HNHacker News
TopNewBestAskShowJobs

adev_

2,300 karma · joined September 13, 2018

submissionscomments
adev_··on GLM-5.3 and the spread of advanced cyber capabilities
> Yeah, thank god those models have arrived.

+100.

Thanks God. these open weight models exist.

And the fact Anthropic is currently trying lobby against these models is despicable.

There is no scenario where putting the key of cybersecurity in the hands of few chosen ones is even remotely acceptable.

No government, no company, no entity should have this power.

Soon or later it will be abused (By 3 letter agency or by an insider/leak).

Delayed disclosure is dead already.

So just give the same capabilities to everybody and stop to fuck around.

adev_··on Nokia Design Archive (2025)
> they really thought they had it all figured out and it was now time to lay back.

You mean like Apple today ?

The Apple watch is from 2015.

What new product Apple produced since Tim Cook took over ?

The iPhone Duo ? Ironically it has quite a smell of Nokia N95 all over again.

adev_··on Quasar 438B: Europe's Leading AI Model
Any hope of an integration to Openrouter ?
adev_··on Solo – a .so loader for static Linux binaries
What we name the loader is typically ld.so, more precisely /lib/ld-linux-x86-64.so.2 under x86_64.

But I do agree with you, the glibc is all one giant codebase shipped in one giant blob, dispatch under several names.

Even libdl.so is barely more than a wrapper and some glue around the libc.so itself.

adev_··on Solo – a .so loader for static Linux binaries
> All shared libraries depend on the specific glibc version to load them into memory to be able to use that specific glibc version as their C library

That's currently the real core of the problem.

The loader (and libdl) need to be decoupled from the glibc itself under Linux.

Without that, any attempt to ship static binaries (or any binary with a different Libc) will be a source of perpetual pain.

nss plugins and its associated pain (sssd and avahi) are an other examples of that.

adev_··on Asus Bike Booster
If some of you ever have the occasion to go to the Toyota commemorative Museum, in Nagoya (Aichi), you will find this:

https://www.tcmit.org/english/research/car/car01

This is the last century version of the item that Asus is presenting here... but with a Gasoline engine.

The Engine is fixed on its own wheel and attached on the side of the bicycle.

This was apparently was a thing. It was used to motorize Japan at its industrialization debut.

On century later, electrification is now a thing and the same device is back with a battery. The loop is done.

PS: I do recommend the museum for anybody interested in industries and industrial processes.

adev_··on Parsers don't have to be complicated
> A simple recursive-descent parser is easy to write by hand and runs in linear time.

Recursive descenrs parsers are not linear.

They are generally O(n^2) and can even can go exponential with some grammars if written naively.

It can be pretty easy to do adverserival attacks on most naive descent parser and bring it to its knees.

Packrat parser [^1] are linear, but they are by no means "trivial 200 lines" type of parsers.

[^1]: https://arxiv.org/abs/cs/0603077

adev_··on Ask HN: Are systems ready for the first negative leap second?
I can relate:

My son is born at 02h30 right DST change time.

It tooks 3 f*cking days to get his birth registered in the Hospital new birth registration system.

The hospital (at the time) just got digitalized and most systems where not able to agree if he was born after or before DST changes.

PS: I guess he is born fated to be a software QA later on.

adev_··on Mistral's Robostral Navigate: a state of the art robotics navigation model
> I had a NAO robot (from another great French company) and it walked to employees to motivate them to do some movements.

One Toyota research center where I worked had robots that would go around the office and propose Snack to people.

While probably not being the most efficient way of using a robot, it definitively brought a smile on the face of many employees.

adev_··on Leanstral 1.5: Proof abundance for all
> It also found the bug that Leanstral 1.5 found and the authors highlighted

This is a little bit like someone pointing the moon and you look at the finger.

The formal proof domain goes way beyond just finding bugs.

It has tons of usages in term of functional safety, protocol validation, cryptography, etc...

The fact Mistral tackle this kind of problem is both smart and not so surprising.

Smart because it is niche enough that they do not front face the big competitors (yet).

No so surprising because the French labs have a well known and long time expertise with formal proof tools (Coq and all its Ocaml associated tools). It has been historically mainly pushed by the aerospace and train industries (Airbus, Dassault, Alsthom).

adev_··on Leanstral 1.5
I played with Qwen few months ago, I do prefer Mistral vibe for everyday usage (significantly faster if not self hosted).
adev_··on Leanstral 1.5
> Your reason can't be cost because there are superior models that are cheaper than Mistral models

Nope. This is not my experience.

Public pricing in token/$ is only part of the equation.

Mistral tooling to consume significantly less tokens-per-given-task than the Anthropic ones.

My bills currently reflects that.

adev_··on Leanstral 1.5
> Mistral because it performs the best, by whatever secular metric of your choosing?

I am. I use them primarily through their vibe CLI.

Reason is simple: They are cheaper (by almost one order of magnitude compared to Claude) and still do the job pretty well.

For small programming tasks, quick prototyping, refactoring or anything verbose and not requiring a context too large: I first go to Mistral and then eventually to Claude if I'm unsatisfied.

I also found out some of their models to be more responsive than OpenAI ones (which is not so surprising considering the size).

My tasks are mainly C++ and Python programming. People in other languages might not share my enthusiasm.

adev_··on Political bias in AI: Where the AI models stand
> This thing told me Gemini is closest to Anthony Albanese, the current Australian Prime Minister. Is this a geolocation thing

I mean: do not take this thing too seriously.

It also score Grok the closest from Macron. When someone knows how much Macron and Musk hates each other, it is not without irony.

adev_··on Qualcomm to Acquire Modular
> My theory is that they raised too much money too soon.

That's also my feeling. And that's the curse of many VC funded companies. And they are not even in the classical state of enshitification yet.

> Rust is not going to win this market.

Agree. Rust will never win this market. Nor Zig, which has the same genetical flaws as C++ for accelerators (excessive usage of pointer semantics among others).

> Julia, although beautiful attempt, couldn't gather enough support outside academia.

I will look mean, but for me, Julia is a language that never went to the design board. It sticked to a "Let's put Python on top of LLVM and add a proper GC" with one single objective: "let's make a clone of Python but fast".

My feeling is also that it is an academia niche and will remain one.

> In fact, if Nvidia cuTile, Triton, Jax keep delivering, Python seems unmatched at the moment.

It is, and it is honestly pretty depressing.

Triton solves most of the performance issues of Python for accelerators but also introduces one (several on fact) more DSL, one more tooling ecosystem and solves none of the (long list of) issues related to Python/Numpy programming model.

adev_··on Qualcomm to Acquire Modular
> sorry for rambling.

You're right to ramble. I also believe that the world need a high level language fitting for accelerators that is not Python.

However developing something like that is by all means not a trivial task and many failed there.

adev_··on Qualcomm to Acquire Modular
> Swift for Tensorflow, the project hardly survived one year after the public announcement.

This was doom to fail from the beginning.

Swift will always have the image of an Apple product binded and controlled by the Apple ecosystem. This is very unlikely to change.

Nobody sane of mind would bind there entire technology stack on something half proprietary with a support was from the beginning secondary outside of Apple platforms.

adev_··on U.S. science is in chaos
> American expats also pay American taxes unless they give up US citizenship.

Practically, they barely pay anything significant.

The lower net salary in Europe / Asia associated with rather high local tax means that most Americans citizens oversea barely own anything significant back to the state.

However it does remain an annoyance to fill the tax declaration every year: I know several American who chose to give up their citizenahip just to avoid this specific issue.

adev_··on Can Europe train a frontier AI model on the compute it owns?
> being contradicted by another minister or by an official from a Canton.

Then you are misinformed.

Because it happens continuously.

Canton executive argumenting again "conseil fédéral".

Local Syndic (Mayor) arguing against Canton decision.

Local parlement trying to address or delay legislation or arguing against Berne ones.

Just open a random news paper.

This is democracy, like it or not.

adev_··on Can Europe train a frontier AI model on the compute it owns?
Unpopular opinion: They can not and they should not.

We live in a world where free open weight-models become competitive with frontier model within a year or two.

It is much more lucrative and proficient in term of business to solve real problems affecting the industries / govs with A.I right now than it is to do the arm race with OpenAI or Anthropic.

That is what Mistral is doing and that served them well so far.

The problem is not regulation and never has been. Regulation is a best a minor stone in the shoes of A.I company in Europe.

The problem is somewhere else: People fails to understand that there is no equivalent in the EU to the unlimited money tap of American VCs and private funding. That's just not a thing here, the investor landscape is much more dry.

Company here just cannot stay unprofitable for 25y while surfing on stocks valuation, it does not work like that in the EU.

And as such they cannot compete with behemoth like OpenAI that burn 80B$ a year of cash while staying afloat.

I do believe the approach of Mistral is the right one: Solve actual problems right now even if not Edge and construct on top of that.

Specially if politically speaking, the White House administration continue to give excellent arguments in favor of sovereignty for the incoming decade. It might be the best strategy they have.

adev_··on Can Europe train a frontier AI model on the compute it owns?
> And what good does it do? The EU cannot speak in a single voice - there is no foreign minister, no defense minister, no whatever minister.

Nor can Switzerland. And still it is one of the best country world wide both in term of living and economically.

Distributed federal power like Switzerland trades quick decision making for resilience.

If it might look up 'messy' on the surface, it is in fact a quality. A very valuable one in fact: because it is exactly what prevent fucked up like Trump to happen in the EU.

adev_··on Electric motors with no rare earths
> maintenance problems” pretty much sums up a lot of older Renaults.

It was in the 2000s but not anymore.

If you go to eastern Europe, specially in the Balkans, you will see a lot of taxi drivers with Renault with milages over 500k km. They do hold the space with the usual Toyota Prius.

The current brands in the EU with bad reliability issues are Stellantis with infamous Puretech engine. And BMWs, not so much for the reliability aspect, but due to the stupidly high service costs.

adev_··on Electric motors with no rare earths
> such motors require frequent maintenance for changing the brushes.

"Frequent" is all relative.

The Renault Zoe, 10y ago, was already using a synchronous engine with wired rotor. And most were going over 150kkm without any issues nor brush changes.

> because the electrical currents that circulate through the rotor windings must generate heat

Currently stator heat in wired synchronous engine is less a problem than in SynRMs with permanent magnets.

Most neodymium based permanent magnets start to be irreversibly damaged id they heat up beyond 100°C. That's currently why Tesla has such a good cooling system in their engine.

Wired rotor are bunch of copper coil, as such they are much more resistant to temperature gradients.

adev_··on The beauty and simplicity of the good old C-style void* in C++
This post post is honestly speaking a bag of garbage and ill advises:

> Some good old habit from C can still be positively used in C++, like the void* pointer and the size parameters.

That's garbage.

There is a clear interest of passing both size AND pointer in a single parameter like `std::span<std::byte>: It bind both value together and guarantee that you do not mess with the size of your buffer.

Pass "data" and "size" parameters through a chain of 5 function calls and there is a non-null probability that you passed "other_size" instead of "size" somewhere. This pattern happens everywhere in old C codebase and has been the source of countless security vulnerabilities and random buffer overflows for decades.

All modern languages (including freaking minimalist Golang) have now a "slice/span" concept built in.

It is not just to annoy programmers (and allow them to complain about 'complexity' in blog posts) but because it is a major improvement in term of memory safety and in term of reducing user errors.

> It seems that some people are really losing the taste for good readable code.

If 'span<std::byte>' or 'span<char>' are unreadable for you. The problem is not span, the problem is you.

These are concepts that has been existing for decades in almost all modern programming languages.

Even in conservative C++, it exists since 2014 in the GSL, in Qt and in boost.

And the interface is no different from vector...no excuse here... It is itself the most basic data-structure in C++.

> Why should people complexify and uglify their C++ code with the uint8_t pointer (or std::byte), when void* works just fine??

Sure. Let's extend the logic: I do propose also to replace all typed arguments with a void* pointer.

Because after all: 'It will just works fine' right ?

Type-safety and clear interface are overrated, we could all use only bytes and remove interface all together to get a closer experience of Fortran 77.

/irony

> Or maybe something even more complicated, like this? > template <typename T, std::size_t N> void DoSomething(std::span<T, N> data)

First that is non-sense.

If you want to pass a mutable buffer of byte, the correct signature is:

``void DoSomething(std::span<std::byte> data)``

There is no need for template signature here. You are making things up.

Second, there is also no need for the N parameter

``span<Type,N>`` is only used when enforcing a buffer with its size known at compile time is desirable. It can be for vectorization (e.g buffer is a multiple of the SIMD line) or to make it explicit in the interface (e.g for bloc cipher for instance)

> states that the pointer points to input read-only memory (_In_reads_)

You do that by using `std::span<const std::byte>` in any C++ codebase.

The fact he brags about that as "an advantage" for separated parameter passing just show currently how little is known here.

> My Pluralsight Courses

The kind of C++ code proposed in this blog post would be straight be refused in any PR in almost any serious organization with a proper review process.

So bragging about it on a blog while proposing some C++ teaching is audacious to say the least.

> To finish on that.

The sad thing is that there would be very valid criticism on `std::span<std::byte>`:

- Span does not do boundary check on access by default. Which is a bad design decision in 2026.

- It has an impact on compilation time due to the header inclusion

- std::byte is annoying to work with because it is a hack around an enum instead of a proper C++ builtin type.

But the blog post misses all these points entirely and sticks to complaining about 'Old C being better' the same way your family Grand-Uncle still brags about 'lead gasoline being better' for his 70s Pontiac.

adev_··on 1k Data Breaches Later, the Disclosure Lag Is Worse
> My credit cards protect me from fraud.

Your credit card protect you against nothing. Reimbursement in case of fraud is not fraud protection, it is just bare minimal customer service.

In fact, the first thing your bank will do when your credit card number has been leaked and was used for a fraud... is to replace your credit card.

Because they know that, when the number is in the wild, it will happen again. The system is inherently insecure in case of dataleak.

Visa and Mastercard spent decades and millions constructing systems like "3D secure" supposed to protect again that by enforcing external authentication factors. But since the system is not enforced in every country, it is still a problem today.

adev_··on 1k Data Breaches Later, the Disclosure Lag Is Worse
> Doing it right is exactly the thing that makes this impossible. [...] do you really think that database will never be breached? It would become the prime target for all attackers in the world.

Critical data is always better in the hand of a few (trustable) than in the hands of many.

That is currently the exact reason why you are using Paypal instead of giving your credit card number to everybody.

That is the exact reason why you are using a password manager.

A lot about security is about who you trust, and for how long.

adev_··on 1k Data Breaches Later, the Disclosure Lag Is Worse
> Identify theft is annoying, but it rarely has severe effects.

I disagree. It has already severe effects.

- The fact we are facing so many data leaks made easy for malicious agent to cross and mix data sources and setup much more evolved and convincing scam scheme.

It is now trivial to get name, address, birthday and phone number from a data leak and crossed check that with the login id (email) used for lets say, a financial service and setup a convincing phone scam on that.

Many dubious actors are already doing that. One acquaintance of mine (working in ITsec ironically) got trapped by this exact scheme last week.

- It is trivial to harvest data leaks for online telemarketing, robot calls and any other abusing commercial practices.

- We are heading to a situation where any wierdo or/and stalker with a bit of tech knowhow can rather trivially extract a physical address out of an online profile. That is a giant opened door for harassment and physical insecurity for the most vulnerable of us.

Thats not just "nerd concerns" and the strategy "everything you do online is public" does not work. Many website will request my personal physical address for trivial matters like billing or delivery. That can not under any mean be considered public data.

adev_··on 1k Data Breaches Later, the Disclosure Lag Is Worse
> . I don't create new accounts, I never cross-login with my email address

I honestly tend to think this is the only viable long term strategy.

Let's face it: In a truly global internet where every single forum or website is hosted in a different country with a different jurisdiction, hoping that every single actor will act responsibly is just delusional.

It is not what we see. It is not happening and it is not going to happen.

Individual need to have right to online privacy.

That's means the right to get proxy email address, proxy phone number, proxy physical address and even proxy identity (first name/family name).

The sooner the governments will accept that, the better.

If done right, it is not incompatible with a system where identities can be reconstructed by the authorities for legal actions.

If nothing is done, scams and blackmails will continue to spread like bushfire and proxies anonymity will happen anyway outside of any control.

adev_··on Castor: CERN Advanced STORage Manager
A few historical additions for anybody interest:

- CASTOR at CERN had also its disk centric derivative named DPM (Disk pool manager) that helped to power the LHC computing grid for multiple decades (WLCG) before getting deprecated.

- Interestingly DPM had an architecture quite aligned with the original Google File system even if developed completely separately: (One metadata node, multiple disk node. Design to do Write-once-read-many with very partial POSIX semantics).

- The LHC computing Grid is an association of research centers with their own infrastructure. As such, they had (historically) many diffent storage systems with diffent protocols and interface.

- To unify this madness, an attempt to do a "standard" protocol was made in the 2000s: the SRM protocol (storage resources manager). In a pure XKCD fashion, it went as bad as you can imagine. It tried to rely on the tech of the time (XML, SOAP, WSDL) and is a school case of terrible protocol design (bloated, slow, weak consistency, massive server overhead, stupidly complex to implement and quite insecure). The spec are worth a read if you want a good laugh [1].

- After 20y of struggle, SRM was eventually dropped for a more pragmatic and ad hoc solution based on HTTP + xrootd [2]. EOS itself uses xrootd quite extensively. (if this did not change)

- The history of computing at CERN is globally interesting because it is a pretty good image of the evolution of computing and of the "tech fashions" associated with it.

[1]: https://sdm.lbl.gov/srm-wg/doc/SRM.spec.v2.1.1.html

[2]: https://xrootd.org/

adev_··on Having your insulin pump die while you're on vacation
> through a combination of gestures and sketches, managed to buy a box of rapid-acting insulin at full price (around €30–40).

Quick tip for people that might encounter such situations:

- Phone to the emergency number. In Europe, it's 112. In France 15 is also working. Explain your situation (they generally do have English support).

- In many European countries, it is a Doctor you will have on the line. They can forward a medical prescription by email to the pharmacy close by.

- Even if you are not insured, the only thing it will cost you is the price of the medicine. For insulin, it variates from 20 to 40€ depending of the country.

- If you are over weekend or in middle of the night, in many EU countries have emergency pharmacy system. Some dudes somewhere on duty will open a pharmacy for you and you have to come on site.

If you are in France and if you wake them up at 03h00am, you can probably expect the legendary 'frendliness' (irony) of French customer service but at least you will stay alive.

Page 1 of 21Next →