Hacker News: weinzierl

New comment by weinzierl in "Asserts in Zig"

weinzierl — Mon, 01 Jun 2026 16:07:23 +0000

"And I'm pretty happy with its design considering its age."

Java did the right thing for assertions but then completely failed for the analoguous issue when it comes to logging.

I admit that logging is more complex because you often want it configurable dynamically at runtime. But I'd argue that the language should not be in your way if all you need is a compile time decision and the contortions we made for logging to stay low cost when nothing is logged are crazy in Java.

New comment by weinzierl in "Garnix (A Nix CI) is shutting down"

weinzierl — Fri, 29 May 2026 08:48:33 +0000

"gar" is a useful amplifying prefix in German that can be used in all kinds of situations and I think it lacks a direct equivalent in English. Unlike totally, for example, gar can only stand alone in very specific contexts and usually is used more like an intensifying prefix.

So garnix would be the total and utter nothing.

Gone Phishing with Claude Teams: From Deceptive Team Onboarding to RCE

weinzierl — Tue, 26 May 2026 14:54:43 +0000

Article URL: https://haussner.me/2026/05/24/claude-team-rce.html

Comments URL: https://news.ycombinator.com/item?id=48280693

Points: 2

# Comments: 0

New comment by weinzierl in "C constructs that still don't work in C++"

weinzierl — Mon, 25 May 2026 08:07:43 +0000

This is so true and it's a danger for other ecosystems too. Once the big corporations throw their weight in (be it in a committee or only informally) they make their use cases dominant regardless how niche they might be for the rest of the world.

For example in Rust there is one big entity that currently pours a lot of energy into improving C++ interop. Now, this is not exactly a niche topic, but especially in a world where AI makes many rewrites possible that we wouldn't have daunted to think about a couple of years before, we shouldn't waste too much effort to save legacy companies enormous codebases at the detriment of our preferred language.

New comment by weinzierl in "Scammers are abusing an internal Microsoft account to send spam links"

weinzierl — Sun, 24 May 2026 02:57:13 +0000

Who even can be sure microsoftonline.com is legit. Microsoft's domain story is such a mess, I wouldn't be surprised if not even internally they have one complete list of all the domain assets they own.

But they are not alone. It is kind of ironic when companies insist that we check the domain to spot spam but are unable publish a list with all domains they officially use to send mail.

New comment by weinzierl in ".NET (OK, C#) finally gets union types"

weinzierl — Sat, 23 May 2026 21:24:15 +0000

A common use case for the sum type is to define a Result (or Either) type. Now, C# not having checked exceptions is not as much in need for one as Java is, but I could still imagine it being useful for stream like constructs.

New comment by weinzierl in "A scoping review of bicycling interventions’ impacts on well-being"

weinzierl — Sat, 23 May 2026 19:59:36 +0000

I've been cycling to work for more than a decade in a more bike friendly city than LA (presumably), but still a city. What worries me a bit is the impact on my lungs. A doctor friend once told me they could easily tell the country person from the city dweller from looking at their lungs.

Apart from that it is a net positive for me and I wouldn't stop. You have to die one death they say and if it is lung cancer or COPD for me, so be it.

New comment by weinzierl in "US tech firms share Dutch regulator officials' names with Senate"

weinzierl — Sat, 23 May 2026 17:05:44 +0000

It's a manager thing, something you learn in business school and from airport-lounge management lit. "Decide at the last responsible moment" has its place but managerial types often undeservedly elevate it to a general principle.

Technical people are usually not like that. If anything they fall into the opposite trap: Always chasing the latest and greatest and wasting all their energy on novelty churn.

New comment by weinzierl in "The Art of Money Getting"

weinzierl — Sat, 23 May 2026 16:39:18 +0000

This is from 1880 and reminds me of something Dostoyevsky had written 14 years before. His quip in The Gambler was even more extreme because he spoke about working hard and saving every penny for generations with the subtext being that it makes everyone miserable.

New comment by weinzierl in "US tech firms share Dutch regulator officials' names with Senate"

weinzierl — Sat, 23 May 2026 13:34:33 +0000

> France, Germany, etc. are much better examples when it comes to sovereignty.

France maybe, Germany most definitely not.

New comment by weinzierl in "Staged publishing and new install-time controls for npm"

weinzierl — Sat, 23 May 2026 07:33:45 +0000

Seen favorably, staged publishing is a band aid. Seen more realistically I believe that in the long run it will even hurt our efforts for more secure infra.

New comment by weinzierl in "Google's Antigravity bait and switch"

weinzierl — Fri, 22 May 2026 07:18:14 +0000

Free and open source is necessary but not sufficient to protect you from the bait and switch (or general lock-in).

You need at least:

1. A Copyleft license

2. Rights staying with the authors, no CLA, no Copyright assignment

3. A diverse enough set of truly independent contributors to reliably prevent collusion.

Bonus points if everything is held together by an organization that operates for the good of the public (and not only its members, 501(c)(3) > 501(c)(6)).

Good examples are Linux, Git, Inkscspe and QEMU. Notably all software from the 90s or early 2000s.

New comment by weinzierl in "Everything in C is undefined behavior"

weinzierl — Wed, 20 May 2026 06:42:42 +0000

A fun one that'd fit list be sequence point violations like

    i = i++

New comment by weinzierl in "I’ve joined Anthropic"

weinzierl — Tue, 19 May 2026 20:12:07 +0000

He is a great educator, not only for ML. He taught speedcubing under the badmefisto pseudonym.

New comment by weinzierl in "Playing Atari ST Music on the Amiga with Zero CPU"

weinzierl — Sun, 17 May 2026 11:56:31 +0000

Same feeling. I often think of the 16-bit PC era as kind of the dark ages. Everything was weird, nothing made sense, elegance nowhere to be found. Things got a lot better again when 32-bit PCs came around and continued to improve with 64-bit.

New comment by weinzierl in "The Third Hard Problem"

weinzierl — Sun, 17 May 2026 09:19:55 +0000

More than once I encountered a project lead (often a higher-up) spend a half day after the project kick-off to create an elaborate folder structure for the team.

Younger me wondered: "Don't they have more important things to do? Why do they never delegate such a menial and boring task, especially when the structure is kind of obvious"

Today it makes total sense to me. Even if it looks obvious no one has the exact same hierarchy in mind. It was fast for them to materialize the hierarchy themselves than to convince anyone about it in every detail. Some things just can't be delegated.

New comment by weinzierl in "I believe there are entire companies right now under AI psychosis"

weinzierl — Fri, 15 May 2026 22:13:42 +0000

I don't think I missed the point, that is why I said I agree with the general point (and with what you said in your comment).

What I wanted to say is that the particular people that think "its fine to ship bugs because the agents will fix them so quickly and at a scale humans can't do!" are not the best argument for it.

But I won't die on this hill, maybe I'm just reading the sentence differently then others.

New comment by weinzierl in "I believe there are entire companies right now under AI psychosis"

weinzierl — Fri, 15 May 2026 20:58:34 +0000

"its fine to ship bugs because the agents will fix them so quickly and at a scale humans can't do!"

Hmm, I agree with the point OP is making, but I'm not so sure this is the best supporting argument. The bottleneck is finding the bugs and if he'd criticized people saying AI will be the panacea to that I'd be with him, but people saying agents are fast and good at fixing human found bugs is nothing I'd object to.

Agents are fixing bugs so quickly and at a scale humans can't do already.

New comment by weinzierl in "Bun Rust rewrite: "codebase fails basic miri checks, allows for UB in safe rust""

weinzierl — Fri, 15 May 2026 19:37:23 +0000

Exactly and "[...]and purely safe code (code with no unsafe blocks) is no longer guaranteed to be safe" hits the nail on the head.

I take issue with the phrasing of OP's title: "allows for UB in safe rust". AFAIK there are compiler bugs that allow UB in safe Rust, but this is not what is happening here. We have UB in an unsafe block (which is to be expected) which enables an issue outside in safe code. What is your opinion? Is calling this "UB in safe Rust" justified?

New comment by weinzierl in "We are retiring our bug bounty program"

weinzierl — Fri, 15 May 2026 16:07:34 +0000

My whole career I yearned for green field projects but somehow predominantly worked on existing grown code bases and legacy projects.

That naturally meant reading and understanding more code than writing. Sometimes my LOC count was even negative, and I was proud of that accomplishment.

Now with AI I write even less and I've given up on the dream to gain fulfillment that way. The ability to quickly understand large amounts of code from questionable sources, be them machine or human, should hopefully stay valuable until my retirement, especially when supported by AI? What do you think?