Hacker Newsnew | past | comments | ask | show | jobs | submit | vsgherzi's commentslogin

could you expand on this a little? As far as I know it's a bug in rustc gcc and llvm if the outputs are not deterministic

I was having dinner with a friend yesterday who told me that lock free data structures aren’t lock free since they lock on the hardware level. He also had a thing to say about compilers in C++.

He said something like: it’s crazy that you have the C++ standard but then also how a compiler implements that standard. And then it still matters how that compiler is implemented on a particular architecture! It’s always different and the annoying thing is that this is permutative. This is why we use X86-64 Intel CPUs at <name company> and <name compiler> (I forgot the name). That simplifies it but you still need to know 3 things. He also was frustrated how lock free data structures and memory reordering are 2 completely different concepts in practice but not in C++ but I didn’t fully follow him. I wrote 100 hours in C++ so I was already happy I understood everything else.

But based on his rant I can sort of see why compilers feel not deterministic.


Don't bother. They're going to claim that cosmic radiation can alter bits so compiler determinism is comparable to LLM. I'd rather AI evangelists claim determinism is not required to build decent software than perform the mental gymnastics required to make these comments.

What’s wrong with the plaintext login if it’s https ? What’s the standard for that now ?

Password managers generally send a hash but for almost all services I would say plain text password is standard, I would definitely go with something like firebase or auth0 vs rolling your own auth in most normal situations. The poster is explicit about not knowing anything about security though so all good.

This makes sense, I guess encrypting it on top of TLS doesn’t meaningfully improve security. My concern is that you’re trusting the server to immediately salt and hash upon receipt (especially before storing), but if the client at least obfuscated the password, then in the worst case of a leak you have an email and an obfuscated password that can be used to login to the pwned service but nothing else. My specific threat model depends on the average person not adopting password manager hygiene and 2fa across their services, which is fairly common amongst my friends personally.

Salts are fixed - so if you salt with, i.e. the email address, any attacker will also do that. The key derivation strategy of password managers is already known. Especially in a browser, salting strategy cannot be hidden so it's a known factor. As sad as it is, for those without good hygiene, either they are at risk of compromise, or tie identity to a device and are at risk of losing access entirely. There is currently no magic solution.

Just as manufacturing in China took time manufacturing in the US will take time. The US has lost much of its skilled labor and mom and pop parts shop. If we have any hope of re-invigorating this some large company is going to have to bite the bullet. Chicken and egg problem imo. I'll leave whether this is worth it or not up to the economists.

No, US didn't lose it, we collectively decided that whenever we buy something, the price was the most important aspect.

It's like everybody forgot that their neighbour's job depend on them.

We're repeating the same pattern with online shopping, malls and stores everywhere are closing because of our collective actions, we're not losing them like I lost my keys.


> We're repeating the same pattern with online shopping, malls and stores everywhere are closing because of our collective actions, we're not losing them like I lost my keys.

A huge part of that is rents. Basically, a store that owns their property outright or even on mortgage has far less worries when business turns down during a crisis. Take Covid - a year or two, depending on where you were, in more or less lockdown conditions.

A store that was owner-owned? No big deal. Staff was paid for by government assistance, not much ongoing cost for the building. Owned but mortgaged? Cut a deal with the bank, no bank wants to go through a 2007ff event again and they also got assistance for loans. But a store that was rented? Yeetie yeetie. Commercial renters have zero protections anywhere, and landlords are nonforgiving - especially when they are backed by REITs and other investment vehicles.

Recent history is filled with examples of investment funds that behave like vultures - seek out a company that has sizable owned real estate, buy stocks, force the management to sell off the real estate in a heavily biased sale-and-lease-back maneuver, put the acquisition debt on the company's ledgers, sell off the real estate and let the husk of the company wither.


> A huge part of that is rents.

And this is becasue huge international investors still own sites like malls and retail centers and still remember the massive rents they used to command for those units.

The bubble will burst when enough sites are written off, and IMO rents will come back down to a reasonable level in a decade or 2.


> And this is becasue huge international investors still own sites like malls and retail centers and still remember the massive rents they used to command for those units.

Oh no. It's US pension funds that own a lot of real estate, and these will continue to get bailed out or protected by the government.

The decision of the US to back pensions on the stonk market has insane, crippling side effects not just on their economy but also on the rest of the world.


