Hacker Newsnew | past | comments | ask | show | jobs | submit | r2vcap's commentslogin

Those problems are partly attributable to Zig itself. If the project accepted AI-assisted contributions, this controversy might never have happened. Completely shutting out one side of the industry and taking a dogmatic position is not helpful, especially for a pre-1.0 language that is still relatively immature.

Now the Zig community is attacking one of the largest and best-known codebases ever built with the language. Anthropic’s motives are clearly promotional, but even so, I would not choose Zig for any project.


> Completely shutting out one side of the industry and taking a dogmatic position is not helpful, especially for a pre-1.0 language that is still relatively immature.

It is useful, you just have different goals in mind than the Zig leadership. Zig shared their detailed reasoning for that decision, which is mostly about the development and protection of the community


> If the project accepted AI-assisted contributions, this controversy might never have happened.

Had I given my wallet to the thief, this controversy (me getting stabbed) might never have happened.

This 100% was a way to getting back at Zig for not allowing their parent company's product, and a marketing move for Fable.


I'm on the same page with you that their AI stance is probably harmful for them -- but I think they wrote those as a reaction to the contributions from Bun and others. So your implied timeline is not entirely correct.


Nobody should feel insulted simply because a project decides to port its codebase to another language. It is a technical decision, not a personal attack.

Zig’s response has been a serious mistake. The TypeScript team ported the TypeScript compiler and language service from TypeScript to Go for TypeScript 7.0. Did anyone interpret that as the team insulting TypeScript itself? I certainly did not.


They don’t care about the switch and it seems they’re actually happy with it. What they care about is the implied messaging that Zig has issues that the rewrite in Rust solved. Andrew highlighted that they had bad engineering practice, the rewrite did not solve anything, and they invested a lot of engineering with Rust to try getting things to work, engineering effort they have not invested in Zig.


> Did anyone interpret that as the team insulting TypeScript itself?

No because Go and Typescript have wildly different use cases, and they explained in details the rationale for migrating the compiler, and why Go versus Rust. Their rationale makes sense, and did not throw Typescript under the bus (obviously).


I don't know, sometimes programming language choices seem to be in the realm of theology, not computer science or engineering.

What is more hurtful than somebody else making wrong religious choices?


Yes, why would Zig respond seriously to a company that has proven to have utter complete disdain towards humanity? Why would anyone be upset that a company is ruining workers lives, poisoning innocent civilians, and being used to kill school children?

That's just not fair!


From a supply-chain perspective, Cargo is still in the same broad risk category as npm and PyPI: installing packages means trusting externally published code, including code that may execute during build or installation.

Rather than looking for someone to blame - in this case, GitHub - we should focus on constructive ways to harden the ecosystem.


That's a separate issue of supply-chain risk, and crates.io using GitHub auth isn't really material to that.

The gripe with using GitHub auth for crates.io is that GitHub is owned by a large, fickle corporation with a (shall we say) complicated history with open source, and people object on principled grounds to being forced to use GitHub in order to participate in the crates.io ecosystem.


I'm working on a tool for collaboratively reviewing Rust crate dependencies: https://github.com/thirdpass-org/thirdpass

Also supports npm, PyPI, and Ansible Galaxy.


This is frustratingly one-sided writing. Yeah, WebRTC has limitations, but relying on a standard buys you a lot of correctness and reduces long-term engineering cost. The fact that WebRTC is complicated does not mean it is wrong; it means real-time media over the public internet is complicated.

Also, networking is inherently stateful. NAT traversal, jitter buffers, congestion control, packet loss, codec state, encryption, and session routing do not disappear because you put audio over TCP or WebSocket. Pretending otherwise is not architectural clarity. It is just moving the complexity somewhere less visible.


You might have noticed that the author started the blog post explaining themselves:

  Like 6 years ago I wrote a WebRTC SFU at Twitch.
  Originally we used Pion (Go) just like OpenAI,
  but forked after benchmarking revealed that it was too slow.
  I ended up rewriting every protocol, because of course I did!

  Just a year ago, I was at Discord and I rewrote the WebRTC SFU in Rust.
  Because of course I did! You’re probably noticing a trend.

  Fun Fact: WebRTC consists of ~45 RFCs dating back to the early 2000s.
  And some de-facto standards that are technically drafts (ex. TWCC, REMB).
  Not a fun fact when you have to implement them all.

  You should consider me a Certified WebRTC Expert.
  Which is why I never, never want to use WebRTC again.
I think that they've done more than enough of 'trying the normal way' to be warranted in having an opinion the other way, don't you think?


Yes,agreed. I also found it apparently obvious that they have proven their experts worth on this subject matter. Many times, over and over.


But ChatGPT said …


Right but they also state they have never implemented TURN which IMO is a marker of WebRTC expertness. (I haven't btw, just the WebRTC experts I know absolutely have written or worked on at some point a TURN implementation)


It's not that strange. TURN has two main use cases: peer-to-peer when no viable direct path can be found and working around very strict firewalls. Based on the author's experience the first isn't relevant and the second isn't much of a concern for Twitch and Discord. For the latter case HTTP/3 is helping make TURN unnecessary because you can, as the author observes, run UDP over port 443.


> This is frustratingly one-sided writing

Tangential, but by being that, it's also refreshingly human writing, vs the both-sidesy bullet listed AI pablum that's all around us these days.

I have zero take on the subject matter, but I like that the article had a detectably human flair.

And if it was AI written, god help us.


“How hard can it be?” the strawman asked.

It’s 2026 and teleconferencing is still such a shit show. There’s billions of dollars to be had and Zoom is at best mediocre, and it can be as bad as Microsoft Whatchamacallit. I’ve never not seen teleconferencing be a ham handed mess.


Facetime does alright in the consumer segment.


The most frustrating thing about FaceTime is it sometimes appears to significantly duck audio in order to avoid echoes. I can't predict on which devices it will happen, but it often does when I call my parents and it absolutely destroys the conversation. If they're telling me something and I make the slightest "uhuh" acknowledgment sound, their mic input gets effectively muted for a second or so and I miss what they say.


I’ve found that if the recipient is wearing headphones/earphones, you can freely interrupt them without getting ducked (and vice-versa). Doesn’t help much when you’re calling multiple people / have to be on speaker, but makes it predictable at least.


Well sure, that's the easy case for echo cancellation (remove the source of echoes entirely).

But we've had solutions to this for decades and it doesn't involve ducking the recipients audio. Apple and their billions of dollars should have had this completely solved by now.


QUIC is also a standard.


Yeah, GCC’s recent major releases have been remarkably regular, much like Fedora’s spring releases, and their releases seem to fit into the same broader rhythm. Hint? Red Hat.


Just use Fedora :)


All the cool kids are using Gentoo or Nix ;)


As LLMs improve and adoption grows, maintaining a FOSS project is becoming more complex and more expensive in terms of time and manpower. That part is easy to understand.

It is also become a trend that LLM-assisted users are generating more low-quality issues, dubious security reports, and noisy PRs, to the point where keeping the whole stack open source no longer feels worth it. Even if the real reason is monetization rather than security, I can still understand the decision.

I suspect we will see more of this from commercial products built around a FOSS core. The other failure mode is that maintainers stop treating security disclosures as something special and just handle them like ordinary bugs, as with libxml2. In that sense, Chromium moving toward a Rust-based XML library is also an interesting development.


Just use AI to fight AI, that's the only sensible way we can keep up. So if you're low-quality PRs, reports etc, have LLMs filter them out. Like how once upon a time we used to drown in email spam but it's now mostly a non-issue thanks to intelligent spam filters, the same needs to happen for opensource projects. Use AI to fight AI.


In other words, have more money to pay than your enemy.

This game will end horribly.


Does the Python ecosystem have anything like pnpm’s minimumReleaseAge setting? Maybe I’m being overly paranoid, but it feels like every internet-facing ecosystem should have something like this.



It feels like many democratic leaders are starting to think the CCP model—mass surveillance of citizens—is the right direction, with growing demands for chat control, facial verification, age verification, and more. Fxxk any politician who thinks they are above the citizens in a democracy.


I've been in mainland China for the past year and I wish western politicians would get it through their skulls that most of the ccp model's upsides come from CCTVs in public areas and a police force that prioritizes stopping street crime.


Do they de-prioritize or ignore other crimes that are not visible in the streets? This is an honest question, I want to know if actually focusing only on the streets makes people feel safe even if other types of crimes are rampant.

EDIT: I guess I could add examples of what "other crimes" could be. Fraud, corruption, sexual abuse, all victimless crimes, hitmen?


Victimless crimes definitely. For example, street vendors without permits are asked to leave, but not fined. Car accidents are investigated but there seems to be no 'ticket quotas' like in the west, etc.

I don't know much about the other categories you mentioned but I do know that president Xi is associated with a 'tough on corruption' stance that's widely seen as a major positive of his administration.


