raggi

23 ms·

211.
by raggi 2y ago
There is a real practical problem with the dichotomy in Go unfortunately, where on the one hand a single threaded program is safe, but on the other hand no go programs are single threaded. More mitigations are coming and synctest for exampl
212.
by raggi 2y ago
Odd comparison / statement in the context of MS rewriting GDI in Rust
213.
by raggi 2y ago
It has a smaller API surface into the consuming applications and platforms. Skia tendrils run deep and leak all over the place. There's also a different set of work to invest in, next-generation Skia is likely to look quite different,
214.
by raggi 2y ago
I really want hinting, subpixel and anti-aliasing available on all systems, and i want to pick the appropriate set of techniques based on the dpi and font size to minimize error, fuzzy excesses, and balance computation cost. Obviously we st
215.
by raggi 2y ago
HTTP/3 is not a mobile centric technology. Yes there was a lot of discussion of packet pacing and it's implications for mobile in early presentations on QUIC but that's not the same as "centric", that's one app
216.
by raggi 2y ago
Everyone loves to tout TTFB numbers for quic, but there's very little widespread reporting on throughput, particularly analyzed for a large number / wide breadth of real world customers. This matters because for a lot of operating
217.
by raggi 2y ago
Vertical scaling this language also gets into painful territory quite often, I’ve had to workaround this problem before but never with a thing that felt like this: https://github.com/tailscale/tailscale/blob/m
218.
by raggi 2y ago
It looks great when the windows have no content and fit in any size!
219.
by raggi 2y ago
Secure: fuchsias kernel is a “practically sized kernel” - many call it a microkernel but it doesn’t take that too far. The kernel retains control over memory allocation, facilitates and enforces IPC and maintains an enumerable set of proces
220.
by raggi 2y ago
fuchsia.dev has literally hundreds of pages of detailed content, I’m not going to rewrite it all in an HN comment
221.
by raggi 2y ago
> The fact that they are now starting to talk about it publicly now is probably a sign that they are looking to move beyond just IoT in the future. You're reading too much into a conference presentation. The team has been allowed to
222.
by raggi 2y ago
This is probably the most complete story told publicly, but there was a lot of timeline with a lot of people in it, so as with any such complicated history "it depends who you ask and how you frame the question": https:/&#x2
223.
by raggi 2y ago
I don't think they were as tenable then as they are now. When I was doing performance work on the platform one of the notable things was how slow some of the message passing was, but how little that mattered because of how many active
224.
by raggi 2y ago
You got the high drama stories with the timelines re-arranged to fit the narrative :D Fuchsias underlying goals are to be a great platform for computing. This is distilled in its current incantation into a short tagline on fuchsia.dev: simp
225.
by raggi 2y ago
Vitess came from YouTube
226.
by raggi 2y ago
Step 1: echo $SHELL Step 2: should mention profiles Step 3: is likely confused by terminal emulators that do not start login shells so profile is not reread (this is also why you don’t have dozens of duplicate path entries all the time). Tr
227.
by raggi 2y ago
the arguments from folks on the "architecture review boards" was that multiple connections are always bad and that developers can't be trusted. i'm willing to accept that they did get beat up quite a bit over power at va
228.
by raggi 2y ago
The alternative to polling is unfortunately polling, which is what the article is about. You can avoid polling for messages, but you have to send packets outbound regularly in order to maintain a NAT mapping & connection, so that the ex
229.
by raggi 2y ago
What I want from platforms, and I fought for at one time in Google with no success: a platform API that provides applications a way to schedule packets when the radio turns on. The mobile platforms in particular continue to assume that you
230.
by raggi 2y ago
About: https://opendaw.org/
231.
OpenDAW – a new holistic exploration of music creation inside the browser(opendaw.studio)
209 points by raggi 2y ago|131 comments
232.
by raggi 2y ago
deno has been somewhat pleasing in this space, it's not a perfect boundary though
233.
by raggi 2y ago
Do you anticipate that: > When GODEBUG=fips140=only is used, in addition to the above, cryptographic algorithms that are not FIPS 140-3 compliant will return an error or panic. Note that this mode is a best effort and can’t guarantee com
234.
by raggi 2y ago
This is tin-foil-hat speculation, but for example, if you observe a locality measurement protocol picking where it should connect to, but you already know all of the local sites of interest that are relevant, you might want to find remote s
235.
by raggi 2y ago
Tailscale uses latency to pick home DERPs and I am re-evaluating it as we observe what appear to be manipulated STUN latencies for users in Asia particularly in or close to China. The latencies are often raised to over 300ms to affect this,
236.
by raggi 2y ago
You can just open a stream in the service worker and push events via postMessage and friends. Another nice thing to do is to wire up a simple filesystem monitor for all your cached assets that pushes path & timestamp events to the servi
237.
by raggi 2y ago
The number was set while Apache was dominant and common deployments would get completely tanked by a decent number of clients opening more conns than this. c10k was a thing once, these days c10m is relatively trivial
238.
by raggi 2y ago
This, it works well in a service worker for example.
239.
by raggi 2y ago
There’s no separate signing in use here except for the ssh connection, which can be trivially mitm’d in common targeted scenarios because of the lack of webpki and the lack of other preparations. SSHFP would help, but only if configured bot
240.
by raggi 2y ago
No SSHFP record, TOFU clients. This is not secure. I wish people would stop trying to use SSH for things like this. PKI has features that are missing here and those features matter. This is unsafe. "but raggi, mitm before tofu is a rea

More ›