Fair enough, I live in the UK where all of our infrastructure and large retail centres are owned by Chinese and Russian investment firms. I was kind of reffering to that situation, as I am not familoier with it in the US.

What you're describing literally is us losing it. We lost in the market. Price was above all for the market and we didn't adapt and lost. I agree with the point you're trying to make but we did lose it in the sense that we do not have the manufacturing capacity we once did

We didnt 'not adapt and loose' we welcomed it with open arms in order to get cheap prices. People voted with their wallets and collectively decided they didnt give 2 hoots about where something was made as long as the price was right.

Choosing the lowest price is rational for the consumer. Setting the trade policy that allowed that lowest price -- the USA has less protection for the semiconductor industry than it has for textiles -- was the mistake.

Free trade does result in the best prices but it has other, negative effects, and it is when we think as policy makers -- as citizens, not consumers or business owners -- that we are accountable for those effects.


Homo economicus' desire for a 'good deal' or 'a bargain' will kill us.

“Why would I hire X when I can get it for $20 a month on ChatGPT?”

Hmm, I don’t like the sound of that.


We collectively decided nothing.

Our political/ruling class wanted more of the pie for themselves, dropped the trade barriers protecting American industry, and gorged themselves on the arbitrage as manufacturing flowed to our chief geopolitcal rival, who was quite happy to accept such a generous gift.


That's true, but we also collectively decided to buy cheap stuff from Walmart instead of buying from the local town store, creating a race to the bottom.

Ya, because the same item was way more at other stores and people didn't understand why. Most of it was logistics at first and not just cheap items. That and buying in very very large lots. It was over time that the hunt for more profits started chasing cheap items.

Really the mom and pop store was set to die in the US because of car culture. You'll pay a bit more to walk to the closest store, but if you're already driving there is very little cost in driving to a store a little farther is almost nothing.


Or did stagnant wages drive Americans to buy what they could afford instead of products that would last?

We also have many US manufacturers moving sourcing their subcomponents from overseas to save a few cents per unit, there's no way to prevent that, nobody is going to check the BOM from everything they ever buy.

I think collective behavior is a large component but it is not quite right to declare it as the primary driver.


What if people could have purchased American made goods but this means that they would have had to have less or what they did get wouldn't be as good.

For example, I get a 40inch TV instead of a 65 inch or I buy a set of American made screwdrivers but then I can't get a bottle of Vodka.

Most people have their basic needs met. They just want as much as possible for their money even if it harms other Americans. At the same time, if they happen to work at a factory making extension cords, they'll want people to buy their US made cords to protect their job.

Because most people are selfish when it comes to people who aren't family or friends.


This is not a valid criticism. You cannot expect people to become activist consumers through every purchase in their lives. Some of this is on manufacturers too. With all the billions and trillions we have I don’t understand why Americans are refusing to set up large scale dark factories. China already has ramped up a huge number of them but we refuse to do it.

>We're repeating the same pattern with online shopping, malls and stores everywhere are closing because of our collective actions

Are you talking about the small mom-n-pop shops that are only open when most people are at work, while with online shopping you can do it any time 24/7? The same mom-n-pop shops that refused to take returns, and had poor selection and would take weeks to order something for you, at a ridiculous price?

There are a lot of really good reasons online shopping has put so many stores out of business.


Who's we?

The college educated white collar professionals who are grossly over-represented in policy discourse?

Middle america, the formerly industrial northeast and the former bulk industry west have been complaining about this shit policy for over a generation.

Implicitly shuttering our manufacturing and heavy industry by subjecting it to policy that we knew would make it increasingly noncompetitive at the margin and would prevent continuing investment was a macro/federal level economic policy choice that was actively pursued for approx 50yr.


What government policies are you referring to? Businesses moved manufacturing to China because their goal is to make as much money as possible. The only potential barrier is if US citizens would care that it wasn't made in America. Products are labeled and most people don't care.

This is an American quality where a person who works in a factory that makes extension cords and needs their job to survive would buy the cheaper lamp even though it's made in China.

Most people aren't willing to make financial sacrifices to help people they don't know EVEN if they might be affected by another person having the same belief.


> Businesses moved manufacturing to China because their goal is to make as much money as possible.

There used to be other times and more honorable businessmen. Then came the Dodge Brothers who managed to get a court judgement asserting shareholder supremacy over long term interests [1].

