6 ms·

What does the fact that it's written in Rust do? Do we get more storage space? Can files being downloaded faster?

Filligree 7y ago
It might use less battery time?
outadoc 7y ago
Thanks for your extremely useful sarcastic comment. Maybe the author just wanted to play with the language and share their knowledge through a cool open-source tool. Maybe it's just the best language for the job.
- Heliosmaster 7y ago
  yes but they do have a point. 'Written in Rust' adds nothing to the tool itself. Edit: I see now. Thanks
  - lytedev 7y ago
    That's not true! See other comments in this thread.
  - heavenlyblue 7y ago
    It does actually a lot - I know that when I contribute to this project I have a much lower probability of shooting myself in the foot compared to most of the other languages
  - lhnz 7y ago
    Aren't many of us programmers? Don't we gain something from reading source code in languages we might be interested in using?
  - hombre_fatal 7y ago
    We are craftspeople. Of course we care about how tools are made. Else we'd be at ProductHunt.
the_mitsuhiko 7y ago
Conveys the ecosystem. When I see “CLI tool written in Python” vs “CLI tool written in Rust/Go” I pick the latter because Python’s packaging situation for command line tools is beyond awful.
- more-coffee 7y ago
  By packaging situation do you mean the user-side of things, i.e. how to install stuff separately of each other? For that I've had good experience using https://pypi.org/project/pipx https://pypi.org/project/pipx to install several cli tools without conflicts. Uninstalling them has also been a breeze.
  - the_mitsuhiko 7y ago
    I wrote a tool called pipsi which I believe has influenced pipx but despite the existence of such tools I have no idea these days how to install python packages any more. Ir has become only more confusing and complex. Both for cli tools as well as libraries.
    - j88439h84 7y ago
      Pipx is the replacement for pipsi. It's good for installing cli tools. For managing project dependencies, Poetry is the current best. It means I dont have to interact with virtualenv or pip or setuptools or pip-tools or manifest.in.
- kissgyorgy 7y ago
  This is very surprising to read. When I read something like this from others, I was always arguing that "it's not anymore", but I'm absolutely sure you know better than me. Would you mind elaborating actual problems or writing a blog post about it? I am VERY curious about your experience and opinion in this topic!
  - simias 7y ago
    Personally it's more about familiarity, I dev Rust so I know that I have all the prerequisites and setting this up should be trivial, meanwhile I don't do a lot of Python work so getting that to work might be a bigger commitment. I don't do a lot of Go either but at least Go generates freestanding binaries so if I install it in precompiled form I know that it will be fairly frictionless and won't rely on half a billion dependencies (which may or may not conflict with something else). I use a bunch of Go programs regularly (like docker or Arch's yay package manager) and it never gets on in the way. On the other hand if it's an npm package I don't even think about it.
reacharavindh 7y ago
To me, it sets expectations for - single binary deploy(unlike Python) - fast (llvm) - memory efficient (no GC) - newer (by virtue of the newness of the language itself). Nothing wrong with setting expectations in title ;-)
- gigatexal 7y ago
  GCs have come a long way. I think the bit about being memory efficient for not using a GC is FUD.
  - heavenlyblue 7y ago
    >> GCs have come a long way Aha. I have a web server written in rust that literally uses about 5Mb memory on RPi. And that one actually has a proper web framework, not something barebones. Good luck doing that in Python.
    - gigatexal 7y ago
      I was thinking about Go not Python when writing the above.
    - dnpp123 7y ago
      Which crate/framework do you use ? I'm looking at REST API frameworks for rust these days, but nothing looks decent...
      - heavenlyblue 7y ago
        I went with Rocket. Basically I wanted to control the switching of devices on my sound amplifier using USB infrared remote. So I built the UI using yew and the web server using Rocket - but I wanted to do it fast and only in Rust.
    - kbutler 7y ago
      But I bet it took a lot more code than: python3 -m http.server Note also that Python is primarily reference counted, with GC used only to detect cyclic references.
badatseciruty 7y ago
Unnecessary sarcasm aside, I'm Keen to look at it simple because it's written in Rust. I like Rust so this is interesting for that reason alone. Besides that, Mozilla and the Firefox community have a lot of Rust devs so writing this in Rust may make this more likely to get PRs from people involved in the FF Send project
megous 7y ago
Nothing. You can get the same secure sharing service with zero hassle with a simple shell script: sum=$(sha1sum "$1" | cut -f 1 -d ' ') ssh your-vps mkdir /srv/http/files/$sum scp "$1" your-vps:/srv/http/files/$sum/ echo https://your-vps/files/$sum/$1 + nginx or whatever
- ubercow13 7y ago
  That isn't really comparable in that it's not E2EE
  - megous 7y ago
    It is, as all ends belong either to you (source computer, vps) or the destination device, and it uses ssh and https.
    - ubercow13 7y ago
      The VPS doesn't really belong to you. Google has exactly the same ability to view your secret file shared unencrypted over Drive as they do to view your file stored on your f1-micro instance.
      - megous 7y ago
        That's just your assumption. VPS != Google. It's just a virtual machine running on some HW. I agree that if that HW is not owned by you, it can be a problem. If that's a problem you can just add another layer of encryption to the mix, like a GPG command. I can and do own that HW. At least as much as one can own anything - it's located in my appartment. You can just as well run the web server from your own workstation/laptop. The only reason to put shared files on other computer is that the other computer is more available.
- rvz 7y ago
  Well I can't use this on Windows nor can I guarantee that this cryptic shell script will run on my friends computer who still uses Windows. Even so, he wouldn't know how to run it. Also it can't be a "secure sharing service" if you're still using 'sha1sum' and it not being end-to-end encrypted...
weavie 7y ago
I might not be that interested in using it, but now I might be interested in reading a bit of the source.
throwGuardian 7y ago
Prevents people from forking and submitting PRs, given rust's abysmally low usage, and higher complexity for beginners.

