nicoburns

5 ms·

31.
by nicoburns 2mo ago
That's completely valid. But worth noting that most of the stuff I work on is not security adjacent (mostly UI / layout / rendering related), and I almost never run into this.
32.
by nicoburns 2mo ago
For non-US companies, the supply chain risk is probably higher with US models. The US government has already removed access to some models (Fable). IIRC that particular incident also affected US companies.
33.
by nicoburns 2mo ago
Currently we generally have a trade-off between: - The standard library, which is both trusted/blessed and perma-stable - A package ecosystem which is neither I would love to see more exploration of the space in between: - An extended
34.
by nicoburns 2mo ago
> obviously nothing will replace C in the sense that C will cease to exist. Long-term it almost certainly will. But not in our lifetimes, sure.
35.
by nicoburns 2mo ago
Rust has had generics for 10 years and doesn't have this problem. I think it's more a culture problem in Java than anything (and arguably a historical one).
36.
by nicoburns 2mo ago
I'm pretty sure it's this. There's a genuine split in the developer community over this issue. And the JS community in particular is enormous.
37.
by nicoburns 2mo ago
It does, but the UX is pretty lacking compared to the regular package workflow.
38.
by nicoburns 2mo ago
The core packages (things like rand and regex) are pretty closely audited in practice (albeit it might not catch a credential compromise). This crate isn't one of them.
39.
by nicoburns 2mo ago
> the solution is to get away from the wild soup of author-managed dependencies and go with something with an audited collection of software that is maintained by separate human beings from the known-vulnerable hackers writing the softwa
40.
by nicoburns 2mo ago
Rust is actively incorporating more functionality into the stdlib. The functionality of this crate has been in std since 2024. The ecosystem is just slow to update (not everything is maintained, etc).
41.
by nicoburns 2mo ago
The one from PanGUI ( https://pangui.io/blog/05-layout-rework-and-benchmarks/ ) looks impressive. It seems to combine a lot of the power/flexibility from CSS with the performance of simpler systems. It's n
42.
by nicoburns 2mo ago
Unfortunately 73% of websites use floats, so if you want to render the web then you have to support them!
43.
by nicoburns 2mo ago
Correct. Takumi ( https://github.com/kane50613/takumi ) which a JSX -> image generator might also be worth highlighting.
44.
by nicoburns 2mo ago
I maintain Taffy: AMA. I am currently in the process of building a wider browser engine / GUI toolkit on top of it ( https://github.com/dioxuslabs/blitz ). As part of that I am implementing a lot of the messier part
45.
by nicoburns 2mo ago
Why is that?
46.
by nicoburns 2mo ago
Ratatui (TUI) uses cassowary layout with a faster underlying library.
47.
by nicoburns 2mo ago
This project predates Clay by several years. Clay's earliest commit was 2024. Taffy was forked from https://github.com/vislyhq/stretch in 2022, and Stretch's first commit was 2019. The real inspiration is ht
48.
by nicoburns 2mo ago
Seems to me that the problem isn't that the data centres are being built. It's that the people building them aren't paying for their full cost. Despite the organisations building them being some of the richest in the world th
49.
by nicoburns 2mo ago
I saw an HN comment a few weeks back claiming their traffic has increased ~10x.
50.
by nicoburns 2mo ago
> Just use the size of the parent company, you say? Okay, which is the parent company, Google or Vanguard? Could you maybe tie it back to majority control? Alphabet is one company because it actually has a controlling stake over Google,
51.
by nicoburns 2mo ago
> Taxes don't really affect entity size. A progressive tax would, no? You could explicitly tax larger entities more.
52.
by nicoburns 2mo ago
They had fewer graphics, and much lower resolution screens.
53.
by nicoburns 2mo ago
If you factor in cost then it may well be, but it's definitely the case that the high-end models can get you significantly better results than the cheaper models even for tasks that feel like they should be straightforward.
54.
by nicoburns 2mo ago
Huh, the Choreographic Programming ( https://github.com/Wyzer-Lang/wyzer/blob/master/docs/08_chor... ) looks very like "server functions" as implemented in Next.js / Dioxus / Lepto
55.
by nicoburns 2mo ago
> Are you effectively building a separate renderer outside of Webkit? Yes, it's new engine separate to Webkit/Blink/Gecko/Servo/Ladybird/etc > Just curious on your thoughts about how Webkit was architecte
56.
by nicoburns 2mo ago
Of course everybody wants the government to be efficient. People just have very different idea of what that means in practice (what is useful vs. wasteful spending is highly subjective (in many cases))
57.
by nicoburns 2mo ago
> Well we’re certifiably not doing that. Don't disagree with you there. > London can’t even work out how to properly ventilate their underground rail network. This seems unrelated. It's not an energy problem: it's a pro
58.
by nicoburns 2mo ago
> Long term, i believe we should bet on web standards, not proprietary protocols controlled by one company. Totally agree. Not sure if you're involved in the development / spec process for WebDriver Bidi, but the big limitation
59.
by nicoburns 2mo ago
It's definitely on the list of "things that would be nice to have eventually". It hasn't been very high up my personal list of priorities to build myself, but if you want to build it then I imagine we'd accept the p
60.
by nicoburns 2mo ago
This is built on top of Blitz ( https://github.com/dioxuslabs/blitz ): a new modular (open source) browser engine that I've been building for the last 2.5 years. (I wasn't involved in building kitesurf, but I a

More ›