frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds

https://scotthelme.co.uk/eight-bits-of-trust-emudhras-ca-keys-cracked-in-milliseconds/
78•hkc•1h ago•26 comments

The 1.5°C goal of the Paris Agreement is no longer viable

https://unric.org/en/unep-emissions-gap-report-2026-1-5-degree-overshoot/
165•velo_aprx•1h ago•165 comments

The Future of CSS

https://www.joshwcomeau.com/css/interop-2027/
382•soheilpro•8h ago•162 comments

Upcoming critical PHP security release (CVE-2026-109618 / -109619)

https://news-web.php.net/php.announce/509
901•xd•14h ago•363 comments

Show HN: SimCity, but with Permits

https://permit.petercai.com/
805•pcai•15h ago•376 comments

Muse exposes users' personal and business secrets when they share conversations

https://arstechnica.com/security/2026/10/meta-muse-exposes-users-personal-and-business-secrets-wh...
183•gumby•9h ago•86 comments

Whatever Happened to Fire Escapes

https://practical.engineering/blog/2026/10/20/whatever-happened-to-fire-escapes
3•sohkamyung•12m ago•0 comments

The Decoherence Trap

https://maevyn.codes/decoherence
48•cassianoleal•2d ago•14 comments

eMudhra intermediate CA compromise

https://emudhra.we-have-a-problem.com/
966•galadran•20h ago•406 comments

Voxtral 3

https://mistral.ai/news/voxtral-3/
677•ilreb•18h ago•171 comments

Feds suspect ransom negotiator ran ShinyHunters extortion site

https://krebsonsecurity.com/2026/10/feds-suspect-ransom-negotiator-ran-shinyhunters-extortion-site/
205•Bender•12h ago•96 comments

In Hilbert space, all things are quantumly possible

https://www.quantamagazine.org/in-hilbert-space-all-things-are-quantumly-possible-20260826/
99•unprovable•8h ago•53 comments

Bonanza of new dates rewrites the history of the Inca

https://www.science.org/content/article/bonanza-new-dates-rewrites-history-inca
12•pseudolus•1d ago•0 comments

Good type against all odds

https://unsung.aresluna.org/good-type-against-all-odds/
131•firloop•8h ago•12 comments

The Other Epidemic: Trying to get off benzodiazepines

https://www.thebeliever.net/the-other-epidemic/
199•gaplong•11h ago•149 comments

ZX Spectrum Next Laptop

https://www.dorchester3d.com/printing/blog/2020/11/zx-spectrum-next-laptop-version-2
84•utopcell•2d ago•15 comments

C# now beats Rust on WASM size

https://github.com/zion-sati/NetWasm
70•sumnole•7h ago•23 comments

Setting Up SSH Keys on macOS with Touch ID

https://nmattia.com/posts/2026-10-19-setting-up-ssh-keys-touch-id/
60•civilchaos•6h ago•35 comments

Google open-sources TorchTPU, a native PyTorch back end for TPUs

https://github.com/google-pytorch/torch_tpu
342•ilreb•17h ago•73 comments

Four Years with Decker

https://beyondloom.com/blog/fouryearsdecker.html
42•ibobev•22h ago•6 comments

What shall I teach my son?

https://stevekrouse.com/ends
405•Curiositry•17h ago•470 comments

Composite objects and C++26 the std:polymorphic type

https://mariusbancila.ro/blog/2026/10/18/composite-objects-and-cpp26-the-stdpolymorphic-type/
28•jandeboevrie•2d ago•28 comments

SlopCodeBench 10/2026 – Opus 5.5, Astra wins overall, xhigh considered harmful

https://github.com/humanlayer/advanced-context-engineering-for-coding-agents/blob/main/benchmarki...
262•dhorthy•5d ago•103 comments

Apple broke an essential presentation feature of iPads

https://teddysvoronos.com/2026-10-19-apple-broke-an-essential-presentation-feature-of-ipads/
561•evanb•22h ago•274 comments

Using Claude to reduce the attack surface of code

https://www.anthropic.com/research/attack-surface-reduction
53•dnw•6h ago•21 comments

DeepInfer: High-performance inference framework for DeepSeek models

https://github.com/deepseek-ai/DeepInfer
2255•ggcr•1d ago•856 comments

Battlezone Online: BZFlag in the Browser

https://github.com/timriker/bzo
31•indigodaddy•5h ago•23 comments

Way to Play Super Mario 64: On Apple Vision Pro

https://www.pagetable.com/303
6•frizlab•2d ago•3 comments

Pillowfort Is Closing

https://www.pillowfort.social/posts/8413273
47•BrenBarn•5h ago•24 comments

Ofcom concedes defeat in 4chan case

https://prestonbyrne.com/2026/10/20/ofcom-concedes-defeat/
397•iamnothere•19h ago•310 comments
Open in hackernews

A Rust API Inspired by Python, Powered by Serde

https://ohadravid.github.io/posts/2025-05-serde-reflect/
58•lukastyrychtr•1y ago

Comments

ohr•1y ago
(Author here) I needed to do a bit of "reflection" in a Rust crate but didn't want to implement a procedural macro, so I used Serde (which is a (de)serialization crate) instead.

This is also a deep dive into Serde internals - hope you'll like it!

snthpy•1y ago
Yes, great post! Thank you.
dundarious•1y ago
Pardon me, but I prefer the original by 1 million miles.

  let res = raw_api::query("SELECT * FROM Win32_Fan");
  for obj in res {
    if obj.get_attr("ActiveCooling") == Value::Bool(true) {
        if let Value::String(name) = obj.get_attr("Name") {
            if let Value::UI8(speed) = obj.get_attr("DesiredSpeed") {
                println!("Fan `{name}` is running at {speed} RPM");
            }
        }
    }
  }
If actually concerned about the need to know UI8, then create a typedef DesiredSpeedT or similar. This is equivalent to the struct Fan.

Edit: I understand the post is probably more of a playful exercise than anything else, but I really think the original is far far better (smaller, simpler, etc.) and hope that is not lost on people.

ohr•1y ago
That's understandable, but I think it depends on how many different structs like this you have and how many fields you need to work with (for our usecase, we had tens of structs with tens of fields each).

There's also an Alternatives section in the article about other approaches that can achieve similar results, but of course 'do nothing' is also a valid option.

Edit: > If actually concerned about the need to know UI8 ..

Just a small note: even if you don't care about the fact that it's a UI8, you still have to use the correct type. For example, if the field happens to be returned as UI4, this code won't work!

dundarious•1y ago
Right, but isn't the struct definition equivalent in line count and effort compared to some typedefs and perhaps a handful of trivial-to-inspect oneline helper functions?

Regarding the UI8, don't you have to get your version's struct data member type correct to the exact same degree as a typedef in my suggestion?

ohr•1y ago
> don't you have to get your version's struct data member type correct

No, since Serde will happyly fill a `u64` field with any other `u{8,16,32}` value, and even with signed types (as long as the actual value is non-negative) - this is sort of what happens when you deserialize a JSON `[1, 2, 3]` into `[u64]`.

dundarious•1y ago
Yes, but an equivalent to `impl<'de> Deserializer<'de> for ValueDeserializer` handles that. That could be a useful helper.
LtWorf•1y ago
dgacmu•1y ago
This kind of sells the reason not to wrap things behind an object interface, doesn't it?

    for fan in c.query("SELECT * FROM Win32_Fan"):
        if fan.wmi_property("ActiveCooling").value is True:
            print(f"Fan `{fan.wmi_property('Name').value}` is running at {fan.wmi_property('DesiredSpeed').value} RPM")
vs "SELECT Name, DesiredSpeed from Win32_Fan where ActiveCooling"

Obviously, this doesn't matter when you have 5 fans, but in general, you want to push your restrictions as deeply into the query as possible from an optimization standpoint.

ohr•1y ago
In WMI, the fields are lazy loaded when you do a `*` query, but the real crate [does use the same Serde reflection tricks](https://github.com/ohadravid/wmi-rs/blob/main/src/query.rs#L...) to create the correct field list when you query a struct which improves perf a lot!
vlovich123•1y ago
> Obviously, this doesn't matter when you have 5 fans, but in general, you want to push your restrictions as deeply into the query as possible from an optimization standpoint.

Depends where the database lives. If it's an in-process SQLite DB instance, there's no difference & doing this in code is easier to understand than more complicated SQL queries (of course not necessarily in this case but in general). But in all other cases you are correct about efficiency in general (although again other effects can dominate & make it irrelevant).

lnyng•1y ago
Interesting post. We wrote this “below” utility [1] that monitor system metrics similar to atop. We want the ability to collect all metrics into a single object, pass it around and visualize it elsewhere. Naturally we need some way to query into fields or even nested-struct fields. For example, to get the file cache usage of a particular process, we need to go through sample->processes->pid->memory->file cache. To do it ergonomically and also type-safely, we end up using proc macro to generate enums that represent field paths of the structs and then use them to query values of non-struct (leaf) fields. I always wonder if there are simpler ways or existing proc macro derives to safe us the efforts. Maybe I do need to look into serde internals for some inspirations.

[1] https://github.com/facebookincubator/below/blob/main/below/b...

lovasoa•1y ago
In my opinion, the clean way to implement this is with methods instead of attributes for name, desired_speed, etc...
xpe•1y ago
The title is vague in my opinion. What kind of API? What problem does it hope to solve? The article uses querying system data as examples, but after skimming it, I’m not sure why I would care. My comment is also a criticism of the article, since I couldn’t skim in quickly to figure out if I should spend more time on it.
ohr•1y ago
(Author here) Thanks! That's useful feedback.

I also agree - the final article isn't skim-friendly enough, which drives away some readers.

xpe•1y ago
Glad you are open to feedback. My top question is: What kind of people do you want to read this and why?
vlovich123•1y ago
I don't really understand what this offers above diesel.rs which AFAIK is a similar reflection interface except with much more flushed out ORM capabilities (much more complex filtering, joining etc) & support for an assortment of SQL dialects.
VWWHFSfQ•1y ago
> let res: Vec<Fan> = query();

It might feel more natural, and less magical if this used a turbofish instead

    let res = query::<Fan>();

Very neat
throw_a_grenade•1y ago
That's wdat minijinja does internally. As an argument to Template::render() you can give it any struct that implements Deserialize. That's how you can get varying (sic) variables to a single function and even attributes on "objects" processed by tte template.
I wrote typedload in python. Once they show you an API with hundreds of types you appreciate not having to do like that all the time.
dundarious•1y ago
I don't see the issue with just using an equivalent to `impl<'de> Deserializer<'de> for ValueDeserializer` then.
LtWorf•1y ago
There's unions, there's stuff that uses reserved words in the language as field names... You are obviously not familiar with this task.
dundarious•1y ago
The "generic macro over struct definitions" approach is the one that has at least some trouble dealing with these situations, not the "getter function with string argument" approach. I've had to do plenty of json and protocol buffers wrangling (meaningfully different, I know), and versioned packed struct memcpy/reinterpret_cast "parsing" as well.

My point is I don't want to do "this task" at all if "this task" means layering funky auto-generated machinery on top of what is already a perfectly reasonable API.

olalonde•1y ago
Why? It's much more verbose and error prone (e.g. "stringly typed"). Do you never deserialize JSON?
dundarious•1y ago
What's the difference between mistyping in the string here and mistyping in the struct definition? And yes I have.
olalonde•1y ago
You only need to get it right once, and from then on the compiler will catch any mistakes if you use it incorrectly. In contrast, every time you write obj.get_attr("DesiredSpeed"), there's a chance you'll make a typo and the compiler won't warn you about it.