Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
vsgherzi
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
7 ms
·
121.
▲
by
vsgherzi
8mo ago
Servo's history is much more complicated and originally was planned to be used for the holo lens before the layoff. Comparing trajectory doesn't make sense they had completely different goals and directions.
122.
▲
by
vsgherzi
8mo ago
right but these differ drastically, one is writing perfect code which is quite difficult the other is opting not to take a dependency. One is much more realistic. I agree on software quality going down, I'm looking very closely at foun
123.
▲
by
vsgherzi
8mo ago
But the thing is these DO get exploited in the wild we see that again and again in high value targets like operating systems. That's why apple and google go to such high extremes to work in things like bounds checking. ROP JOB chains h
124.
▲
by
vsgherzi
8mo ago
I'm sympathetic to the supply chain problem I even wrote a whole thing on it https://vincents.dev/blog/rust-dependencies-scare-me/ That being said as many above have pointed out you can choose not to bring in
125.
▲
by
vsgherzi
9mo ago
Sort of. From my understanding they’ve been heavily using clang with fbounds checks to insert checks into functions. I think there was work done to try to insert them into existing code as well. They memory tagging in new processors help av
126.
▲
by
vsgherzi
9mo ago
Noted, perhaps I'll investigate as a possible next career step. Thanks!
127.
▲
by
vsgherzi
9mo ago
I doubt it, I feel like it might improve shops that already care and are already creating with rigor. I don't think it'll raise the bar for the avg shop. However, perhaps that's just be being cynical. By real time embedded is
128.
▲
by
vsgherzi
9mo ago
I'm in the same boat, I'm hoping firmware / embedded might be better in this regard due to the inherit constraints. If not then EE is probably the only other option. Anyone else have thoughts on this? I'm craving a more
129.
▲
by
vsgherzi
9mo ago
This is really something that’s making me quite fed up with industry. I’m looking towards embedded and firmware in hopes that the lower in the stack I go the more people care about these type of things out of business necessity. But even th
130.
▲
by
vsgherzi
9mo ago
Wouldn’t the idea be to not have the uaf to begin with? I’d argue it saves you very much by making the uaf way harder to write. Forcing unsafe and such.
131.
▲
by
vsgherzi
9mo ago
the point I was trying to make is that the creation of the sr71 was a physics defying problem and something considered nigh impossible. A passenger plane has much less complex expectations. Now don't take this to meant none at all, of
132.
▲
by
vsgherzi
9mo ago
Much less complex? I'm not sure about that for a plane that's expected to travel so fast. In terms of features I'm sure modern passenger planes have quite a bit more. I'm sure planes are absolutely safer now, the point I
133.
▲
by
vsgherzi
9mo ago
Insane that we can have places like the skunk works create the sr71 and operate on shoe string budgets but the largest passenger plane company in the world can’t accurately assess risk on planes far under the former planes Mach 3 record
134.
▲
by
vsgherzi
9mo ago
https://vincents.dev/ popular entries https://vincents.dev/blog/rust-errors-without-dependencies/ https://vincents.dev/blog/rust-dependencies-scare-me/
135.
▲
Misadventures in Dtrace with macOS
(jade.fyi)
1 points
by
vsgherzi
10mo ago
|
0 comments
136.
▲
by
vsgherzi
10mo ago
This particular one is just how I decided to take context. You could easily keep the original error type and add context onto the struct as an additional field. Or an alternative could be to take a string and the error type. The I’m using s
137.
▲
by
vsgherzi
10mo ago
The entire blog shows that you don’t need that… sushi showed the same thing in 1.0 Go dosent deviate from the norm. It’s the same style we’ve had back from the billion dollar mistake. Not saying it’s wrong rust’s is just different. Tradeoff
138.
▲
by
vsgherzi
10mo ago
Nodejs and rust are the languages that I’m most familiar. I mostly mean that part to serve as a contrasting paragraph between the two paradigms. The amount of code is high in rust, even higher due to me writing the most pedantic error possi
139.
▲
by
vsgherzi
10mo ago
I do think it’s just a newness issue and the community is still deciding what’s right
140.
▲
by
vsgherzi
10mo ago
It is, this is the most verbose way of doing it, it can easily be made smaller. The main reason is rust exposes this where other languages tend to hide it so programmers aren’t used to having so much code on error cases. Just my opinion of
141.
▲
by
vsgherzi
10mo ago
I’d rather have cargo than not. Dependencies are opt in you don’t have to use them, which is what I’m trying to demonstrate here. The chrome team only uses what they need. Now the culture as a whole in rust in always that way but I believe
142.
▲
by
vsgherzi
10mo ago
Anyhow itself is still a dependency. This is more something I wanted to do and not something I recommend for everyone. Google took a similar approach in how they added rust for chrome. They don’t use an error handling library.
143.
▲
Rust errors without dependencies
(vincents.dev)
59 points
by
vsgherzi
10mo ago
|
88 comments
144.
▲
by
vsgherzi
10mo ago
The point he’s trying to make it’s that it’s become a default like react has. People pick things because they’re the default not because they’re the right tool for the job. Of course there’s less nuance in the article but I think there is s
145.
▲
by
vsgherzi
10mo ago
https://oxide-and-friends.transistor.fm/episodes/mr-nagles-w... oxide and friends episode on it! It's quite good
146.
▲
by
vsgherzi
10mo ago
I listened the wrap up episode… I didn’t realize it was a different bug …
147.
▲
by
vsgherzi
10mo ago
Not relevant? That’s the best part! Spill it!
148.
▲
by
vsgherzi
10mo ago
the linked issues are quite interesting, why does go have to page in so much memory for the GoString? Is this for some sort of optimization? https://github.com/mullvad/mullvadvpn-app/pull/6727 if anyone else
149.
▲
by
vsgherzi
10mo ago
last I heard for the private compute features they were racking and stacking m2 mac pros
150.
▲
Apple locks account after redeeming gift card
(daringfireball.net)
9 points
by
vsgherzi
11mo ago
|
3 comments
More ›