Eh, if you see the reaction to Flock Safety, people object to that one as well.


The problem is that those cameras aren't being put in areas where crime occurs in order to keep citizens safe. They are being put on busy streets to prevent people's ability to travel without being tracked.


Not familiar with that conversation, but is the concern that it will be used to raise ticket revenue from victimless crimes without doing much to prevent the other kind?


From what I've seen, it's simply an aversion to mass scale surveillance, even in public setting. The worry being how easy it could slide into a tool used by the state for nefarious purposes (punish political dissidents, etc).


Is there actually evidence of flock being used to stop street crime? I've never heard anything about Flock (or Shotspooter) stopping street crime.

Where I am, the local speed cameras have annual documents about the street their on detailing pre-camera vehicle speeds and fatal (pedestrian) accidents and the decreases in both of them since the usage.

Afaik, the concern isn't that it "could slide" its that flock _is used_ by say Texas to monitor out of state abortions. That isn't solving street crime and certainly didn't benefit the local residents.


The concern is losing all your freedom and privacy for no good reason


I don't think any constitution has ever guaranteed a right to privacy in public spaces. I can't imagine how that would ever work even if we were willing to make serious tradeoffs for it.


I believe that's it's sadly a necessity for control of the population when you have other superpowers employing this.

If you are Europe, and you have democratic elections, you have an informational power asymmetry towards the states that have mass surveillance and control. You are (as we saw last year with the Romanian election that was swung to 60% in 2 weeks over TikTok) susceptible towards influence of other superpowers. Even if you want to keep democratic elections, you need to somehow make sure that the citizens are voting in their interest. If the citizens at the same time are victims of the attention economy, their interest will be whatever foreign superpowers want it do be.

One well-tried solution is to engage and educate the population. However, this takes years, not weeks as the campaigns take, and takes immense resources as people will default to convenient attention economy tools.

Other option is to ban platforms/create country-wide firewalls. It's a lot harder in democratic societies, you ban one app and a new one takes it's place. Cat is kind of out of the bag on this one.

Last and easiest option is mass surveillance. Figure out who is getting influenced by what, and start policing on what opinions those people are allowed to have and what measures to take to them. Its a massive slippery slope, but I can clearly see that it's the easiest and most cost-effective way to solve this information-assymetry


As always, the devil is in the details. How will "mass surveillance" be implemented? How will bad opinions be suppressed? How will misguided officials be blocked?

Even the vague outline you've provided has issues. You can't prevent someone from having an opinion. You can't figure out who is "influenced" vs merely "exposed" (and visible intrusion shifts people towards the former).

You should actually consider the downsides and failure modes of implemented mass surveillance, not "it prevents malicious foreign influence better than my other proposals", because it may be worse than said influence (which does not necessarily translate into control; keep in mind that Georgescu only won the primary and would've lost the runoff had it not been annulled). The world under free information is the devil you know.

I always hold that the problem with mass censorship and state overreach is, they are too powerful and people are too selfish and stupid. There's no good solution, but my prediction is that any drastic attempt to prevent foreign interference will backfire and fail at that (liberal leaders can't use authoritarian tools as effectively as authoritarians). Even Democracy, "the worst form of government except for all others that have been tried", is a better countermeasure; all you need, to prevent anti-democratic foreign capture and ultimate failure, is to preserve it.


I think the definition of what is "anti-democratic" is as hard as the initial 3 questions you pose. If you push second-order ideas, for example by using refugees as indirect fuel for anti-democratic sentiment, is that anti-democratic? The Romanian election propaganda in itself was not anti-democratic, the coordination from a foreign state was. This means that the future of this kind of interference could be a more diffuse approach, or an approach where this is done from within Europe.

Any countermeasure you propose will just lead to moving one level of abstraction, or finding another point of entry.

I do think it's a better idea than mass surveillance, but I believe that the states will see it as harder. It can be that mass surveillance is implemented, and then the states do not know what to do with the data and nothing is achieved.


Regarding banning platforms I’d say just ban the attention driven business model online by forbidding all social media platforms from serving ads entirely.


Ban all third party advertisement. Or taking payment for it at any rate.


To what end would you say the surveillance is for?

So you surveil your citizens and precog their opinions... to do what? Make them have state-sponsored opinions? Don't we already have that without the surveillance?

It's trivial to predict how a human will behave without any surveillance at all. Facebook abandoned their Beacon system not because of the backlash, but because they realized all they really needed to predict user behavior was the user's credit card statements, which they could easily buy.

At some point the constitution is the backstop, and unless we amend it, it should hold true.


I don't think that the EU member states have the same data access as companies in the US like Facebook do, and therein lies the problem. There is no good way to gather and connect data like Meta or Palantir can, you can't just sell things to the maximum bidder here. I think that's where the necessity comes from.


> "control of the population"

Who is doing the controlling in this take? "The Government"? Calling for more government control when some say--at least in the US--too much government is the heart of our current political strife. Unless this argument is for corporate surveillance?

As for elections in the age of social media, why not just pass Blackout laws around the date of the election? One week not sufficient? Make it two.

But instead the answer is mass surveillance? To do what? Arrest & detain people, and let the judicial system incarcerate them for months or years while the process plays out?


I am not for mass surveillance, I am saying it's the cheapest option to achieve the goal without disturbing the individual and causing social unrest. If you have a blackout, you will have businesses stopped, people will complain, people will use VPNs anyways, massive economic costs. Mass surveillance will just allow you to monitor, flag and perhaps later exclude people without affecting the rest.


>when some say

Some say very nearly anything you could imagine and many things you couldn’t.


>If you are Europe, and you have democratic elections, you have an informational power asymmetry towards the states that have mass surveillance and control. You are (as we saw last year with the Romanian election that was swung to 60% in 2 weeks over TikTok) susceptible towards influence of other superpowers

When Georgia tried to implement a law to inhibit this type of foreign meddling from all superpowers it was widely branded a "pro russia law", presumably because the west had invested more in astroturfing Georgia.

Which is no different to what the US and Europe was already doing in Romania on an ENORMOUS scale before Russia ran its Tiktok campaign. Russia's campaign evidently resonated with the populace far more than what the NED were doing.

Democracy is a bit like freedom of speech - either you support it even when it makes decisions you dont like (e.g. in opposition to western imperialism) or you hate it. There isnt a middle ground.

If you support the Romanian secret services' decision to cancel the election over a tiktok campaign which was more convincing than better funded NED campaigns which they permit, you probably just hate democracy.

If you think "pro russia law" is an accurate designation of what Georgia was trying to implement - again, you just hate democracy.


Thank you. Haven't seen this problem framed in quite this way before. I find the point quite persuasive.

But, I don't understand how this step could possibly work:

> start policing on what opinions those people are allowed to have and what measures to take to them

A much more effective counter to this would be to rebalance the information asymmetry by giving citizens the tools to coordinate against state sponsored influence.


It's a good suggestion, but the thing is that the average person does not care and does not want to use your tools. You can make an app that gives you correct news, where you can vote for local political issues, etc. Most people don't give a shit, you as a state are competing against the attention economy(evolving into an affection economy given LLM use).

You are competing against companies that are using biologically wired mechanisms, like short-burst 3-second information overload together with marketing signaling(consumer neuroscience) to make you do choices and then confabulate the choice to yourself as your own.

Any tool would have to either be made in a landscape where ALL of the attention/affection-economy tools are banned, OR use the same mechanisms.


I agree but I also think that authenticity is one quality that such a tool could offer that other things in the attention economy cannot.

Addictive things are addictive. But people are also capable, given the right circumstances, to go and "touch grass". People are capable of making choices that are good for them. Especially if we make those choices easy enough.

I often scroll too much but I also go into nature and meet irl humans. And it's not close to an insurmountable choice.


> A much more effective counter to this would be to rebalance the information asymmetry by giving citizens the tools to coordinate against state sponsored influence.

Which tools, specifically? I know none.


I mean that we are in dire need of such tools!

I also am not aware of any existing tools.


Your last paragraph spunds misguided


Said leaders are only really democratic based on the literal name of the party they signed with when running for office. There's nothing democratic about these types of programs and I have to assume that a plainly explained referendum spelling this out on a ballot would fail miserably.


Canadian leaders are currently very consciously choosing to partner with China as opposed to the U.S.

I get diversification, that’s a good call, but adopting policies that actively harm Canada to the benefit of China is where we’re at and it’s so far beyond the pale. Just take a look at Canada, who for as long as I have known, have tried to maintain its industrial base in Ontario, eg the cross-border supply chain for automobiles, but then this "new" government comes in and is like y’know what we really need right now? To compound the effects of tariffs, piss off our biggest trading partner, risk NAFTA (CUSMA) and our entire cross-border supply chains with the US all so we can get some cheap electric cars from China, which won't even be manufactured here (atleast not with Canadian jobs); meanwhile we just spent close to $100 billion in subsidies explicitly to try and kickstart electric vehicle manufacturing in Canada. May have been more productive to turn that $100 billion into pennies and throw them down a wishing well...


This is a systemic problem of modern information technology. With social media for instance, either you let the technology run rampant and the worst case scenareo plays out. That is misinformation, tribalism, bidy dysmorphia and the pletora of other issues. The worst case pesamistic mode of what the technology can do, that is self termination. The alternative is that you have to have the watchmen over watch everything and you have the full dystopia model.

While there is a middle road, it is almost never taken as it is the hardest path. The real trick is to not invent the torment nexus but you cannot know this as the n'th order effects are decades beyond the initial creation. But that is so incredibly difficult to anticipate.

Think about it, the transistor was invented in 1947, 70 years later it turned into the surviellance panopticon. Very few could have seen that coming.

I dont have answers just explanations here.


Look at what social media considers to be safe countries.

You are absolutely bombarded with messaging about how Dubai and Chinese cities are the safest places in the world. I have friends who live in each who consider North America and Europe crime ridden shitholes because theft is possible to get away with.

If society believes that crimes is utterly rampant despite it collapsing over the past few decades, there is nowhere else to go but mass surveillance to make sure that even the smallest of visible crimes are stamped out.


The streets of Dubai and pretty much any where in China, Hong Kong, Thailand, Vietnam etc are orders of magnitude safer than UK, US, France, and other western European countries. Crime appears to be tolerated and reporting crimes doesn't do much, and statistics are managed in western Europe. If you get an opportunity to travel to China, do see for yourself how safe the cities feel, and how advanced (and safe) the public transport systems are.


There is also plenty of social media and politicians telling you that because of some statistic that the knife wielding gang you yourself saw in the shopping centre in east London in fact does not exist


>If society believes that crimes is utterly rampant despite it collapsing over the past few decades

After having to push for a crime to be actually registered and for others to even report small crimes because police has been so useless in Brussels I lost complete faith in this.

It also doesn't track with prisons overflowing more and more and damn near half of prisoners not having the nationality. It's safer now! But more and more people have experiences so keep your wallet in your front pocket. Watch out as a woman after dark. Avoid certain areas that your grandma described as posh and the trainstation you went to every day in your youth has stabbings now.

It feels like one of a bunch of fronts where we get some kind of hypernormalisation.


Getting a warrant for each person is not "mass surveillance". Why do you think a warrant is not required? It is.


[flagged]


It's the opposite: people are getting exactly what they voted for, they just didn't realize they’re voting for it, because of mass propaganda.


Plus with all the floor crossers recently, the elections just seem moot. You vote for a party because you believe in their agenda, and then the representative joins the other party without any repercussions.


Canadians do not elect parties. We elect Members of Parliament. This is why it is democratic for MPs to cross the floor from one party to another. It has happened over 300 times since Canada became a country.

If an MP is not free to vote in the best interests of their constituents, and rather has to vote along party lines, then the failure of democracy has already occurred. Crossing the floor, in order to act in the best interest of your constituents, is a big move that one doesn't decide on overnight.

We should be more tolerant of individual MPs not always siding with their team, without them having the fear of being removed from their caucus.

Notice how none of the floor crossings happened right after the election. They took time, they saw how government was working, and they took action based on their experience.


These countries are disguised vassals of the United States.

They're nominally independent but in practice are run by a local oligarchy who generally do as they please within the confines of what the US allows.

Theyre effectively all as independent as Poland or Hungary were under the Soviet Union. i.e. not.

There are the occasional anti-us imperialist and anti-oligarchy candidates who gain popularity but their careers are usually terminated with a deluge of mudslinging or by using bureaucracy to lock them out of the political system.


Interesting idea overall, and I would support doing this if we can.

Some constraints are:

- Non-programmers are not used to working with Git.

- In practice, they (usually PMs or feature designers) need to write their documents somewhere else.

Possible solutions are:

- Make non-programmers use Git as a documentation tool (upgrade your tooling or GTFO).

- Build a two-way sync tool so that programmers and non-programmers can work from the same source.

  - However, in practice, an SSOT (single source of truth) architecture is usually much simpler. Two-way sync tends to be quite difficult, especially across different platforms.


Damn. Please use UTC.

From my understanding: Peak time (non-promo): UTC 12:00–18:00 / KST (UTC+9): 21:00–03:00 Off-peak time (promo): UTC 18:00–12:00 / KST (UTC+9): 03:00–21:00

I guess I’ll need to do more coding during the daytime.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: