frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Show HN: Thymis – IoT fleet management with NixOS

https://thymis.io/
1•elikoga•46s ago•0 comments

Show HN: AI Gigs Marketplace

https://botigigs.com
1•the_plug•1m ago•0 comments

Show HN: I wrote a book for engineers building production AI systems

https://productionaibook.com
1•aroussi•2m ago•0 comments

Show HN: I built a local fuzzing tool to red-team LLM agents (Python, SQLite)

1•woozyrabbit•2m ago•0 comments

Spanish court orders Meta to pay nearly half a billion euros in damages

https://apnews.com/article/meta-spain-fine-privacy-data-media-c97a7e46d923ba446c6974937e95a827
1•1vuio0pswjnm7•2m ago•0 comments

TSMC in a tight spot: demand for high-end chips exceeds capacity by factor of 3

https://www.igorslab.de/en/tsmc-in-a-tight-spot-demand-for-high-end-chips-exceeds-capacities-by-a...
1•speckx•3m ago•0 comments

Show HN: I made an AI SEO tool for people who hate writing content

https://scribepilotai.com/
1•lastFitStanding•4m ago•0 comments

Big attack on NPM – Shai-Hulud 2.0

https://about.gitlab.com/blog/gitlab-discovers-widespread-npm-supply-chain-attack/
1•thomasfl•4m ago•0 comments

Cryptology firm cancels elections after losing encryption key

https://www.bbc.com/news/articles/c62vl05rz0ko
5•tagawa•5m ago•1 comments

Show HN: A terminal based voice over IP service

https://github.com/THE-TARS-PROJECT/tars-comm
1•cooper258•6m ago•0 comments

Show HN: Open-Source Email Verifier

https://github.com/yolodex-ai/email-verifier
2•marcushyett•7m ago•0 comments

My Experience Using Tinker

https://www.rajan.sh/tinker
1•gmays•7m ago•0 comments

Show HN: A browser tool that tracks your hands in real-time

https://webinterac.vercel.app/
2•warrowarro•9m ago•0 comments

Idempotency Keys

https://www.morling.dev/blog/on-idempotency-keys/
3•furkansahin•10m ago•0 comments

OpenTransit – A MassTransit Fork

1•Nakib•10m ago•0 comments

A Software Language That Vibe Coding Kids Deserve

https://github.com/MatthiasKainer/matthiashihic
2•mat_the_k•10m ago•0 comments

Show HN: I built a "Hot or Not" for startups to get the feedback YC doesn't give

https://yci.vercel.app/vote
1•alielroby•11m ago•0 comments

A Power Grid-Aware Website

https://fershad.com/grid-aware-site/
1•vintagedave•12m ago•1 comments

A We-Free December

https://hollisrobbinsanecdotal.substack.com/p/a-we-free-december
1•HR01•12m ago•1 comments

Show HN: Product Loop – Automated AI customer interviews

https://productloop.io
1•satssehgal•13m ago•0 comments

Show HN: Tree Dangler

https://www.jasonthorsness.com/34
1•jasonthorsness•13m ago•0 comments

Show HN: Smart Bill Splitter: Split bills in browser without login, ads, cookies

https://smartbillsplitter.com
1•truetotosse•14m ago•0 comments

Getting Started with Claude Code

https://realpython.com/courses/getting-started-claude-code/
1•meysamazad•14m ago•0 comments

Browserbench.ai is launched to evaluate browser runtimes for AI Agents

https://www.browserbench.ai
3•idanraman•16m ago•1 comments

Ruthless prioritization while the dog pees on the floor

https://longform.asmartbear.com/prioritization/
2•gk1•18m ago•0 comments

Alphabet (Googl) Gains on Report Meta to Use Its AI Chips

https://www.bloomberg.com/news/articles/2025-11-25/alphabet-gains-on-report-that-meta-will-use-it...
1•mgh2•19m ago•0 comments

Ageing Populations Will Lead to Lower Living Standards, Warns Study

https://www.ft.com/content/3a675f7f-ff46-4b8d-9744-08dfed18d23a
2•skx001•20m ago•2 comments

Show HN: A seeded, deterministic chaos simulation runtime for async Rust

https://github.com/ZA1815/fracture
1•Crroak•20m ago•1 comments

The State of AI: don't share your secrets with a chatbot

https://www.ft.com/content/9cdd07b0-567e-4715-9ebd-435b1d685e4b
1•1vuio0pswjnm7•21m ago•0 comments

Questioning an Interface: From Parquet to Vortex

https://www.polarsignals.com/blog/posts/2025/11/25/interface-parquet-vortex
2•asubiotto•22m ago•0 comments
Open in hackernews

Apt Rust requirement raises questions

https://lwn.net/SubscriberLink/1046841/5bbf1fc049a18947/
71•todsacerdoti•1h ago

Comments

bakugo•38m ago
> Klode added this was necessary so that the project as a whole could move forward, rely on modern technologies, ""and not be held back by trying to shoehorn modern software on retro computing devices"".