The only thing I never understood is how in god's name Amazon got away with reinvesting profits and never dishing out to shareholders for decades.

[1] https://en.wikipedia.org/wiki/Dodge_v._Ford_Motor_Co.


>There used to be other times and more honorable businessmen

The 1930s through 1960s (i.e. industrialization had matured but you can't construe it as "modern" business) are chock full of corporate raiders, acquisitions with nearly monopolistic goals, cartels, etc.


>Most people aren't willing to make financial sacrifices to help people they don't know EVEN if they might be affected by another person having the same belief.

Because in the US that's the case because people give a shit about cost - you could make financial sacrifices to help your community by buying local...but your costs of living are skyrocketing every year, the costs of your family are increasing, and the difference between buying from BigCorp (Walmart, Amazon) and from your local store (which is 1.3-1.7x the price vs BigCorp) adds up.

Sad but it's true.


Not overrepresented enough given that middle America has disproportionate per capita voting power

It's not just middle america. It's the entire economy that deals in things first and numbers and ideas second.

It needs a careful long term approach from real leaders. Not a run-and-gun, corrupt, chaotic president throwing tariffs (taxes) up on a whim.

There is no contingent in the US federal government that has a coherent plan for doing what you're talking about.

The investment in capability that is necessary to build the next generation of manufacturing capabilities in the US is simply not within the public imagination.


I don't think it's something that can be centrally planned well.

If the US changes their environmental regulations to match China, lowered their tax-to-GDP ratio to match China, changed their worker regulations to match China, and then opened up free immigration from Mexico for cheap factory labor then the "free" market would likely take care of opening up quite a bit more manufacturing.


china did not synthesize shenzhen through having poor environmental regulations and cheap labor, nor would one expect to have a shenzhen appear spontaneously in the us if the us allowed in unlimited migrant labor and abolished all environmental law.

Hell, don't even match it. Split the difference and it would unleash a torrent of economic activity.

It will never happen because there's too many industries and jobs that only exist because of all that regulation and will fight tooth and nail to avoid a short term haircut.


He’s at least getting companies to pretend like they’re going to try. That’s a starting point. Before, the best you’d get out of these CEOs is “LOL those jobs are never coming back, learn to code or whatever else hasn’t been outsourced fully yet.”

His predecessor worked with Congress to actually bring microchip manufacturing back to the US and tried to keep us competitive with EV manufacturing (not to mention the infrastructure investments that are necessary for any serious manufacturing effort). Those were real commitments.

Extorting CEOs to announce investments (like the Zuckerberg hot mic incident) is not worth anything to me. Meanwhile the US has been hemorrhaging manufacturing jobs for the last year.


[flagged]


Was Kamala campaigning on bringing manufacturing to Texas?

Probably referring to the CHIPs Act? Technically Biden.

https://en.wikipedia.org/wiki/CHIPS_and_Science_Act


Technically Kamala.

— As Vice President, Kamala Harris was a key proponent and promoter of the 2022 CHIPS and Science Act, which aims to boost U.S. semiconductor manufacturing.


[flagged]


You mean, like FoxConn took $B from orange guy, promised 10K+ jobs, then sat on the land for a few years and did nothing? Sure, let's replicate that at scale..

Things take time. Especially during the pandemic and its aftermath. How you been down to Arizona lately to see the developments? Not just the manufacturing itself but everything that has sprung up around it? It’s impressive.

Managed to do what?

At least he’s trying. Instead of the other side just yelling about “corporate greed” while doing nothing but collecting lobbying money as jobs continue to get exported.

Build products in the US. Those jobs Steve Jobs told Obama are "never coming back".

Last time I checked, manufacturing employment hasn't gone up since Jan 2025.

> Last time I checked, manufacturing employment hasn't gone up since Jan 2025.

It's gone down according to the official US numbers, as expected


Which of those have come back?

Manufacturing output has been ~monotonically increasing except during the great recession for the past 3 decades. Jobs though have been basically monotonically decreasing.

We're still getting the strategic benefits of more manufacturing, just have fewer people getting their thumbs cut off in stamping machines or melted alive in steel mills.


I don't think "we" are getting benefits from more manufacturing. Surely the company CEOs and shareholders are, but the average Joe who doesn't hold shares and just needs an honest, well-paying job is not reaping any benefits.