It might use less battery time?

Thanks for your extremely useful sarcastic comment. Maybe the author just wanted to play with the language and share their knowledge through a cool open-source tool. Maybe it's just the best language for the job.

Heliosmaster 7y ago
yes but they do have a point. 'Written in Rust' adds nothing to the tool itself. Edit: I see now. Thanks
- lytedev 7y ago
  That's not true! See other comments in this thread.
- heavenlyblue 7y ago
  It does actually a lot - I know that when I contribute to this project I have a much lower probability of shooting myself in the foot compared to most of the other languages
- lhnz 7y ago
  Aren't many of us programmers? Don't we gain something from reading source code in languages we might be interested in using?
- hombre_fatal 7y ago
  We are craftspeople. Of course we care about how tools are made. Else we'd be at ProductHunt.

the_mitsuhiko 7y ago

Conveys the ecosystem. When I see “CLI tool written in Python” vs “CLI tool written in Rust/Go” I pick the latter because Python’s packaging situation for command line tools is beyond awful.

more-coffee 7y ago
By packaging situation do you mean the user-side of things, i.e. how to install stuff separately of each other? For that I've had good experience using https://pypi.org/project/pipx https://pypi.org/project/pipx to install several cli tools without conflicts. Uninstalling them has also been a breeze.
- the_mitsuhiko 7y ago
  I wrote a tool called pipsi which I believe has influenced pipx but despite the existence of such tools I have no idea these days how to install python packages any more. Ir has become only more confusing and complex. Both for cli tools as well as libraries.
  - j88439h84 7y ago
    Pipx is the replacement for pipsi. It's good for installing cli tools. For managing project dependencies, Poetry is the current best. It means I dont have to interact with virtualenv or pip or setuptools or pip-tools or manifest.in.
kissgyorgy 7y ago
This is very surprising to read. When I read something like this from others, I was always arguing that "it's not anymore", but I'm absolutely sure you know better than me. Would you mind elaborating actual problems or writing a blog post about it? I am VERY curious about your experience and opinion in this topic!
- simias 7y ago
  Personally it's more about familiarity, I dev Rust so I know that I have all the prerequisites and setting this up should be trivial, meanwhile I don't do a lot of Python work so getting that to work might be a bigger commitment. I don't do a lot of Go either but at least Go generates freestanding binaries so if I install it in precompiled form I know that it will be fairly frictionless and won't rely on half a billion dependencies (which may or may not conflict with something else). I use a bunch of Go programs regularly (like docker or Arch's yay package manager) and it never gets on in the way. On the other hand if it's an npm package I don't even think about it.