What is it about Rust fanatics that makes them inject a certain level of passive-aggressiveness, snark, and just general disrespect for anyone who doesn't love the language as much as they do into basically everything they say?

elteto•33m ago
Maybe they are just really tired of having to deal with people who constantly object and throw every possible obstacle they can on the way.
donkeybeer•29m ago
No, honestly Rust has just really crappy attitude and culture. Even as a person who should naturally like Rust and I do plan to learn it despite that I find these people really grating.
bakugo•25m ago
Maybe they wouldn't experience so much pushback if they were more humble, had more respect for established software and practices, and were more open to discussion.

You can't go around screaming "your code SUCKS and you need to rewrite it my way NOW" at everyone all the time and expect people to not react negatively.

lagniappe•22m ago
The endless crusades are indeed tiresome.
bryanlarsen•15m ago
Yes, the immediate and endless backlash we get whenever anybody says the word "Rust" is quite tiresome.
simonask•18m ago
That’s also not something anybody has actually said.
bakugo•9m ago
Are you serious? It's basically impossible to discuss C/C++ anymore without someone bringing up Rust.

If you search for HN posts with C++ in the title from the last year, the top post is about how C++ sucks and Rust is better. The fourth result is a post titled "C++ is an absolute blast" and the comments contain 128 (one hundred and twenty eight) mentions of the word "Rust". It's ridiculous.

lkjdsklf•9m ago
While no one has explicitly said that, it is the implied justification of rewriting so much stuff in rust
woodruffw•14m ago
To be clear, the "you" and "my" in your sentence refer to the same person. Julian appears to be the APT maintainer, so there's no compulsion except what he applies to himself.

(Maybe you mean this in some general sense, but the actual situation at hand doesn't remotely resemble a hostile unaffiliated demand against a project.)

jvanderbot•32m ago
I think you'll experience some pushback on the assertion that that particular quote has a lot of arrogance or disdain in it.

Building large legacy projects can be difficult and tapping into a thriving ecosystem of packages might be a good thing. But it's also possible to have "shiny object" or "grass is greener" syndrome.

bakugo•29m ago
> I think you'll experience some pushback on the assertion that that particular quote has a lot of arrogance or disdain in it.

It's just a roundabout way of saying "anything that isn't running Rust isn't a REAL computer". Which is pretty clearly an arrogant statement, I don't see any other way of interpreting it.

simonask•16m ago
Be real for a second. People are arguing against Rust because it supports fewer target architectures than GCC. Which of the target architectures do you believe if important enough that it should decide the future development of apt?
NetMageSCW•11m ago
“If you maintain a port without a working Rust toolchain, please ensure it has one within the next 6 months, or sunset the port.”

If that’s not arrogant, I don’t know what is.

chillfox•21m ago
They are the tech version of vegans.

(yes, I know it's not all of them just like not all vegans have to preach)

simonask•19m ago
And just like vegans, their detractors are far more vocal in reality.
OptionX•3m ago
Untrue.
tcfhgj•13m ago
actually a vegan has to preach to some degree, otherwise it would be like a human rights advocate looking away when humans are tortured
fn-mote•19m ago
> What is it about Rust fanatics [....]

The universalization from one developer's post to all Rust "fanatics" is itself an unwelcome attack. I prefer to keep my discussion as civilized as possible.

Just criticize the remark.

portly•10m ago
Is it the borrow checker? Normally rust had your back when it comes to memory oopsies. Maybe we need a borrow checker for empathy..
amarant•9m ago
from the outside it looks like a defense mechanism from a group of developers who have been suffering crusades against them ever since a very prolific c developer decided rust would be a good fit for this rather successful project he created in his youth.
petcat•35m ago
Interesting how instead of embracing Rust as a required toolchain for APT, the conversation quickly devolved into

"why don't we just build a tool that can translate memory-safe Rust code into memory-unsafe C code? Then we don't have to do anything."

This feels like swimming upstream just for spite.

sidewndr46•29m ago
All compilers do anyways is translate from one language specification to another. There's nothing magical about Rust or any specific architecture target. The compiler of a "memory safe" language like Rust could easily output assembly with severe issues in the presence of a compiler bug. There's no difference between compiling to assembly vs. C in that regard.
simonask•21m ago
The assumption here is that there exists an unambiguous C representation for all LLVM IR bitcode emitted by the Rust compiler.

To my knowledge, this isn’t the case.

andsoitis•12m ago
> The assumption here is that there exists an unambiguous C representation for all LLVM IR bitcode emitted by the Rust compiler.

> To my knowledge, this isn’t the case.

Tell us more?

adwn•5m ago
For one, signed integer overflow is allowed and well-defined in Rust (the result simply wraps around in release builds), while it's Undefined Behavior in C. This means that the LLVM IR emitted by the Rust compiler for signed integer arithmetic can't be directly translated into the analogous C code, because that would change the semantics of the program. There are ways around this and other issues, but they aren't necessarily simple, efficient, and portable all at once.
simonask•3m ago
Source-to-source translation will be very hard to get right, because lots of things are UB in C that aren’t in Rust, and obviously vice versa.

Rust has unwinding (panics), C doesn’t.

epolanski•28m ago
The problem is that rust is being shoved in pointless places with a rewrite-everything-in-rust mentality.

There's lunatics that want to replace basic Unix tools like sudo, etc, that are battle tested since ages which has been a mess of bugs till now.

Instead Rust should find it's niches beyond rewriting what works, but tackling what doesn't.

genewitch•27m ago
We need lisp, cobol, and java in apt, too. and firefox.
VWWHFSfQ•25m ago
Is the apt package manager a pointless place? It seems like a pretty foundational piece of supply chain software with a large surface area.
sidewndr46•24m ago
I seem to remember going through this with systemD in Ubuntu. Lots of lessons learned seemed to come back as "didn't we fix this bug 3 years ago?"
dralley•24m ago
Converting parsers to Rust is not "pointless". Doing string manipulation in C is both an awful experience and also extremely fertile ground for serious issues.
donkeybeer•23m ago
apt is C++
epolanski•16m ago
Issues that are battle tested from ages.
mmastrac•15m ago
sudo is not fully battle tested, even today. You just don't really see the CVEs getting press.

https://www.oligo.security/blog/new-sudo-vulnerabilities-cve...

saghm•8m ago
FWIW sudo has been maintained by an OpenBSD developer for a while now but got replaced in the base system by doas. Independent of any concerns about Rust versus C, I don't think it's quite as unreasonable as you're claiming to consider alternatives to sudo given that the OS that maintains it felt that it was flawed enough to be worth writing a replacement for from scratch.
forgotpwd16•11m ago
>tool that can translate memory-safe Rust code into memory-unsafe C code

Fwiw, there're two such ongoing efforts. One[1] being an, written in C++, alternative Rust compiler that emits C (aka, in project's words, high-level assembly), the other[2] being a Rust compiler backend/plugin (as an extra goal to its initial being to compile Rust to CLR asm). Last one apparently is[3] quite modular and could be adapted for other targets too. Other options are continuing/improve GCC front-end for Rust and a recent attempt to make a Rust compiler in C[4] that compiles to QBE IR which can then be compiled with QBE/cc.

[1]: https://github.com/thepowersgang/mrustc [2]: https://github.com/FractalFir/rustc_codegen_clr [3]: https://old.reddit.com/r/rust/comments/1bhajzp/ [4]: https://codeberg.org/notgull/dozer

geerlingguy•32m ago
I remembered reading about this news back when that first message was posted on the mailing list, and didn't think much of it then (rust has been worming its way into a lot of places over the past few years, just one more thing I tack on for some automation)...

But seeing the maintainer works for Canonical, it seems like the tail (Ubuntu) keeps trying to wag the dog (Debian ecosystem) without much regard for the wider non-Ubuntu community.

I think the whole message would be more palatable if it weren't written as a decree including the dig on "retro computers", but instead positioned only on the merits of the change.

As an end user, it doesn't concern me too much, but someone choosing to add a new dependency chain to critical software plumbing does, at least slightly, if not done for very good reason.

reidrac•27m ago
> As an end user, it doesn't concern me too much ...

It doesn't concern me neither, but there's some attitude here that makes me uneasy.

This could have been managed better. I see a similar change in the future that could affect me, and there will be precedent. Canonical paying Devs and all, it isn't a great way of influencing a community.

gorgoiler•5m ago
[delayed]
maeln•29m ago
You know, it is easy to find this kind of nitpicking and seemingly eternal discussion over details exhausting and meaningless, but I do think it is actually a good sign and a consequence of "openness". In politics, authoritarianism tend to show a pretty façade where everyone mostly agrees (the reality be damned), and discussion and dissenting voice are only allowed to a certain extent as a communication tool. This is usually what we see in corporate development.

Free software are much more like democracy, everyone can voice their opinion freely, and it tends to be messy, confrontational, nitpicky. It does often lead to slowing down changes, but it also avoids the common pitfall of authoritarian regime of going head first into a wall at the speed of light.

fn-mote•21m ago
The most interesting criticism / idea in the article was that the parts that are intended for Rust-ification should actually be removed from core apt.

> it would be better to remove the code that is used to parse the .deb, .ar, and .tar formats [...] from APT entirely. It is only needed for two tools, apt-ftparchive and apt-extracttemplates [...]

Another interesting, although perhaps tangential, criticism was that the "new solver" currently lacks a testsuite (unit tests; it has integration tests). I'm actually kind of surprised that writing a dependency solver is a greenfield project instead of using an existing one. Or is this just a dig at something that pulls in a well-tested external module for solving?

Posted in curiosity, not knowing much about apt.

stonemetal12•9m ago
Given that Cargo is written in Rust, you would think there would be at least one battle tested solver that could be used. Perhaps it was harder to extract and make generic than write a new one?
catlifeonmars•8m ago
[delayed]
dv35z•13m ago
Every time I consider learning Rust, I am thrown back by how... "janky" the syntax is. It seems to me that we ought to have a system-level language which builds upon the learnings of the past 20+ years. Can someone help me understand this? Why are we pushing forward with a language that has a Perl-esque unreadability...?

Comparison: I often program in Python (and teach it) - and while it has its own syntax warts & frustrations - overall the language has a "pseudocode which compiles" approach, which I appreciate. Similarly, I appreciate what Kotlin has done with Java. Is there a "Kotlin for Rust"? or another high quality system language we ought to be investing in? I genuinely believe that languages ought to start with "newbie friendliness", and would love to hear challenges to that idea.

tcfhgj•11m ago
what makes it unreadable for you?
tcfhgj•7m ago
seriously, just a question...
steveklabnik•10m ago
Syntax tends to be deeply personal. I would say the most straightforward answer to your question is "many people disagree that it is unreadable."

Rust did build on the learnings of the past 20 years. Essentially all of its syntax was taken from other languages, even lifetimes.

shmolyneaux•8m ago
I would encourage you to give it a try anyways. Unfamiliar syntax is off-putting for sure, but you can get comfortable with any syntax.

Coming from Python, I needed to work on some legacy Perl code. Perl code looks quite rough to a new user. After time, I got used to it. The syntax becomes a lot less relevant as you spend more time with the language.

simonask•8m ago
What are you talking about? Rust’s function signature and type declaration syntaxes are extremely vanilla, unless you venture into some really extreme use cases with lots of lifetime annotations and generic bounds.

I seriously don’t get it.

    fn add(a: i32, b: i32) -> i32 { … }
Where’s the “Perl-esqueness”?
stingraycharles•7m ago
Seems like a fairly decent syntax. It’s less simple than many systems languages because it has a very strong type system. That’s a choice of preference in how you want to solve a problem.

I don’t think the memory safety guarantees of Rust could be expressed in the syntax of a language like C or Go.

Aurornis•5m ago
> Comparison: I often program in Python (and teach it) - and while it has its own syntax warts & frustrations - overall the language has a "pseudocode which compiles" approach, which I appreciate.

I think this is why you don’t like Rust: In Rust you have to be explicit by design. Being explicit adds syntax.

If you appreciate languages where you can write pseudocode and have the details handled automatically for you, then you’re probably not going to enjoy any language that expects you to be explicit about details.

short_sells_poo•4m ago
I'm writing this as a heavy python user in my day job. Python is terrible for writing complex systems in. Both the language and the libraries are full of footguns for the novice and expert alike. It has 20 years of baggage, the packaging and environment handling is nothing short of an unmitigated disaster, although uv seems to be a minor light at the end of the tunnel. It is not a simple language at this point. It has had so many features tacked on, that it needs years of use to have a solid understanding of all the interactions.

Python is a language that became successful not because it was the best in it's class, but because it was the least bad. It became the lingua franca of quantitative analysis, because R was even worse and matlab was a closed ecosystem with strong whiffs of the 80s. It became successful because it was the least bad glue language for getting up and running with ML and later on LLMs.

In comparison, Rust is a very predictable and robust language. The tradeoff it makes is that it buys safety for the price of higher upfront complexity. I'd never use Rust to do research in. It'd be an exercise in frustration. However, for writing reliable and robust systems, it's the least bad currently.

debo_•3m ago
The family of languages that started with ML[0] mostly look like this. Studying that language family will probably help you feel much more at home in Rust.

Many of stylistic choices from ML derivatives have made their way into Swift, Typescript, and other non-ML languages.

[0] https://en.wikipedia.org/wiki/ML_(programming_language)

mrob•12m ago
The announcement says:

>In particular, our code to parse .deb, .ar, .tar, and the HTTP signature verification code would strongly benefit from memory safe languages and a stronger approach to unit testing.

I can understand the importance of safe signature verification, but how is .deb parsing a problem? If you're installing a malicious package you've already lost. There's no need to exploit the parser when the user has already given you permission to modify arbitrary files.

ChrisArchitect•8m ago
Related:

Hard Rust requirements from May onward

https://news.ycombinator.com/item?id=45779860

scotty79•6m ago
Maybe there's a place for Future Debian distro that could be a place for phasing out old tech and introducing new features?