I view manufacturing to have some parallels like farming. An advanced society is eventually going to get the employment numbers down low through inevitable automation and technology. The goal then is to continue to enjoy having the food and things you made despite not being employed in those fields. How exactly that happens is up for debate.

to be clear, the US has been rapidly losing manufacturing jobs since the orange coronation.

>> Just as manufacturing in China took time manufacturing in the US will take time. The US has lost much of its skilled labor and mom and pop parts shop. If we have any hope of re-invigorating this some large company is going to have to bite the bullet. Chicken and egg problem imo. I'll leave whether this is worth it or not up to the economists.

> It needs a careful long term approach from real leaders. Not a run-and-gun, corrupt, chaotic president throwing tariffs (taxes) up on a whim.

The problem is all the real leaders got indoctrinated and drank the globalization kool-aid. Unfortunately, it seems only an insane and chaotic person was able to actually buck the iamverysmart consensus.


No amount of time will let the U.S. - a country of 348 million people - replicate what China - a country with 1.4 billion people - a can do with manufacturing.

This isn't "working harder".

This isn't "rebuilding infrastructure".

This isn't "training people in trades".

The numbers are so cartoonishly lopsided as to be a non-starter for categorically replacing Chinese manufacturing.


600 million people live in North America. 1 billion people live in the Americas. Another billion live on the Pacific rim in non-Chinese countries.

Establishing regulatory harmony across all those countries is obviously not possible in the same way it is in a single authoritarian state, but if the US made it a priority to create a trade bloc capable of replicating China’s manufacturing capacity, it probably could.


Establishing regulatory harmony is not only not possible but the current regime is working in exactly the opposite direction.

If the US wants to take on China, and actually needs Canada's help to do it -- I can assure you they just set themselves back 10-20 years from achieving that. We no longer have any interest.

The labour forces of Mexico and Canada are not at the US's disposal for these kind of games anymore. For several decades we have been exploited by the US for low wages and cheap resources -- and now there's a regime that's making cheap political points by accusing us of the opposite while trying to emmiserate our populace. So, yeah, no thanks.


There was an APAC trade treaty called the TPP that Rodham-Clinton/Obama pulled out of which would have done exactly that. They were forced to withdraw because of pressure from unions, ie labor not capital.

Now it's the CPTPP and doesn't include the US.

Canada is looking to the Pacific and EU for trade now (and China as well), so is Mexico.

It's likely that the EU/UK trade bloc will connect with the CPTPP via both the UK and Canada, which connects them to the APAC/ASEAN nations.

Everyone is aware of the power of the Chinese economy and the idea of the CPTPP is precisely to build up a trade economy that can compete and co-operate with China on an equal basis.

In the meantime, China is using its Belt & Road Initiative as a sort of "Marshall Plan" to extend its influence by building infrastructure like ports and rail.

These trade initiatives are at least focused on increasing trade, as opposed to the US "trade policy" which is to use tariffs as a crude form of protectionism and extortion to "bring manufacturing back".


> There was an APAC trade treaty called the TPP that Rodham-Clinton/Obama pulled out of which would have done exactly that.

I think you got your timelines crossed - it was Trump who pulled out of TPP (though Clinton also opposed it during the campaign).


we don't have to entirely replace Chinese manufacturing to build back American manufacturing that's a false dichotomy.To compete we'll just have to be more revolutionary than the manufacturing industry already is.

And what exactly will stop China - a country infamous for copying U.S. technology - from copying whatever the U.S. comes up with?

China did in the 1990s exactly what the US did in the 1890s, steal IP to build up its own industries. The US did it to the UK and Europe back then, China has done it against the US/EU over the last 3 decades.

It's at the point now where it is self-sustaining, which is why you see China starting to enforce IP Rights, precisely because it is now generating its own IP that it wants to protect.

Any economist would say that if China did just "copy" US technology to make itself more productive, that's good economic practice, from China's perspective.

Moats only worked for a while to protect European castles, they don't exist now.


It sounds like you're agreeing with me.

forcing the US to copy Chinese designs?

Ford is openly discussing the idea to have joint ventures with Chinese EV makers, the whole idea is to get Chinese EV techs in exchange for US market access.

TikTok takeover is another good example.


both are pretty big numbers and I think are pretty capable to do mass manufacturing. As evidenced by many industries that US had and still has.

it could be less economical, so Apple has to innovate to be competitive on pricing - with automation, robots, etc.


People idealize US regaining manufacturing glory is like climbing from 1/5 back to 5/5 US industrial peak. Meanwhile is PRC grew he denominator and working at 20/20 scale. Ultimately 20 > 5 > 1, but better 5 than 1.

I mean...we're destroying advanced manufacturing where we make expensive things in exchange for cheap manufacturing of basics like textiles where tariffs of 1000% would be needed to make U.S.-made goods competitive. Exchanging high-paying jobs for poverty wage jobs.

Are you sure that’s actually what you want though, competing with China in skilled labor?

Well, once AI takes over most of the white collar jobs, people will have to do something to put food on the table, and not all of them can be gig workers. Or do you see ideas like Universal Basic Income as an alternative for the US?

That's argument is a bit rough given manufacturing is one of the areas seeing the most automation progress and success. One of the main reason it's not more successful is labor costs can be lower than automation that wouldn't be true if we wanted to replace the income of white collar workers in the US.

If we end up in a place where AI and automation take over then yeah I think we start looking at alternative income sources and economic system. Just like star trek predicted we would do after WW3.


I'll worry about the Deus Ex Machina when it's here. Until then, AI is mostly generating a lot of text and burning insane amounts of energy, and we have bigger problems to worry about. Like a president diverting ten billion dollars of tax payer money into his cosplay UN for crooks and dictators.

Of course I do. Competition can only be good here.

You willing to work 996? I would prefer some form of work-life balance.

Why is that the only way to accomplish that? We'll have to restart manufacturing while also keeping wages livable and the work the US does competitive. As I said above we'll just have to be more revolutionary than the manufacturing industry already is.

Most factories in the us simply have multiple shifts and run 24 hours

There’s no world in which large scale manufacturing is returning to the US. Not only are our labor costs dramatically higher than in east asia, but we also lack the logistics infrastructure to quickly produce components and get them to their next stage of assembly quickly. And we can’t just build that stuff because we don’t have a totalitarian government that can just bulldoze farms and houses to run a highway or railway. We also are less interested in pollution, which raises the sticker price on US manufacturing.

If we’re serious about it, we are going to have to commit ourselves to economy-tanking tariffs (like thousands of percents) for many decades until the US worker is as poor as the Vietnamese worker.


In spite of no totalitarian government and things like environmental regulations the US still is able to be one of the most innovative nations on the planet. I don't think we need those things to be able to have manufacturing in the united states. We had it at one point and we can do it again. It's not going to be easy and it's going to need some real breakthrough ideas before we can actually compete. Apple here is the first step.

We never had manufacturing within an order of magnitude of China's scale in the US. Probably not within two orders of magnitude. When the US was a manufacturing powerhouse, we had far cheaper labor, far fewer environmental regulations, far fewer labor regulations, and far simpler supply chains.

> Apple here is the first step.

Pretty sure the much-touted Foxconn plant in Wisconsin was the first step, and just like this one it will be scaled down to a few hundred jobs as soon as possible.


The US had it when the rest of the world was severely bombed during WWII, and a lot of the world was very undeveloped. Things changed.

The US had it for a hundred years before that and was already by far the largest industrial power on the planet before world war 1

Is no one else interested in the "assemble advanced AI servers, including logic boards produced onsite, which are then used in Apple data centers in the U.S." in the pictures? Are they using nvidia GPUS? Their own silicon? Is there any data out there on what these servers are like? I don't think we've ever seen a picture of them before.

WSJ published a video yesterday with the first pictures of those servers: https://twitter.com/yiningkarlli/status/2026176857541075274

It looks like they're cramming 32 Apple Silicon SOCs into each server - they're on upright daughterboards attached to both sides of the heatsinks. That's a lotta chips.

If those are M3 Ultras that’d make 1024 CPU cores per 2U server.

512 with M4 Max is only a little above a dual Epyc with 192 cores each though.


man what I would give for one of those servers

I believe it is the nodes for their private compute cloud for inference. They have described these in the past. It's all Apple chips.

Apple announced their Private Cloud Compute nodes in 2024 and started shipping them last October.

https://security.apple.com/blog/private-cloud-compute/

https://www.tomshardware.com/desktops/servers/apples-houston...


I think you’re missing the point a little friendo, it’s not that electron is bad it’s that electron itself is an abstraction for cross platform support. If code can be generated for free then the question is why do we need this to begin with why can’t Claude write it in win32, SwiftUI, and gtk?

The answer of course is that it can’t do it and maintain compatibility between all three well enough as it’s high effort and each has its own idiosyncrasies.


I don't know about whether Electron fits in this case, but I can say Claude isn't equally proficient at all toolchains. I recently had Claude Code (Opus 4.6, agent teams) build a image manipulation webapp in Python, Go, Rust, and Zig.

In python it was very nearly a 1-shot, there was an issue with one watermark not showing up on one API endpoint that I had to give it a couple kicks at the can to fix. Go it was able to get but it needed 5+ attempts at rework. Rust took ~10+, and Zig took maybe 15+.

They were all given the same prompt, though they all likely would have dont much better if I had it build a test suite or at least a manual testing recipe for it to follow.


To build gtk you are hit with GPL which sucks. To build Swift you have to pay developer fee to Apple, to build win32 you have to pay developer fee to Microsoft. Which both suck. Don’t forget mobile Android you pay to Google.

That is why everyone jumped to building in Electron because it is based on web standards that are free and are running on chromium which kind of is tied to Google but you are not tied to Google and don’t have to pay them a fee. You can also easily provide kind of the same experience on mobile skipping Android shenigans.


>"to build win32 you have to pay developer fee to Microsoft"

Not really, you can self sign but your native application will be met with a system prompt trying to scare user away. This is maddening of course and I wish MS, Apple, whatever others will die just for this thing alone. You fuckers leveraged huge support from developers writing to you platform but not, it is of course not enough for you vultures, now let's rip money from the hands that fed you.


I know Anthropic is burning cash but I'm pretty sure they can afford to pay the developer fees for those platforms.

> To build gtk you are hit with GPL which sucks.

It's LGPL, all you have to do is link GTK dynamically instead of statically to comply.

> to build win32 you have to pay developer fee to Microsoft.

You don't.


The blocking of VPNs is despicable. I love mullvad but hate that most sites block mullvad ips until i get lucky with one of the relays. Either way love what they do and hope they win. The forced demonetization of users is ridiculous. This will be looked back on just as the cryptography was when it was deemed a munition and banned from export.

Servo's history is much more complicated and originally was planned to be used for the holo lens before the layoff. Comparing trajectory doesn't make sense they had completely different goals and directions.

I'm sympathetic to the supply chain problem I even wrote a whole thing on it https://vincents.dev/blog/rust-dependencies-scare-me/

That being said as many above have pointed out you can choose not to bring in dependencies. The Chrome team already does this with the font parser library they limit dependencies to 1 or 2 trusted ones with little to no transitive dependencies. Let's not pretend C / C++ is immune to this we had the xz vuln not too long ago. C / C++ has the benefit of the culture not using as many dependencies but this is still a problem that exists. With the increase of code in the world due to ai this is a problem we're going to need to fix sooner rather than later.

I don't think the supply chain should be a blocker for using rust especially when once of the best C++ teams in the world with good funding struggles to always write perfect code. The chrome team has shown precedent for moving to rust safely and avoiding dependency hell, they'll just need to do it again.

They have hundreds of engineers many of which are very gifted, hell they can write their own dependencies!


Yeah I am not saying don't use rust. But the average amount of dependencies used by a dependency makes a big difference in my opinion. The reality is, most people will use wast amounts of dependencies - especially in vibe coded environments, where LLMs try to save a few tokens.

The problem exists in C/C++ too, but the depth of dependencies are much smaller though, making the attack surface smaller, and damage gets spread to fewer products.

If I personally had to choose between a product written in C without dependencies to run on openbsd versus the same product written in rust with a few dependencies I would probably choose the C implementation. Even if there is a memory bug, if the underlying system is right they are extremely difficult/expensive to exploit. Abusing a supply chain on the other hand is very easy


But the thing is these DO get exploited in the wild we see that again and again in high value targets like operating systems. That's why apple and google go to such high extremes to work in things like bounds checking. ROP JOB chains have gotten good and LLMS are even able to help these days (if you have the bankroll)

It's a culture problem and I still have hope we can change that. My big hope is that as more big players get into it, windows, linux, android, chome, we'll get high quality stand alone packages. Many of these products have to reach certain standards. We saw this recently with JPEGXL. It got accepted into chromium and they've been diligent as to not bring in additional external dependencies.

