News Nug
Go.sum is not a lockfile

Published: 2026-01-08 | Origin: Hacker News

The author emphasizes that the `go.sum` file should not be used to analyze Go dependency graphs, as it is not a lockfile and has no impact on version resolution. Instead, `go.sum` serves as a local cache for the Go Checksum Database, mapping module versions to cryptographic hashes for security purposes, ensuring consistency across module versions. The correct file to reference for dependency versions is `go.mod`, which explicitly lists the versions of all dependencies, including transitive ones since Go 1

Open Infrastructure Map

Published: 2026-01-08 | Origin: Hacker News

Sure! Please provide the content you'd like me to summarize.

Chase to become new issuer of Apple Card

Published: 2026-01-08 | Origin: Hacker News

JPMorgan Chase is actively involved in community initiatives and recent milestones. The company supports Fire-Dex, which provides protective equipment to first responders in 100 countries, ensuring their safety globally. Additionally, they highlight U.S. Army veteran Ashley Wigfall's transition into a tech role, facilitated by mentorship and training at their Plano, Texas tech hub. Furthermore, JPMorgan Chase recently inaugurated its new global headquarters at 270 Park Avenue, reaffirming its commitment to New York City. In a significant

Kernel bugs hide for 2 years on average. Some hide for 20

Published: 2026-01-08 | Origin: Hacker News

The analysis of kernel bugs in the Linux operating system reveals that many bugs remain undetected for extended periods. By examining 125,183 bugs with traceable "Fixes:" tags over two decades, it was found that the average kernel bug takes 2.1 years to be discovered, with some subsystems like CAN bus drivers averaging 4.2 years. Notably, a buffer overflow bug in ethtool persisted for 20.7 years, while a refcount leak in netfilter

Play Aardwolf MUD

Published: 2026-01-07 | Origin: Hacker News

Aardwolf RPG is a free text-based roleplaying game set in the fantasy world of Andolor, featuring magic and countless realms to explore. Players can create characters from 28 different classes, including both fighter and magic-based options. The game allows for solo or group play, with activities such as quests, puzzles, casino games, and player-vs-player combat. Aardwolf includes a detailed in-game help system and a guiding starting area called "The Aylorian Academy" for new players

Tailscale state file encryption no longer enabled by default

Published: 2026-01-07 | Origin: Hacker News

The Tailscale client and service have received several updates, including new releases for the Tailscale container image, Kubernetes Operator, and tsrecorder. Users can download the Tailscale container image from Docker Hub or GitHub packages repository. The Kubernetes Operator update includes installation and update guidance as per the provided instructions. Notably, several of the recent releases contain no changes beyond library updates, and certain versions were designated for testing or internal purposes only.

A 2025 Retrospective: How Often Executives Predicted the End of Software Engineering

Published: 2026-01-07 | Origin: /r/programming

Linus Torvalds has expressed a cautious view on AI-assisted programming, distinguishing between its use in experimentation and production. While some developers may be using AI tools in kernel work, Torvalds himself is not testing them. He raised concerns about disruptions caused by crawlers that collect source code and create misleading vulnerability reports, which he finds particularly troubling for projects like curl. Although he supports "vibe coding" for learning and completing tasks, he believes it is unsuitable for critical systems like the Linux kernel

Devaluation of work

Published: 2026-01-07 | Origin: /r/programming

The author discusses the growing trend of developers receiving code generated by Large Language Models (LLMs) and raises concerns about the implications of this shift. They emphasize that the focus has become more about producing visually appealing code rather than ensuring functional, readable, and maintainable software. The use of common programming languages is important for producing understandable specifications, and unreadable machine-generated code can lead to "instant legacy software." The author observes that while developers may feel faster using LLMs, they may actually be slower

Eat Real Food

Published: 2026-01-07 | Origin: Hacker News

The new Dietary Guidelines for Americans emphasize the importance of whole, nutrient-dense foods over highly processed options, which have contributed to rising chronic disease rates. The guidelines advocate for prioritizing quality protein from both animal and plant sources, along with healthy fats from whole foods. Recommended protein intake is approximately 0.54–0.73 grams per pound of body weight per day. A variety of vegetables (3 servings per day) and fruits (2 servings per day) should be consumed, with an emphasis

Why I hate WebKit: A (non) love letter from a Tauri developer

Published: 2026-01-07 | Origin: /r/programming

The author discusses their negative experiences with WebKit while developing Hopp, a remote pair programming app. They highlight a significant issue that many users face—browser compatibility problems, particularly with Safari, which is based on WebKit. The transition to using Tauri instead of Electron was initially seen as a way to create a lighter app that could support multiple platforms, but as Hopp evolved, the team encountered various limitations with WebKit. The app requires low-latency screensharing and efficient resource usage

Shipmap.org

Published: 2026-01-07 | Origin: Hacker News

Kiln, the designer of a new map visualization of global shipping routes, is now offering high-resolution versions for sale in two styles: one colored by ship type and another in a single color on a transparent background. Interested buyers can contact [email protected] for pricing details. Users are encouraged to embed the map in their articles, provided they include a link back to Kiln. The map illustrates movements of the global merchant fleet throughout 2012, presented on a bathymetric base, along

Sugar industry influenced researchers and blamed fat for CVD (2016)

Published: 2026-01-07 | Origin: Hacker News

A historical analysis of newly uncovered documents reveals that the sugar industry collaborated with nutrition scientists starting in the mid-1960s. Their goal was to emphasize fat and cholesterol as primary causes of coronary heart disease while downplaying the risks associated with sucrose consumption. Researchers at UC San Francisco analyzed these documents, which showed the sugar industry was aware as early as 1954 that a shift towards low-fat diets would lead to a significant increase in sugar consumption. Following a surge in media discussions about sugar's link

I got paid minimum wage to solve an impossible problem (and accidentally learned why most algorithms make life worse)

Published: 2026-01-07 | Origin: /r/programming

The author, a Computer Science student, humorously describes their misguided attempt to optimize the task of sweeping the Albert Heijn supermarket floor. Instead of simply sweeping, they created a grid representation of the store, developed a visual editor, and wrote a C++ path optimizer using simulated annealing. This endeavor soon revealed that while one of the proposed paths (Path A) might seem shorter in distance, it was impractical due to excessive turns, highlighting the issue of optimizing for the wrong criteria. The author

The Bank‑Clerk Riddle & How it Made Simon Peyton Jones "Invent" the Binary Number System as a Child

Published: 2026-01-07 | Origin: /r/programming

Sure, please provide the content you would like me to summarize.

Experienced software developers assumed AI would save them a chunk of time. But in one experiment, their tasks took 20% longer | Fortune

Published: 2026-01-07 | Origin: /r/programming

Sasha Rogelberg, a reporter for Fortune, discusses a study involving 16 experienced software developers who experimented with AI tools to complete their work. The developers expected that using AI would speed up their tasks, similar to the hare in the fable, "The Tortoise and the Hare." However, the study revealed that AI actually increased their task completion time by 19%, contrary to their expectation of a 24% reduction. The researchers, Joel Becker and Nate Rush from the nonprofit MET

Solving Weighted Random Sorting at Scale (O(N log N) approach)

Published: 2026-01-07 | Origin: /r/programming

At Microsoft, the author worked on a back-end service that routed a high volume of traffic by determining appropriate downstream destinations for requests. To manage reliability, the team monitored the success rates of these destinations, adjusting traffic allocations based on performance. In a distributed environment, a fail-over system was essential, requiring a sorted list of available services to handle potential errors from the primary choice. To avoid "starvation," where only the top-performing service receives all traffic and the performance of lower-ranked services goes un

Why Developers are Moving Away from Stack Overflow?

Published: 2026-01-07 | Origin: /r/programming

The blog post from Final Round AI discusses the decline of Stack Overflow, which began with 3,749 questions in 2008 and has now dwindled to 3,862 questions after 17 years. Once a leading platform for programmers, Stack Overflow saw a drastic drop in questions from a peak of 200,000 monthly to nearly zero around late 2022, coinciding with the rise of AI tools like ChatGPT and GitHub Copilot. Founded by Jeff Atwood and Joel

Ruby Array Pack Bleed

Published: 2026-01-07 | Origin: /r/ruby

With the release of Ruby 4.0.0, a security vulnerability was discovered in the `Array#pack` method that allows for out-of-bounds memory reads. Although this memory disclosure issue is serious, it is rarely exploitable in real-world applications since attackers would typically not control the method's arguments. The vulnerability affects Ruby versions 4.0.0 and earlier, potentially back to version 1.6.7 from 2002. The `pack` method converts array elements

An Introduction to Ruby Parsing with Prism

Published: 2026-01-07 | Origin: /r/ruby

Matheus Richard discusses the new Ruby parser, Prism, detailing its advantages over the previous parser, parse.y, which was specifically designed for CRuby. This led to issues with compatibility and lag in tools and libraries for other Ruby implementations, such as JRuby and TruffleRuby. Prism aims to be the universal parser for all Ruby implementations and tools, solving these compatibility issues. Richard introduces the concept of building a transpiler, demonstrating how to convert Ruby code into Emoruby using Prism. He mentions

The Psychology of Bad Code

Published: 2026-01-07 | Origin: /r/programming

In a blog series titled "SheHacksPurple," Tanya Janca discusses problematic developer behaviors that contribute to insecure software and presents behavioral economic interventions to address these issues. The series expands on her conference talk, "Threat Modeling Developer Behavior: The Psychology of Bad Code." Janca poses the question of whether insecure coding is due to factors beyond laziness or malice, suggesting that developers might simply be set up to fail. Her personal curiosity about decision-making, influenced by her experiences and interests in logic and