Hacker Newsnew | past | comments | ask | show | jobs | submit | fulafel's commentslogin

The docs start off with server components. Are those still in vogue after the recent security disaster?

ref. https://threatprotect.qualys.com/2025/12/04/react-server-com...


Designing to tolerate the defects is well trodden territory. You just expect some rate of defects and have a way of disabling failing blocks.

So you shoot for 10% more cores and disable failing cores?

A lot of this seems to deal with unreliable electricity infrastructure and effects thereof. Is it just normal in the US and people in warmer places don't mind so much, or does it somehow correlate with snow?

Rural areas are much more common in the US than in other countries and much more likely to lose power in a storm, due to the long lengths of power line needed and the lack of redundancy from being too sparse to have multiple feed-ins to the local substation.

It's not the cold that knocks out power, it's the wet and saturated ground and high winds knocking trees into the power lines.


I live in literally the middle of nowhere and get very bad winters but I lose power less often than I ever did living in the center of Chicago which often lost power for days at a time due to the weather.

I grew up in Canadian snowbelt (Great Lakes) and never lost power. If there is an ice storm - then we all freak out. I'm not saying it can't happen if a lot of snow falls and then there is wind but we lose power in summer more often from squirrels trying to nest in transformers. The biggest blackout I experienced was in Toronto in a summer heatwave.

I live on the metric side of the Atlantic. Winter means extra tension on wires, extra load on trees leading to higher risk of air lines broken. At the same time you have decreased number of man-hours in a day, decreased efficiency in those hours and difficulty reaching points of failure physically. This leads to high stress on maintenance in an event of a snowstorm. Depending how inclined your country is to vote for the MBA-style policies, there are chances your maintenance crews are already at near-capacity and therefore such an "adversary" event can easily lead to some a bit more remote areas left without electricity for a week at -20°C. Having A+++ house with photovoltaic cells will not help in that case.

I live in the back woods of Canada. We get a lot of snow. Our electrical supply (we call it "hydro") can disappear for long periods of time. The usual suspects are:

1. Ice storms. 3 inches (8 cm) of ice build up on trees can cause them to either drop limbs or deadfall into wires. It can be spectacular to see. Sparky.

2. The first heavy snowfall of the year can cause problems because although trees are trimmed every few years, they can grow pretty fast and either arch over the wires or are now tall enough to deadfall on the wires. By the time the later heavy snowfalls have come the danger trees have already dangered. The worst trees for this are the pines and spruces (and hemlocks and cedars but don't tend to grow as tall) since their boughs catch the snow and their new wood is actually pretty weak.

3. Drivers losing control. Doing 20 over the posted limit and passing a plow while the roads are greasy and visibility poor often results in taking out one or more poles while converting yourself into a casualty.

One large factor here is not that it takes a crew long to restore the lines, it's that the problems tend to occur in many sports over a large geographic region. There are only so many crews on shift and more remote places can be forced to wait for days while the townies get services right away. Our power was off one spring for three weeks a few years back after a derecho passed through a strip about 100 miles long by 20 miles wide. I'm still burning the wood for heat.

So, yeah, it's normal. Doesn't matter how good your make your infrastructure, nature is harsher.


Trees fall down due to combination of heavy snow and wind. They probably don't cut sufficiently around power lines. It is extra bad if the ground hasn't frozen properly yet.

In some places it may be cheaper to dig down the cable than facing storms.


But why are power lines above ground in the first place?

Makes them a lot easier to get to. Buried infrastructure is fantastic until it breaks. Then it really sucks ass.

A lineman can fix anything on a pole within a few hours. Probably before lunch if they start first thing in the AM. Fixing a buried line can take days or worse depending on what's above it.


> Buried infrastructure is fantastic until it breaks. Then it really sucks ass.

Or if you want to upgrade it. My local electricity provider charges an order of magnitude more for upgrading home electrical service for more amperage if your service line is buried.


When you build a home in the middle of nowhere, you actually have to pay for the power line to be run out to you. Burying utilities is tremendously expensive if you are footing the bill on your own.

Just to add, a lot of the midwestern USA is very swampy.

cost, it’s way more expensive to dig. more red tape.

