nrc
banner
ncameron.org
nrc
@ncameron.org
And some more local #nzpol thoughts: I’m so worried about the next electoral term - I think labour will win and will follow labour in the uk and the dems and a bunch of the euro centre left in turning into a centre right party who will do more damage, lose the moment to turn things around, and gift
November 29, 2025 at 6:16 PM
Honestly, the second terrace tunnel makes sense - it’s a main commuter route into the city, it’s a big congestion point, having 3 lanes is ridiculous, and once past the tunnel, cars quickly disperse into the city. The second mt vic tunnel though is a total waste of money and the associated
November 29, 2025 at 6:09 PM
I think there's two ways to think about AI for software dev: the AI as a tool which helps me write code, and AI is writing the code for me (of which vibe coding is the extreme case). I think the two are radically different in terms of the experience and quality of code produced, but often when
November 27, 2025 at 7:00 PM
Reposted by nrc
If you are in Japan and would like to work with Rust and Cyber security, there are several positions on my team. jobs.cybereason.com/details/?gh_...
Open Positions | Cybereason Careers
jobs.cybereason.com
November 27, 2025 at 10:51 AM
Reposted by nrc
🎉 Unison 1.0 has landed!

After years of engineering, design, and community collaboration, we’re excited to announce this milestone!

Spread the word!
Announcing Unison 1.0
After years of engineering, design, and community collaboration, we're excited to release Unison 1.0. This version delivers a refined programming workflow and a mature toolchain. Join us as we celebrate this milestone and look ahead to the future of Unison.
www.unison-lang.org
November 25, 2025 at 7:01 PM
Reposted by nrc
Oh, God, this is one of those "where do I even start" things, because Roblox is, like, *fractally* fucked. They are terrible at content moderation. A lot of the games are rated incorrectly, so kids can encounter graphic content (sex or violence) out of nowhere --
November 23, 2025 at 3:01 AM
Reposted by nrc
This is very good. Clear, calm, factual, and devastating for proponents of bans on puberty blockers for trans youth.

theconversation.com/puberty-bloc...
Puberty blockers: why politicians overriding doctors sets a dangerous precedent
The government’s ban on puberty blockers undermines clinical expertise and targets trans youth with a policy that lacks evidence, consistency and fairness.
theconversation.com
November 23, 2025 at 11:42 AM
I knew I was going to be disappointed y Andrew little, but this is so ridiculously stupid. Nobody wants this. Chung has minimal support from voters. It’s unnecessary, signals all the wrong things, and is materially bad for the council since Chung will clearly be bad in this role
Imo this is on the same spectrum as the PoliceNZ scandal. Attacking women should be a disqualifier for any role and definitely an sppoitment that gives you power over others #nzpol 1/2

Women’s lives, our reputations, our safety are discounted. Misogny in action.

www.thepost.co.nz/nz-news/3608...
November 22, 2025 at 4:09 AM
How, how have Eve apples gone from the clear beat to one of the worst?
November 21, 2025 at 2:24 AM
Panics (including unwraps) are good, actually. The issue is if there is a gap in your strategy for handling panics (a reasonable strategy is that your program never panics, but this is very hard to implement correctly. Like really, really hard). In the Cloudflair case, I assume there should have
November 19, 2025 at 10:12 PM
Reposted by nrc
I love how every corporate rust adoption story is like “yeah, all of our memory safety bugs went down and our performance doubled, but the downside is that Rust PRs take half the time to merge”
November 19, 2025 at 6:09 PM
Reposted by nrc
It is time for the annual State of Rust Survey! 📝✨️️

Whether you've just begun using Rust, are an experienced Rust user, stopped using Rust, or might use Rust in the future, we'd like to hear from you! 🦀

Available in ten languages and open until December 17th: blog.rust-lang.org/2025/11/17/l...
Launching the 2025 State of Rust Survey | Rust Blog
Empowering everyone to build reliable and efficient software.
blog.rust-lang.org
November 17, 2025 at 4:26 PM
Reposted by nrc
Political journalism, and the elite tier of journalism generally, got taken over by billionaire courtiers, conservative activists and sex-pest dipshits and those three groups have largely hounded the real reporters out of the profession as a matter of class self-interest.
November 15, 2025 at 6:52 AM
Reposted by nrc
Reposted by nrc
“We adopted #rustlang for its security and are seeing a 1000x reduction in memory safety vulnerability density ... with Rust changes having a 4x lower rollback rate and spending 25% less time in code review, the safer path is now also the faster one.”

security.googleblog.com/2025/11/rust...
Rust in Android: move fast and fix things
Posted by Jeff Vander Stoep, Android Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in ...
security.googleblog.com
November 13, 2025 at 7:52 PM
Reposted by nrc
"Memory Safety for Skeptics," where I argue why memory safety is worthwhile to pursue amid competing priorities!

queue.acm.org/detail.cfm?i...

#rustlang
Memory Safety for Skeptics - ACM Queue
queue.acm.org
November 10, 2025 at 6:11 PM
One thing that makes me sad about ai is that although it is incredibly powerful as a dev tool, we could have trad dev tools which could do a lot of what it does, but which have a precise interface, don’t make bugs, and don’t take forever, but we can’t monetise trad dev tools
November 6, 2025 at 7:16 PM
Reposted by nrc
Last week I wrote a section on (non-IO) blocking and async Rust for the async book: rust-lang.github.io/async-book/p.... I talk about 'not blocking the thread', combining CPU-intensive work with async, etc.

#RustLang
IO and issues with blocking - Asynchronous Programming in Rust
rust-lang.github.io
November 3, 2025 at 7:20 PM
Last week I wrote a section on (non-IO) blocking and async Rust for the async book: rust-lang.github.io/async-book/p.... I talk about 'not blocking the thread', combining CPU-intensive work with async, etc.

#RustLang
IO and issues with blocking - Asynchronous Programming in Rust
rust-lang.github.io
November 3, 2025 at 7:20 PM
Reposted by nrc
@ncameron.org has written a couple posts about the work he did with Zoo on KCL, their CAD programming language. This one on how it handles units is *super* interesting and gives a good taste of the neat kinds of not-mainstream(-yet!) problems to solve in their space: www.ncameron.org/blog/kcl-par...
KCL part 1: units
This blog post is about numeric units. Numbers in KCL are not just a number like 42 they always include units, e.g., 42mm. This is not unknown: F# has a famous and well-designed system, and more recen...
www.ncameron.org
November 3, 2025 at 4:10 PM
Reposted by nrc
November 2, 2025 at 2:47 PM
Incredible insight into what is happening in Sudan and, importantly, on the wider world. Depressing but important
For those asking for background - I was in Sudan twice this year and wrote about it
www.theatlantic.com/magazine/arc...
November 2, 2025 at 8:37 PM
Reposted by nrc
The second blog post in my series on KCL: numeric units (aka unit types), or how `fn foo(x: mm)` Just Works, whether you call it with `10mm`, `3in`, or `42`. www.ncameron.org/blog/kcl-par...
KCL part 1: units
This blog post is about numeric units. Numbers in KCL are not just a number like 42 they always include units, e.g., 42mm. This is not unknown: F# has a famous and well-designed system, and more recen...
www.ncameron.org
October 30, 2025 at 7:04 PM
Reposted by nrc
Also, detection of issues at scale with the help of automation is good. It's why at MITRE we built @hipcheck.mitre.org, though there's more work to do for it and it would need to catch on. At the very least, common detection drives up cost / complexity for attackers.
October 30, 2025 at 8:44 PM
I've talked about incentivisation twice - devs are incentivised to make the most use of 3rd party code at the lowest cost - meaning more deps and cursory reviews
ncameron.org nrc @ncameron.org · Oct 30
The former are useful, but require trusting strangers to do an incredibly difficult job which they are incentivised to do badly. The latter is a partial solution since crate review is still a problem
October 30, 2025 at 8:40 PM