Projects like sudo-rs take the same approach. As always good engineers will make good code as more of a niche for rust gets carved out I belive we'll see an ecosystem more like c / cpp and less like nodejs (of course this is just my sepeculation)


> But the thing is these DO get exploited in the wild we see that again and again in high value targets like operating systems.

Yes but so do supply chain attacks. I mean we both know there's never a way to be absolutely secure and it's all just about probability. The question is how to determine what product may have better chances. All I am saying is that I personally prioritize fewer dependencies over memory safety.

I like your optimism, which I unfortunately struggle to share. I believe the quality of code will go down, there will be a lot of vibe code, and in general inexperienced people who don't put in the cognitive effort to pay attention to it. As software gets cheaper with AI, it will also become increasingly difficult to find the good things in a sea of slop. A good time for all the security engineers though ;)


right but these differ drastically, one is writing perfect code which is quite difficult the other is opting not to take a dependency. One is much more realistic.

I agree on software quality going down, I'm looking very closely at foundational software being written in rust (mostly in the kernel) and it seems to be okay for now.

The other hope is that maybe one day rust will get a fatter standard lib. I understand the opposition to this but I really want a series of crates tied strongly to the ecosystem and funded and audited by the foundation. I think this is the way they were going with offering the foundation maintainer fund.

Personally I'm thinking about moving my career into embedded to escape the massive dependencies and learn more about how computers really work without all the slop on top.


Sort of. From my understanding they’ve been heavily using clang with fbounds checks to insert checks into functions. I think there was work done to try to insert them into existing code as well. They memory tagging in new processors help avoid overflow exploitation. Maybe someone can jump in and add more details


I'm in the same boat, I'm hoping firmware / embedded might be better in this regard due to the inherit constraints. If not then EE is probably the only other option. Anyone else have thoughts on this? I'm craving a more civil engineering approach to rigor rather than the mess of modern software. Perhaps that means software just isn't for me.


I'm definitely wanting to do something with more of a civil engineering approach to rigour. More and more I think software is full of children who don't care and don't know the meaning of responsibility.


Maybe formal methods have a chance of becoming mainstream now [1]?

This would increase the rigor of software engineering and put it on par with civil engineering.

Some niches like real-time embedded systems are already pretty much the same.

[1] https://martin.kleppmann.com/2025/12/08/ai-formal-verificati...


I doubt it, I feel like it might improve shops that already care and are already creating with rigor. I don't think it'll raise the bar for the avg shop. However, perhaps that's just be being cynical. By real time embedded is the same do you mean the same in the sense that they are just as poor in quality?


> [...] the same in the sense that they are just as poor in quality?

I mean some real-time software for critical embedded systems has an incredible level of rigor, making heavy use of static analysis, model checking, and theorem proving.


Noted, perhaps I'll investigate as a possible next career step. Thanks!


I think the last thing this world needs is programmers bringing their particular style of “””engineering””” to important things like bridges. Can’t wait to hear about the 5-9s of uptime on the Golden Gate.


...why do you think this comment is warranted?


Because programmers probably think it'll be a similar field, but it's different. It has correct and incorrect ways of doing things, strongly enforced. You're not inventing new shit, you're reapplying old shit constantly. Old shit that works.

Many think writing software is engineering, but it couldn't be further from the truth.

edit: to clarify, trying to get people to realize the grass isn't always greener, and both sides are better off for it.


How many programmers-turned-X do you have experience with?


Billions


No response, so I assume this brain dead comment is a China bot.


I think you're missing the point of my comment.

Your comment feels unwarranted because other engineering professions have guardrails, because they recognize that people will die if they don't. Your comment is implying that a software engineer can simply apply their existing (lack of) guardrails when that's probably not the case.


No, my comment is implying that if you enjoy the relative freedom of writing software in new and interesting and novel ways, you probably will not enjoy copy-pasting buildings or bridges or whatever again and again and again.

People can easily die due to software, and there are still few (any?) regulations in almost every single industry, plus no way to assign accountability. If a bridge collapses, it's pretty simple to figure out whose fault it is.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: