frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Molly(Signal fork) has not been updated since 3 months and is vulnerable

https://piefed.world/post/1503394
148•DeepLogin•5h ago•92 comments

We Took over ChatGPT Accounts

https://www.parameter.ai/labs/we-found-a-gap-at-openai
154•armcat•4h ago•68 comments

Switch Lowering in GCC

https://xoranth.net/gcc-switch/
125•signa11•7h ago•24 comments

Simple circuits can create complex behaviors

https://aatishb.com/myriad/lets-build-a-brain/
53•aatish•3d ago•4 comments

Serbia just elected the world's brainiest parliament

https://www.science.org/content/article/serbia-just-elected-world-s-brainiest-parliament
536•input_sh•5h ago•320 comments

Digital minimalism

https://vitalik.eth.limo/general/2026/10/31/digital_minimalism.html
151•wilbertliu•9h ago•121 comments

Retired professor arrested for blocking delivery robot. Will do it again

https://www.cnn.com/2026/10/31/us/philadelphia-woman-delivery-robots-cec
52•dxs•1h ago•29 comments

Show HN: Marelleo, an open-source story box I built for my kids using ESP32

https://zebra.rodeo/en/blog/marelleo/
129•foOg•4d ago•37 comments

Prospero: A new coding harness for a more civilized age

https://nullprogram.com/blog/2026/10/31/
79•fovc•3h ago•55 comments

AI, Lean, and the Future of Formal Verification, with Lean Creator Leo de Moura

https://thedataexchange.media/leo-de-moura-lean-aws/
111•datascientist•1d ago•25 comments

The $6.3B Binance hack was pulled off in just 20 minutes

https://www.wired.com/story/the-dollar63-billion-binance-hack-was-pulled-off-in-just-20-minutes/
525•domhudson•1d ago•367 comments

My favourite PowerMac is a Nintendo Wii

https://virtuallyfun.com/2026/10/29/my-favourite-powermac-is-a-nintendo-wii/
343•DHowett•22h ago•104 comments

Ex-Meta Researcher Torrented Pirated Books, Deleted It 'Due to Litigation'

https://torrentfreak.com/ex-meta-researcher-torrented-pirated-books-dataset-deleted-it-due-to-all...
9•WesleyGrant782•29m ago•0 comments

Hunting 'Zombie Accounts' in Active Directory

https://www.fabian.fyi/2026/10/zombie-hunt.html
11•optimiz•1d ago•1 comments

Cloudflare Turnstile solver library (no headless browser required)

https://github.com/chris124567/cfsolve
266•costco•2d ago•89 comments

Northflank Breached

https://status.northflank.com
460•js4ever•1d ago•335 comments

Breaking the open web won't stop the bad bots

https://www.techpolicy.press/breaking-the-open-web-wont-stop-the-bad-bots/
297•raybb•3d ago•128 comments

Reading and writing are less symmetric than you (probably) think

https://fgiesen.wordpress.com/2015/10/25/reading-and-writing-are-less-symmetric-than-you-probably...
3•luu•3d ago•0 comments

Tell HN: Scribd Breached

287•x______________•12h ago•105 comments

Florilegium: Procedural Flowers in LaTeX

https://github.com/kevinraymond/florilegium
339•nanna•23h ago•50 comments

The oldest ice disappears and the Stone Age emerges from it

https://www.sciencenorway.no/archaeology-climate-culture/the-oldest-ice-is-disappearing-the-stone...
178•dxs•19h ago•78 comments

Cisco gives engineer unlimited AI tokens to rewrite legacy code

https://fortune.com/2026/10/30/cisco-president-jeetu-patel-gen-z-27-year-old-unlimited-ai-tokens-...
241•taubek•1d ago•287 comments

Backdoor in Claude Code for VS Code extension on the Cursor Marketplace

https://phorion.io/blog/offical-claude-code-vsx-compromise/
934•_chall•1d ago•537 comments

Show HN: A working Nintendo in ~1GB of Qwen weights

https://github.com/dbreunig/nesformer
273•dbreunig•22h ago•135 comments

Longitudinal Changes InWearable-Captured PhysiologyBefore Sudden Cardiac Death

https://www.jacc.org/doi/epdf/10.1016/j.jaccas.2026.110397
52•brandonb•3d ago•24 comments

Keeping the Bonfires Lit

https://www.historytoday.com/archive/out-margins/keeping-bonfires-lit
13•Petiver•1d ago•5 comments

The federated code forge

https://tangled.org/blog/forge/
310•zlliang•23h ago•90 comments

Azure's Weakest Link – Five Full Cross-Tenant Compromises

https://www.binarysecurity.no/posts/2026/10/one-root-case
325•swq115•1d ago•59 comments

Show HN: To Honor Sir Patrick Stewart, Enjoy the TNG Episode Guessing Game

https://tng.episodle.com/
217•francisofascii•15h ago•68 comments

Jules Verne's Lost Novel

https://blue-continuum.com/verne-paris
134•dnetesn•19h ago•32 comments
Open in hackernews

A Rust API Inspired by Python, Powered by Serde

https://ohadravid.github.io/posts/2025-05-serde-reflect/
58•lukastyrychtr•1y ago

Comments

ohr•1y ago
(Author here) I needed to do a bit of "reflection" in a Rust crate but didn't want to implement a procedural macro, so I used Serde (which is a (de)serialization crate) instead.

This is also a deep dive into Serde internals - hope you'll like it!

snthpy•1y ago
Yes, great post! Thank you.
dundarious•1y ago
Pardon me, but I prefer the original by 1 million miles.

  let res = raw_api::query("SELECT * FROM Win32_Fan");
  for obj in res {
    if obj.get_attr("ActiveCooling") == Value::Bool(true) {
        if let Value::String(name) = obj.get_attr("Name") {
            if let Value::UI8(speed) = obj.get_attr("DesiredSpeed") {
                println!("Fan `{name}` is running at {speed} RPM");
            }
        }
    }
  }
If actually concerned about the need to know UI8, then create a typedef DesiredSpeedT or similar. This is equivalent to the struct Fan.

Edit: I understand the post is probably more of a playful exercise than anything else, but I really think the original is far far better (smaller, simpler, etc.) and hope that is not lost on people.

ohr•1y ago
That's understandable, but I think it depends on how many different structs like this you have and how many fields you need to work with (for our usecase, we had tens of structs with tens of fields each).

There's also an Alternatives section in the article about other approaches that can achieve similar results, but of course 'do nothing' is also a valid option.

Edit: > If actually concerned about the need to know UI8 ..

Just a small note: even if you don't care about the fact that it's a UI8, you still have to use the correct type. For example, if the field happens to be returned as UI4, this code won't work!

dundarious•1y ago
Right, but isn't the struct definition equivalent in line count and effort compared to some typedefs and perhaps a handful of trivial-to-inspect oneline helper functions?

Regarding the UI8, don't you have to get your version's struct data member type correct to the exact same degree as a typedef in my suggestion?

ohr•1y ago
> don't you have to get your version's struct data member type correct

No, since Serde will happyly fill a `u64` field with any other `u{8,16,32}` value, and even with signed types (as long as the actual value is non-negative) - this is sort of what happens when you deserialize a JSON `[1, 2, 3]` into `[u64]`.

dundarious•1y ago
Yes, but an equivalent to `impl<'de> Deserializer<'de> for ValueDeserializer` handles that. That could be a useful helper.
LtWorf•1y ago
dgacmu•1y ago
This kind of sells the reason not to wrap things behind an object interface, doesn't it?

    for fan in c.query("SELECT * FROM Win32_Fan"):
        if fan.wmi_property("ActiveCooling").value is True:
            print(f"Fan `{fan.wmi_property('Name').value}` is running at {fan.wmi_property('DesiredSpeed').value} RPM")
vs "SELECT Name, DesiredSpeed from Win32_Fan where ActiveCooling"

Obviously, this doesn't matter when you have 5 fans, but in general, you want to push your restrictions as deeply into the query as possible from an optimization standpoint.

ohr•1y ago
In WMI, the fields are lazy loaded when you do a `*` query, but the real crate [does use the same Serde reflection tricks](https://github.com/ohadravid/wmi-rs/blob/main/src/query.rs#L...) to create the correct field list when you query a struct which improves perf a lot!
vlovich123•1y ago
> Obviously, this doesn't matter when you have 5 fans, but in general, you want to push your restrictions as deeply into the query as possible from an optimization standpoint.

Depends where the database lives. If it's an in-process SQLite DB instance, there's no difference & doing this in code is easier to understand than more complicated SQL queries (of course not necessarily in this case but in general). But in all other cases you are correct about efficiency in general (although again other effects can dominate & make it irrelevant).

lnyng•1y ago
Interesting post. We wrote this “below” utility [1] that monitor system metrics similar to atop. We want the ability to collect all metrics into a single object, pass it around and visualize it elsewhere. Naturally we need some way to query into fields or even nested-struct fields. For example, to get the file cache usage of a particular process, we need to go through sample->processes->pid->memory->file cache. To do it ergonomically and also type-safely, we end up using proc macro to generate enums that represent field paths of the structs and then use them to query values of non-struct (leaf) fields. I always wonder if there are simpler ways or existing proc macro derives to safe us the efforts. Maybe I do need to look into serde internals for some inspirations.

[1] https://github.com/facebookincubator/below/blob/main/below/b...

lovasoa•1y ago
In my opinion, the clean way to implement this is with methods instead of attributes for name, desired_speed, etc...
xpe•1y ago
The title is vague in my opinion. What kind of API? What problem does it hope to solve? The article uses querying system data as examples, but after skimming it, I’m not sure why I would care. My comment is also a criticism of the article, since I couldn’t skim in quickly to figure out if I should spend more time on it.
ohr•1y ago
(Author here) Thanks! That's useful feedback.

I also agree - the final article isn't skim-friendly enough, which drives away some readers.

xpe•1y ago
Glad you are open to feedback. My top question is: What kind of people do you want to read this and why?
vlovich123•1y ago
I don't really understand what this offers above diesel.rs which AFAIK is a similar reflection interface except with much more flushed out ORM capabilities (much more complex filtering, joining etc) & support for an assortment of SQL dialects.
VWWHFSfQ•1y ago
> let res: Vec<Fan> = query();

It might feel more natural, and less magical if this used a turbofish instead

    let res = query::<Fan>();

Very neat
throw_a_grenade•1y ago
That's wdat minijinja does internally. As an argument to Template::render() you can give it any struct that implements Deserialize. That's how you can get varying (sic) variables to a single function and even attributes on "objects" processed by tte template.
I wrote typedload in python. Once they show you an API with hundreds of types you appreciate not having to do like that all the time.
dundarious•1y ago
I don't see the issue with just using an equivalent to `impl<'de> Deserializer<'de> for ValueDeserializer` then.
LtWorf•1y ago
There's unions, there's stuff that uses reserved words in the language as field names... You are obviously not familiar with this task.
dundarious•1y ago
The "generic macro over struct definitions" approach is the one that has at least some trouble dealing with these situations, not the "getter function with string argument" approach. I've had to do plenty of json and protocol buffers wrangling (meaningfully different, I know), and versioned packed struct memcpy/reinterpret_cast "parsing" as well.

My point is I don't want to do "this task" at all if "this task" means layering funky auto-generated machinery on top of what is already a perfectly reasonable API.

olalonde•1y ago
Why? It's much more verbose and error prone (e.g. "stringly typed"). Do you never deserialize JSON?
dundarious•1y ago
What's the difference between mistyping in the string here and mistyping in the struct definition? And yes I have.
olalonde•1y ago
You only need to get it right once, and from then on the compiler will catch any mistakes if you use it incorrectly. In contrast, every time you write obj.get_attr("DesiredSpeed"), there's a chance you'll make a typo and the compiler won't warn you about it.