stefanha

7 ms·

31.
by stefanha 3y ago
Languages with capability-based security may not be supply chain safe. For example, Pony allows third-party libraries to use the unsafe FFI by default. I think Pony is close to a supply chain safe programming language, but it looks like it&
32.
by stefanha 3y ago
Can you explain what you mean? htmx is client-side, so you don't need server-side includes. Just host HTML snippets on your web server and let htmx stitch them together in the browser. I'm not sure where you want the web server to
33.
by stefanha 3y ago
The numbers I have seen are CXL latency around 250 ns while NVMe latency is 5-10 us (Intel Octane DC series for local flash). You mention amortization for NVMe, but when operating at high queue depths the per-request latency is larger than
34.
by stefanha 3y ago
What is the killer app for cache coherency? Current PCIe devices work without cache coherency to host memory. Drivers follow a handful of patterns for communicating with the device via PCI BARs and DMA. Cache coherency is not required. If w
35.
by stefanha 3y ago
For Debian, Ubuntu, and Arch Linux there are official snapshots available so you don't need to cache package downloads yourself. For example, https://snapshot.debian.org/ .
36.
by stefanha 3y ago
Another option for reproducible container images is https://github.com/reproducible-containers although you may need to cache package downloads yourself, depending on the distro you choose.
37.
by stefanha 3y ago
Another cache optimization trick some ring-buffer implementations use is to keep a shadow copy of the read or write pointer to avoid frequently fetching the other context's cache line. The latest version of the read pointer is only nee
38.
by stefanha 3y ago
virt-builder is awesome for quickly provisioning Linux distros. It skips the installer because it works from template images. You can use virt-builder with virt-manager (GUI) or virt-install (CLI).
39.
by stefanha 3y ago
Cool, thanks for sharing this information! I'm not a Lua or wasmtime developer, but I hope to learn from whatever discussion follows.
40.
by stefanha 3y ago
Is there a benchmark available where you compared Lua and wasmtime against your interpreter? It would be interesting for Lua and wasmtime developers to chime in on why the world switch overhead is higher and whether there exist configuratio
41.
by stefanha 3y ago
In the table on slide 15 the Indexing & Search Efficiency cells for Traditional Databases and Vector Databases appear to be swapped.
42.
by stefanha 3y ago
I didn't go into the various ways in which AioContext lock was replaced in the article. You're right, sometimes new fine-grained locks weren't necessary. When there is really only one thread accessing some data then locking i
43.
by stefanha 3y ago
> it's very easy for a runtime to use a zero-cost strategy to enforce that memory loads/stores are all in-bounds I believe your statement is only true for wasm32 on a 64-bit host where guard pages can be placed around the memo
44.
by stefanha 4y ago
Thanks for the reply. The FAQ doesn't really answer my specific questions, but I understand that HVM is still young and there aren't answers to everything yet. The FAQ mentions that every reduction rule can be compiled to machine
45.
by stefanha 4y ago
Can someone explain or share references on how HVM (or GHC or similar computational models) beat optimized compiled imperative languages like C, C++, or Rust? I took a quick look at the HVM runtime and can vaguely make out the shape of the
46.
by stefanha 4y ago
Variables can be set on the command-line: https://www.gnu.org/software/make/manual/make.html#Overridin... $ make HOST=dev1.example.org deploy Environment variables are also available in makefiles.
47.
by stefanha 4y ago
It might be easier to do this with the qcow2 disk image format. Compression is enabled individually for each cluster (see bit 62 of the L2 table entry). That way an image can have mixed uncompressed and compressed clusters without requiring
48.
by stefanha 4y ago
This is what the last paragraph was intended to convey. The tool should be aimed at setting up any environment, not just development.
49.
by stefanha 4y ago
I avoid "developer environments" because they are different from production environments and that leads to bugs that don't show until the application is in production. "But it worked in development" problems waste a
50.
by stefanha 4y ago
Can you explain in more detail how DeFi is possible with Bitcoin? I thought that smart contacts in particular are not possible due to Bitcoin Script's limitations?
51.
by stefanha 4y ago
I also thought of podman/buildah when reading this. The idea is you can create container images (and commit changes) using the shell. No need for Dockerfiles if you don't want them.
52.
by stefanha 5y ago
Maybe show a warning that the install script enables telemetry by default and implement https://consoledonottrack.com/ . Users who do not wish to participate in telemetry can set the DO_NOT_TRACK=1 environment variable befor
53.
by stefanha 5y ago
This looks very cool for quickly running your own apps without configuring a server yourself! Does Coolify also host your git repository? I noticed that Gitea is listed as work-in-progress, so maybe there will be not just a Gitea Source but
54.
by stefanha 5y ago
For anyone using GDB, check out the Python scripting support. It can be used to write similar scripts as what is shown in the drgn blog post: https://sourceware.org/gdb/onlinedocs/gdb/Python.html drgn looks m
55.
by stefanha 5y ago
Thanks for sharing!
56.
by stefanha 5y ago
I wish the website listed concrete differences compared to TCP/IP, QUIC, SCTP, and UDP. Without specific details I'm not sure why one would choose Ouroboros over existing solutions.
57.
by stefanha 5y ago
I tried the tutorial and had some interesting discussions about the direction of Oct API development. It takes the hassle out CRUD services. They are repetitive to code without something like Oct API. Now you just need to define your data m
58.
by stefanha 5y ago
> However the peak of network filesystem security on Linux is “don’t get your network hacked lol”. I think this is incorrect. If you want encryption that's built into NFS (instead of a kernel VPN like IPsec/Wireguard or tunneli
59.
by stefanha 5y ago
It depends what you want to do. When QEMU is used for virtualization it's typically a component in a larger stack like GNOME Boxes or virt-manager, two UIs that rely on libvirt to run QEMU. When QEMU is used for emulating ARM boards or
60.
by stefanha 5y ago
Yes, email qemu-devel@nongnu.org or discuss with developers on the #qemu IRC channel on chat.oftc.net if you hit issues. QEMU builds on a number of host operating systems, not all of them POSIX. We'd be happy to help!

More ›