Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. Human brain is two separate organs, Stanford Medicine-led research finds(stanford.edu ↗)
    47comments
  2. If math is more than proof, we need to better celebrate the rest of it(terrytao.wordpress.com ↗)
    22comments
  3. GPT-6 Astra Solves a WWI German Radio Cipher(prinzai.com ↗)
    26comments
  4. San Francisco Onion Futures Company(onionfutures.com ↗)
    59comments
  5. Android 17 is the first since 3.x to add new APIs without releasing to the AOSP(grapheneos.social ↗)
    387comments
  6. Typesafe-computer-use drives a Mac toward a goal for 1/50th of a cent per step(github.com/awlevin ↗)
    34comments
  7. Science Is Open Software(jepedersen.dk ↗)
    31comments
  8. SDCC – Small Device C Compiler(sourceforge.net ↗)
    15comments
  9. Cloudflare Quick Tunnels(cloudflare.com ↗)
    275comments
  10. You can run Git on object storage if you re-make packfiles(tigrisdata.com ↗)
    9comments
  11. Why building a Rust LSP is hard(rust-glancer.github.io ↗)
    28comments
  12. Saving another 100TB of RAM(cloudflare.com ↗)
    67comments
  13. NASA-IBM Lunar Foundation open-Source Geospatial AI Model(usra.edu ↗)
    2comments
  14. How to Write with an LLM(sockpuppet.org ↗)
    320comments
  15. How OpenAI Used Its Own LLMs to Design Its Jalapeño Chip(ieee.org ↗)
    81comments
  16. The first new cat species discovered in 100 years(nationalgeographic.com ↗)
    99comments
  17. Ctenophores: Wonders of Biology(quantamagazine.org ↗)
    4comments
  18. Goroutine Leak Profiles(go.dev ↗)
    2comments
  19. OpenJev(openjev.com ↗)
    259comments
  20. Show HN: Cactus Needle 3: 8-29MB automation models can match DeepSeek V4 Flash(cactuscompute.com ↗)
    88comments
  21. Veronese's Dogs(publicdomainreview.org ↗)
    discuss
  22. Photon-Emission-Guided Laser Fault Injection Enables RP2350 Secure Debug(ledger.com ↗)
    67comments
  23. Stepfun Step 5 Preview (LLM): On AA Pareto frontier(artificialanalysis.ai ↗)
    2comments
  24. Cache-to-Cache: Direct Semantic Communication Between LLMs (2025)(arxiv.org ↗)
    12comments
  25. Minimal Phone 2(minimalcompany.com ↗)
    218comments
  26. The Farnese letter(simonklee.dk ↗)
    6comments
  27. The Case of Elias Thorne, Imaginary Man AI Chatbots Are Obsessed With(vice.com ↗)
    1comments
  28. Cyclomatic Complexity in C#(ndepend.com ↗)
    18comments
  29. Warez: The Infrastructure and Aesthetics of Piracy (2021)(archive.org ↗)
    54comments
  30. Inside ZCode: Silently uploading your Git history to the cloud(ferstar.org ↗)
    97comments

Bun's unreleased Rust port has 13,365 unsafe blocks

64 pointsby 3mo agobun.com
52 comments
3mo agoHN ↗

right at the very top:

Bun · Rust codebase audit · May 21, 2026 · AI generated

nice of them to be up-front about it, I guess.

the port is AI slop, littered with 13k unsafe blocks.

and this blog post is more AI slop, claiming to present a "plan" for how to reduce that number.

why should anyone trust anything they output? all they're trying to do is cover up their slop with more slop.

if you're cleaning your house, and the dirt can't all fit under one rug, the obvious solution is to buy another rug.

3mo agoHN ↗

Dunno, AI was quick to prove it could be done. I’ve found while it’s initial attempts might be slop, with good direction it can really tidy things up

3mo agoHN ↗

I trust them because of their reputation. I have been a bun user before v1.0.0 and I experienced some shortcomings, bugs, memory leaks and things of that nature. But all of them were eventually patched, and it has become my go to runtime for at least 2 years now.

I trust their judgement to do the right thing.

I don’t understand the overreaction since this is a parallel development.

If it turns out to be better than make it default. Bugs get fixed it’s not like their zig version didn’t have issues before.

3mo agoHN ↗

I trust them because of their reputation.

Anthropic has a serious savior complex (when it is actually about total control) and believe that you should not run your own models locally and they do not care about you and I.

This Bun Zig to Rust rewrite is great content for them and for their IPO prospectus, but it isn't performative in the sense that it is fake. (It is real with terrible code.)

What this really means is that it gives the green light to managers and everyone else to use Claude to do massive rewrites; even when it produces hundreds of thousands of lines of slop.

Unless comprehension debt is what you want.

You do not have the same amount of token-spend as the Bun team does.

I trust their judgement to do the right thing.

They will do the "right thing" for their investors (and soon Wall Street).

3mo agoHN ↗

Comprehension debt will be the next manager's problem after I get promoted because of the massive vibecoded rewrite.

3mo agoHN ↗

Let's save the accusations of sweeping things under the rug for if and when they actually release this rewrite in a sloppy, buggy state.

3mo agoHN ↗

Bun's Rust port has not shipped in a released build yet. The Bun you install today still runs the original Zig implementation. This audit is the pre-release pass over the port.

That's good to see. I was getting a bit worried but now feeling better about it.

3mo agoHN ↗

I am looking forward to the first release tomorrow though!

3mo agoHN ↗

The current level of insanity with AI is off the charts.

Porting to a safe language without the safety features.

3mo agoHN ↗

Porting is usually a messy process. Do you know it's less safe than the Zig version? Maybe it's just highlighting where the problems already existed. Regardless, wild hyperbole are not constructive.

3mo agoHN ↗

Nobody knows if it is less safe than the Zig version because nobody has ever read the code. Maintainers included

3mo agoHN ↗

Ironically, suggesting that 13k is ridiculous compared to an unknown (the zig version is available for assessment) is as compelling as any other vibes.

3mo agoHN ↗

As a human I would likely port it the same way. First a translation close to 1:1 from the source, then redesign/refactor areas little by little to match the target language idioms

3mo agoHN ↗

In some cases it's impossible. C to TCL almost fine, C mapped to Scheme, or Prolog, hell awaits, because Scheme's functions can reduce tons of redundant functions to a single one.

3mo agoHN ↗

Sure, but that doesn’t really apply to zig => rust

3mo agoHN ↗

C2Rust, the most popular transpiler from C to Rust will leave a bunch of unsafe blocks. After the initial port it is expected for the authors to go in and work to remove them.

3mo agoHN ↗

But if that's the goal then I _think_ the "port" is perfectly achievable without LLMs. Zig transpiles to C, then C2Rust would do the rest

3mo agoHN ↗

There's more than one way to crack an egg.

3mo agoHN ↗

Wow, this page looks so bad information-wise. There's a trend with such LLM "reporting" of just throwing bunch of numbers, graphs, charts, whatever on the page. Looks impressive from the outside, totally incomprehensible when you try to actually read it.

3mo agoHN ↗

Bun is(was?) a lot about performance. How does it compare to zig?

3mo agoHN ↗

Rust and Zig both use the same optimizing compiler (LLVM) so assuming the vibe coded port didn't introduce performance pitfalls and kept the algorithms the same, the end result should be in the single digit performance difference with the original.

3mo agoHN ↗

I believe in the latest (possibly two latest?) releases of Zig you have the option to build a self hosted compiler.

3mo agoHN ↗

That may ne useful for bootstrapping but there's no way a self-made compiler can be competitive with LLVM. Optimizing compilers are crazy beasts.

3mo agoHN ↗

Could you imagine if Postgres decided to yolo a port (even if unreleased) to rust? Why port the whole thing like this? Why not do it piecemeal and get each piece to prod?

Look no further than their owner for the reason, unless it is merely a coincidence this only happened after a change in ownership…

3mo agoHN ↗

That’s the most absurd IMHO. Why not do the same experiment but module by module? And little by little rustify the whole codebase. It really feels like the whole project is a marketing experiment for Mythos

3mo agoHN ↗

It seems that this era is a marketing experiment for Mythos.

We're running forward without any idea of how we can get agents to write code that is even remotely safe or secure. It _will_ blow up with increasingly large blast radiuses.

3mo agoHN ↗

Remember kids, unsafe is not undefined behaviour. It just means you need to prove via unchecked English statements that your code is not UB.

3mo agoHN ↗

Is clanker defined behavior in this case

3mo agoHN ↗

Also, was this done with Mythos or Opus 4.7?

3mo agoHN ↗

When I see something tagged as "AI generated" (as it does in this webpage at the top), I find valuable and interesting to know which AI was behind it. Bun being anthropic, curious to what they have access to and what they used for this. I assumed Mythos or Opus 4.7, but I guess could be any other model as well.

3mo agoHN ↗

FWIW I would be really surprised if it’s not done with Mythos

3mo agoHN ↗

Assertions without context, charts about other charts, numbers (so many numbers) without data. An audit with no auditor. Pure infoslop. What a time to be alive.

3mo agoHN ↗

And the tone, I hate it so much. Would it have been really that bad to use technical prose instead of every single sentence reading like a punchline?

3mo agoHN ↗

I can't help thinking about Mitchell Hashimoto's recent post about "whole companies consumed by AI psychosis." I read that as naming Bun without directly naming Bun...

3mo agoHN ↗

I don't know what is real anymore so I consider everything to be fake

3mo agoHN ↗

Guys, does anyone know why the decision to port Bun from Zig to Rust? Is it to move to a less niche language?

3mo agoHN ↗

The bun team communicated about it, it’s to reduce the number of memory issues they have to deal with IIRC

3mo agoHN ↗

I wonder if the actual reason is that Zig declined their slop PR.

3mo agoHN ↗

I don't know definitively, but the Zig project has been vocally anti-LLM code; Bun was bought by an LLM company.

3mo agoHN ↗

I have such contempt for this effort by Anthropic. Jarred has torpedoed so much of the goodwill Bun had earned.

3mo agoHN ↗

If you want to dig into Bun's port to Rust, I suggest waiting until they actually release something instead of generating LLM slop charts about unfinished source code.

3mo agoHN ↗

Oh, I didn't notice the URL, the page didn't seem at all official. In that case it's weird that they present this clearly LLM-generated "report".

3mo agoHN ↗

13k unsafe blocks is a reminder that unsafe on its own isn’t the problem, it’s whether that unsafe boundary is small and audited. The number that matters more is how much of the codebase depends on unchecked invariants. If the answer is most of it, the port is moving too fast.

3mo agoHN ↗

Of course it's moving too fast. Its unaudited and noone will ever audit it and also nobody wants this.

3mo agoHN ↗

He must be suffering from AI psychosis.