alias (@loadingalias) header
alias (@loadingalias) profile picture

Founder @ alias-research | cargo-rail | rscrypto | privacy advocate | Member @ Zed Guild 🦀

USA
Joined May 2023
Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)Photo by alias (@loadingalias)
We (actually) KILLED Palantir this time!!! New updates, better ontology generation, cloud service, and smarter agents! You can deploy it locally here: github.com/HelixDB/helix-fou… or use the cloud: foundry.helix-db.com
9
13
2
151
13,067
USearch v3 is ready for a design-partner preview! 3 years ago, I released USearch v2. It became my first widely deployed piece of software. It grew to over 4’000 GitHub stars, a number unimaginable to me back then. Together with my complementary projects, that’s 17’000 stars today. The open-source infrastructure behemoths shipping these libraries by default, like ClickHouse & ScyllaDB, collectively account for over 550’000 stars. Almost 800’000 including opt-in integrations 🤯 Thank you to everyone who shipped, starred, or argued with this code! I know I can be slow to respond, and I appreciate your patience. With help from AI agents, compute from neocloud partners and a lot of user feedback, USearch v3 finally has a release candidate. Only 1’000 days of work later 🫠 USearch v3 stays open-source, Apache 2.0, free for everyone, from open-source giants to neolabs, hyperscalers, government agencies, & even mobile publishers! Still, I’ve seen many times how paying for an integrated software experience can work better and cost less than getting the software for free — and be in everyone’s best interest. So I want to take a page from ClickHouse and Databricks, two organizations that reshaped commercial analytics infrastructure over the past decade by building businesses around open-source foundations. I want to do the same for Search: keep the infrastructure open and productize the experience around it. Before putting a major breaking release on “main” branch and launching an integrated offering around it, I want to make the transition as smooth as possible for my users. So I’m inviting a few design partners to join me in final benchmarking and help shape the UX and C ABI before the public release. Your workloads should have a say in what ships. I have no doubt USearch v3 will be a “scale unlocker” for many organizations reliant on Search. With a little creativity and collaboration, it can become a “capability unlocker” as well. If you’re working at a frontier intelligence lab, in autonomous driving, or in life sciences, and managing 100+ TB of data, DM me with a brief description of your workload. I’d love to collaborate!
8
6
2
43
5,059
alias retweeted
I spent some time off reading some papers and thought that I could improve upon what was previously the world's fastest CRDT Introducing eg-strider: a set of improvements on top of Eg-walker that result in significantly better performance on every measurable axis jzhao.xyz/posts/eg-strider github.com/jackyzha0/eg-stri… (now featuring exclusive twitter language balls benchmark visualizations)
15
24
5
288
13,620
alias retweeted
v1 ci is half the price of blacksmith lol
2
1
23
1,383
Vector has redeveloped its IEEE 11073 SDC stack in Rust, for medical device networking. 🦀 SDC, Service-oriented Device Connectivity, is a family of standards within IEEE 11073. It lets point-of-care medical devices from different vendors discover each other, exchange measurements, states and alarms, and expose their functions as standardized services. Vector unveiled what it calls the first Rust-based SDC stack at its Medical Engineering Symposium on October 15. It is expected to be available in the first quarter of 2027. Why Rust, as Vector puts it: → Memory and type safety help prevent common memory-handling errors during development → That can reduce certain causes of runtime errors and memory-related security vulnerabilities → For safety-critical devices, it is described as a solid foundation for reliability and cybersecurity requirements On integration: → The stack can be used from C and C++ applications through a foreign function interface → Manufacturers do not need to port existing application software to Rust → The architecture is designed to work across different hardware and operating systems On performance, Vector claims significantly better results, credited to optimized XML message processing and more efficient management of the device data structure. No numbers were given. A few things worth noting: → Vector's press release does not mention any certification or regulatory approval. One trade-press headline says the stack "qualifies for medical devices", but its text does not name a qualification either → The stack is not released yet → All claims are the vendor's own. No benchmarks, customers or toolchain details were given Still, a notable signal: a long-established automotive and medical tooling vendor is choosing Rust for a protocol stack intended to run inside medical devices. 🔗 vector.com/en/company/press/… #RustLang #MedTech #Embedded #Safety
1
8
447
alias retweeted
How to find ALL PHP bugs: 1. Compile code (e.g. to RISC-V, x86, LLVM IR) 2. Vibe prove ASAN and non-ASAN versions have same behavior across all inputs. Hard, but Claude can do it! 3. Find a LOT of bugs Super proud of our work. A big step towards finding ALL memory safety bugs
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
24
61
5
1,190
55,182
The obvious lesson is CA certificates need to leave the Stone Age and move to threshold ECDSA signatures. The root programs need a blanket policy of only accepting certs with secret sharing between multiple independent HSMs. Crypto custodians figured this out years ago. When you have really important private keys that require resistance to nation state actors, the only solution is combining multiple independent sources of entropy
‼️ BREAKING: 8 Private keys belonging to eMudhra intermediate certificate authorities (CA) have been compromised. Chrome and Firefox blocked the affected certificates within hours. Go, NSS, and other software have issued fixes. Full details - thehackernews.com/2026/10/ei…
14
17
4
290
14,046
alias retweeted
1. What does "Code Is Cheap" mean? How does it interact with open-source projects? 2. When code is cheap, is open-source (collaboration) still necessary? 3. What can we do to better maintain open-source projects today?
