning: Negative RTT detected (%.3f ms) - clock issue?\n", rtt);
      rtt = 0.0;
  }
https://github.com/davidesantangelo/fastrace/blob/e8b19407a4...
anonymous908213•3h ago
And the update message has a reference to "50µs localhost responses", indicating the comment calling the code out was directly fed into a prompt:

"Fixed Removed artificial RTT clamping that was hiding legitimate network measurements Previously clamped RTT between 0.05ms and 800ms Now reports actual values including sub-50µs localhost responses and >800ms satellite/long-distance links Added sanity check for negative RTT to detect clock issues without corrupting data This fix restores full diagnostic capability for detecting network anomalies like bufferbloat and measuring true round-trip times across all network types."

It shouldn't be legal to vibe this hard, honestly. If convicted in court, you should face punishment of, say, XXX hours doing something actually useful to society with your own two hands.

codetraceback•4h ago
Even if it's simple or AI-made, projects like this still help people learn and explore, every start matters.
anonymousiam•36m ago
I just built and ran it.

Unlike traceroute and mtr, this utility must be run as root.

fastrace 1.1.1.1

fastrace 0.2.1

Tracing route to 1.1.1.1 (1.1.1.1)

Maximum hops: 30, Probes per hop: 3, Protocol: UDP

TTL │ IP Address (RTT ms) Hostname

────┼───────────────────────────────────────────

Error creating ICMP socket. Are you running as root?: Operation not permitted