reacharavindh 7y ago

To me, it sets expectations for - single binary deploy(unlike Python) - fast (llvm) - memory efficient (no GC) - newer (by virtue of the newness of the language itself). Nothing wrong with setting expectations in title ;-)

gigatexal 7y ago
GCs have come a long way. I think the bit about being memory efficient for not using a GC is FUD.
- heavenlyblue 7y ago
  >> GCs have come a long way Aha. I have a web server written in rust that literally uses about 5Mb memory on RPi. And that one actually has a proper web framework, not something barebones. Good luck doing that in Python.
  - gigatexal 7y ago
    I was thinking about Go not Python when writing the above.
  - dnpp123 7y ago
    Which crate/framework do you use ? I'm looking at REST API frameworks for rust these days, but nothing looks decent...
    - heavenlyblue 7y ago
      I went with Rocket. Basically I wanted to control the switching of devices on my sound amplifier using USB infrared remote. So I built the UI using yew and the web server using Rocket - but I wanted to do it fast and only in Rust.
  - kbutler 7y ago
    But I bet it took a lot more code than: python3 -m http.server Note also that Python is primarily reference counted, with GC used only to detect cyclic references.

badatseciruty 7y ago

Unnecessary sarcasm aside, I'm Keen to look at it simple because it's written in Rust. I like Rust so this is interesting for that reason alone. Besides that, Mozilla and the Firefox community have a lot of Rust devs so writing this in Rust may make this more likely to get PRs from people involved in the FF Send project

megous 7y ago

Nothing. You can get the same secure sharing service with zero hassle with a simple shell script: sum=$(sha1sum "$1" | cut -f 1 -d ' ') ssh your-vps mkdir /srv/http/files/$sum scp "$1" your-vps:/srv/http/files/$sum/ echo https://your-vps/files/$sum/$1 + nginx or whatever

ubercow13 7y ago
That isn't really comparable in that it's not E2EE
- megous 7y ago
  It is, as all ends belong either to you (source computer, vps) or the destination device, and it uses ssh and https.
  - ubercow13 7y ago
    The VPS doesn't really belong to you. Google has exactly the same ability to view your secret file shared unencrypted over Drive as they do to view your file stored on your f1-micro instance.
    - megous 7y ago
      That's just your assumption. VPS != Google. It's just a virtual machine running on some HW. I agree that if that HW is not owned by you, it can be a problem. If that's a problem you can just add another layer of encryption to the mix, like a GPG command. I can and do own that HW. At least as much as one can own anything - it's located in my appartment. You can just as well run the web server from your own workstation/laptop. The only reason to put shared files on other computer is that the other computer is more available.
rvz 7y ago
Well I can't use this on Windows nor can I guarantee that this cryptic shell script will run on my friends computer who still uses Windows. Even so, he wouldn't know how to run it. Also it can't be a "secure sharing service" if you're still using 'sha1sum' and it not being end-to-end encrypted...

weavie 7y ago

I might not be that interested in using it, but now I might be interested in reading a bit of the source.

throwGuardian 7y ago

Prevents people from forking and submitting PRs, given rust's abysmally low usage, and higher complexity for beginners.