13
2
2
19
3,610
Unfinished coding side projects are now way easier to complete than unfinished blog posts. I’m perfectly OK with AI writing my code, even the docs. But I flinch at the idea of AI writing my blog posts, which feels like an egregious violation of a fundamental ethnical contract.
27
31
3
626
13,294
Every single Eng leader out there is iterating on some kind of PR autoapprover, coding automations, AI cost optimization, and model switching/eval stuff. Just a million people doing the same thing.
43
27
16
1,009
76,643
ast-grep 0.50.0 is out! 🎉 🔐 Native custom languages now require explicit opt-in ⚡ Built-in Zig support ☕ Richer Java outlines 🔧 Better C/C++ outlines CI users: review --custom-languages allow before upgrading. Happy grepping! ast-grep.github.io/blog/new-…
5
36
1,464
Update Telegram Desktop immediately! A critical vulnerability has been discovered that allows attackers to gain access to your account and secretly steal files from your computer. The attack uses links in the format tg://. If a special command is constructed, clicking the link can cause a malicious script to send a selected file to the attacker’s channel - without requiring additional confirmation.
546
219
39
936
140,122
alias retweeted
Rust 的并发安全不包括不会发生死锁。 主要指的是,在 Safe Rust 的前提下,不会出现两个线程同时修改同一片内存区域。 下面这几行代码就可以演示 Safe Rust 里出现死锁。从 high-level 的角度说,这跟循环引用(内存泄漏)是一样的。 (sleep 不是一定触发,但大幅提高概率,无 sleep 也可能触发)
这个纯讽刺,数据库强制退出就很讽刺,是 Rust 的就更讽刺了(看好错误,是 stack overflow)。 Rust 安全指的是内存安全和并发安全。Rust 有些场景,绕不开 unsafe,而且不用 unsafe 也能写出 bug。 Rust 很多优点,但也没必要忽视问题。 另外,喜欢一个东西,就多做些研究,别局限于自己的经验。
4
4
3
39
7,245
alias retweeted
Hey uh, @Keurig - what the hell is a COFFEE MACHINE uploading, let me double check... ONE FUCKING TERABYTE OF DATA IN 10 DAYS!?!? Immediately unplugging that. Getting my parents a new coffee machine.
548
1,309
267
25,155
2,514,761
JUST IN: mold 3.0.0 rewrites the high-speed linker from C++ to Rust as a drop-in replacement with bug fixes, better safety, and Cargo builds.
1
3
50
1,400
alias retweeted
I'm open sourcing Leviathan: an indexer that lets AI agents search a database of any size without reading it. At 1M records it hands your agent 436 tokens instead of 107,000, and it finds the answer 99% of the time. github.com/elstongun/leviath…
88
171
21
2,603
133,855
Most devs have never built: • a tokenizer • a memory allocator • a scheduler • a syscall handler LowLevelCraft has 479+ micro-tasks that make you build all of them. In the browser. No setup. C, C++, Rust, Python, ARM asm. The C track is free 👇
17
171
3
1,746
43,789
Claude Opus 5.5 just took a big drop on NerfBench. Yesterday it was scoring above launch. Today it's at 94.2%. GPT 6 Astra: 98.0% Sonnet 5.5: 100.9% GPT 6.1 Sol: 106.7% 94.2% is still inside normal variance, so we can't call it a nerf yet. But we're watching Opus 5.5 very closely.
384
341
166
6,851
942,354
alias retweeted
感谢 RustChinaConf @blackanger 出图,整了一个神秘的 AI 海报。 这个月 10.10-10.15 我在苏格兰格拉斯哥参加 @TheASF 的年度大会,10.16 一落地广州,就要到深圳分享“开源增生”这个主题了。 Rust 成为 AI 时代必修乃至首选语言之后,对应的工业级软件库正在井喷。欢迎到时候线下交流讨论。
15
4
1
22
2,761
alias retweeted
we are so back
1
1
1
8
1,620