I don't have enough data to generalize across the US, but I grew up in a cold, snowy state (Wisconsin) and we almost never lost power. It happened, but it was pretty rare. We did have a generator for such instances, but that was because we had a dairy farm and the cooling unit for the milk tank needed to be kept running even if utility power was down.

If you can't drive anywhere, chances are the people who fix electricity grids will struggle too. And snow storms can fuck with infrastructure..

Less of an issue in areas where people do get around no matter the snowfall tho.


Snow and ice builds up on overhead powerlines. It can cause issues. States with tornados or hurricanes are more likely to build underground which avoids this. My location in SE Michigan is all overhead and, while we rarely lose power, I see tons of issues every ice storm that some unlucky few suffer through.

I live very near a hospital and suspect I branch off their higher-SLA lines so that may be a factor.

Warmer places that don't experience cold much absolutely suffer during a cold spell. Texas (with its independent grid) has been absolutely wrecked every time it gets too cold.


> I live very near a hospital

Yeah, you won’t lose power much. That’s prioritized.

I don’t get as many power outages in the winter as I do in the warmer months (in fall it’s not unusual to have some weeks without grid power). I did however get a freak outage before the last round of storms and cold. The overhead lines coming up the mountain to me have wetlands at the bottom, it appears a sudden extreme drop in temperature caused the wires to contract and tilted a pole enough (before ground could refreeze) to disconnect the lines. This is in NJ. JCP&L/firstenergy utility just does a shit job here.


> in fall it’s not unusual to have some weeks without grid power

This blows my mind. The last time I lost power was ~2 years ago and it lasted maybe 5 days. I know others in my area were out for longer. I suffered for a few days but ended up going down to Toledo and getting a hotel, thankfully only for one night as it was on the next day.

Outside of that, I can only thing of maybe ~100 hours total my power was out over the last ~5-8 years.

Aside, I do think I'm lucky in some way. I live off a semi-major road (40mph) and like I said earlier, less than 1 mile as the crow flies from a major regional hospital. But still most of my street will lose power and only me and a few neighbors will still have lights on. I always thought I was on some random spoke off the hospital grid but based on the surrounding outages it never made sense. There is a creek nearby to complicate things. One day I'll research/track the lines and see what's really up.


Suicidality seems rather overdramatic. It'd take a lot of halvings of the population to reach species viability threshold.

Especially a 4 year old LTS. But I guess the point was that you will run into some users that do when you ship to the general audience.

You run into the same problem on other platforms too of course (eg Android)


So a bit like SeaMicro in the 00's but with more software?

... over 8 years. Order of magnitude difference if it extrapolates to lifetime.

Programs written in traditional PLs are also often probabilistic. It seems that the same mechanisms could be used to address this in both types (formal methods).

Huh?

What's an example of a probabilistic programming language?


This isn't what the parent was talking about, but probabilistic programming languages are totally a thing!

https://en.wikipedia.org/wiki/Probabilistic_programming


Race conditions, effects of memory safety and other integrity bugs, behaviours of distributed systems, etc.

Ah sorry I read your comment wrong. Yes I agree we can and do make probabilistic systems; we've just to date been using deterministic tools to do so.

Saving the planet and the Trump alliance (https://www.theverge.com/ai-artificial-intelligence/867947/o...) don't seem to relaly jive.

There's been a constant stream of v8 VM sandbox escape discoveries since its dawn of course. Considering those have mostly existed for a long time before publication it's very porous most of the time.

And Python VM had/has its sandboxing features too, previously rexec and still https://github.com/zopefoundation/RestrictedPython - in the same category I'd argue.

Then there's of course hypervisor based virtualization and the vulnerabilities and VM escapes there.

Browsers use belt-and-suspenders approaches of employing both language runtime VMs and hardware memory protection as layers to some effect, but still are the star act at pwn2own etc.

It's all layers of porous defenses. There'd definitely be room in the world for performant dynamic language implementations with provably secure foundations.


> It's all layers of porous defenses.

Also known as the "swiss cheese model" in risk management.


part of why rexec is "historical" is that Guido was looking at some lockdown work and asked (twitter, probably?) the community to come up with attack ideas (on a specific more-locked-down-than-default proposed version.) After a couple of hours, it was clear that "patching the problems" was entirely doomed given how flexible python is and it was better to do something else entirely and stop pretending...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: