Hacker News: praseodym

New comment by praseodym in "Htmx 4.0"

praseodym — Fri, 28 Aug 2026 15:53:24 +0000

Is it just a coincidence that the image for this release is the same as for Omarchy Quattro? https://youtu.be/F7fe9pa8OeE

New comment by praseodym in "New Mac Studio with M5 Max and M5 Ultra"

praseodym — Tue, 25 Aug 2026 20:22:15 +0000

My home server is an ASUS NUC 14 Essential which idles at 5W with a bunch of services running. Its peak performance is probably less than the Mac Mini, but the hardware is cheap (at least it was before RAM/storage got expensive) and it’s a great platform to run Linux on.

New comment by praseodym in "Slack Code"

praseodym — Sun, 23 Aug 2026 10:21:35 +0000

They announced something one day after Slack Code: https://github.blog/changelog/2026-08-21-shared-agentic-work...

New comment by praseodym in "Malicious Rust crate Arrayref runs a build-time payload"

praseodym — Thu, 20 Aug 2026 15:45:24 +0000

cargo-deny can audit build scripts, but unfortunately not prevent execution of malicious build scripts exactly for the reason you gave. It could still help if you only ever use cargo add and update in a sandbox.

See https://embarkstudios.github.io/cargo-deny/checks/bans/cfg.h...

New comment by praseodym in "Malicious Rust crate Arrayref runs a build-time payload"

praseodym — Thu, 20 Aug 2026 14:16:50 +0000

You’re right about attackers being able to change runtime code.

pnpm does have some other features to prevent supply chain attacks, so there is still something to learn from other ecosystems. For example pnpm has a cooldown period for new dependencies and can prevent trust policy downgrades (eg new version published without build provenance where older versions did have it). See https://pnpm.io/supply-chain-security

New comment by praseodym in "Malicious Rust crate Arrayref runs a build-time payload"

praseodym — Thu, 20 Aug 2026 14:11:40 +0000

As mentioned by others it’s just as easy for an attacker to modify a crate’s runtime code.

New comment by praseodym in "Malicious Rust crate Arrayref runs a build-time payload"

praseodym — Thu, 20 Aug 2026 13:53:22 +0000

Post on the Rust blog: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on...

Discussion: https://news.ycombinator.com/item?id=49372853

New comment by praseodym in "Malicious Rust crate Arrayref runs a build-time payload"

praseodym — Thu, 20 Aug 2026 12:39:23 +0000

Unfortunately Cargo doesn’t have security controls in place to prevent these kinds of attacks. For example pnpm has controls to allowlist install scripts for dependencies and will warn about new install scripts (without executing them).

There is an open issue for this: https://github.com/rust-lang/cargo/issues/13681

Supply Chain Attack on Arrayref

praseodym — Thu, 20 Aug 2026 10:46:56 +0000

Article URL: https://blog.rust-lang.org/2026/08/20/supply-chain-attack-on-arrayref/

Comments URL: https://news.ycombinator.com/item?id=49372853

Points: 33

# Comments: 2

Topcoat: framework for building fullstack reactive web apps with Rust

praseodym — Fri, 24 Jul 2026 08:19:41 +0000

Article URL: https://tokio.rs/blog/2026-07-22-announcing-topcoat

Comments URL: https://news.ycombinator.com/item?id=49032673

Points: 2

# Comments: 0

New comment by praseodym in "The space bit of SpaceX is worth $8 a share, says Morgan Stanley"

praseodym — Wed, 08 Jul 2026 10:26:00 +0000

Don’t forget that SpaceX has 3.884 billion outstanding shares!

New comment by praseodym in "Hetzner Price Adjustment"

praseodym — Mon, 15 Jun 2026 16:08:07 +0000

Just wait for the hyperscalers to follow suit

ECB raises interest rates for the first time in three years

praseodym — Thu, 11 Jun 2026 12:50:19 +0000

Article URL: https://www.euronews.com/business/2026/06/11/ecb-raises-interest-rates-for-the-first-time-in-three-years-as-iran-war-fuels-inflation

Comments URL: https://news.ycombinator.com/item?id=48489635

Points: 3

# Comments: 0

New comment by praseodym in "Bricks and Minifigs Stole a Man's $200k Lego Collection"

praseodym — Thu, 28 May 2026 21:35:02 +0000

The screenshot of the Facebook post says they purchased the sets for approximately $20,000.

New comment by praseodym in "Migrating from Go to Rust"

praseodym — Sun, 24 May 2026 21:33:39 +0000

Note that many Rust libraries consist of multiple crates, which all end up in the dependency graph. This makes the number of dependencies seem higher than it actually is: the separate crates have the same maintainers and are often part of the same upstream git repo.

I agree with the general sentiment though. Rust also has a lot of crates that are stuck semi-unmaintained at some 0.x version, often with no better alternative.

New comment by praseodym in "How can Apple deal with the memory shortage?"

praseodym — Thu, 14 May 2026 17:49:24 +0000

> since Apple saved money on not participating in the AI data-center fiasco

They have unused custom built AI servers sitting in warehouses: https://news.ycombinator.com/item?id=47221264

New comment by praseodym in "We need a federation of forges"

praseodym — Wed, 29 Apr 2026 18:52:50 +0000

Forgejo also has a roadmap for federation but it looks like development is progressing rather slowly: https://codeberg.org/forgejo-contrib/federation/src/branch/m...

New comment by praseodym in "Case study: recovery of a corrupted 12 TB multi-device pool"

praseodym — Mon, 06 Apr 2026 07:54:28 +0000

ZFS on Linux has had many bugs over the years, notably with ZFS-native encryption and especially sending/receiving encrypted volumes. Another issue is that using swap on ZFS is still guaranteed to hang the kernel in low memory scenarios, because ZFS needs to allocate memory to write to swap.

New comment by praseodym in "Fedora 44 on the Raspberry Pi 5"

praseodym — Sun, 15 Mar 2026 15:36:15 +0000

I'm seeing 4-4.5 Watt idle. I've disabled WiFi in the BIOS (using wired Ethernet) and ran `powertop --auto-tune`, but not much else.

New comment by praseodym in "Fedora 44 on the Raspberry Pi 5"

praseodym — Sun, 15 Mar 2026 12:06:14 +0000

I’m using an ASUS NUC 14 Essential Kit N355. It’s a bit more expensive than the Pi 5, but also more powerful (8 cores and decent GPU). There is also a more affordable N150 model. And even lower budget are the N150 mini PCs from Chinese manufacturers, but they often mess up things like cooling in a hardware revision (compared to the favorable review that you’d read).

And forgot to mention this before: Intel CPUs with built-in GPUs have very performant and energy efficient hardware video codecs, whereas the Raspberry Pi 5 is limited and lacks software support.