vsgherzi

20 ms·

151.
by vsgherzi 11mo ago
Listening to the podcast episode on this was incredible. It’s shocking to me that hardware manuals can be inaccurate. I thought only software devs could write bad docs. /s
152.
Rust 2027 considering replacing poisoned locks(github.com)
2 points by vsgherzi 11mo ago|0 comments
153.
by vsgherzi 11mo ago
I'm in a similar boat, at the very leas an expect can give hits to what happened. However this can also be problematic if your a library developer. Sometimes rust is expected to never panic especially in situations like WASM. This is a
154.
by vsgherzi 11mo ago
Why does cloudflare allow unwraps in their code? I would've assumed they'd have clippy lints stopping that sort of thing. Why not just match with { ok(value) => {}, Err(error) => {} } the function already has a Result type.
155.
by vsgherzi 11mo ago
mind sharing a link?
156.
by vsgherzi 11mo ago
would you get backtraces with this implementation? I've been increasingly frustrated with axum. It hits my custom error where I print something like "sqlx database failed" but when there's lots of traffic it's hard
157.
by vsgherzi 1y ago
I disagree, as software engineers we owe it to the craft to create correct software especially when we intend to distribute. Anything less is poor taste. You bring up licensing. I’m not talking about legally I’m talking about a social contr
158.
by vsgherzi 1y ago
Why is there an onus on Google to fix this? Bug bounty hunters aren’t required to submit a patch even when the target is open source. Now should Google? Probably, it would be nice but no one has to. The gift from Google is the discovery of
159.
by vsgherzi 1y ago
It doesn’t matter if it affects their business or not. They found an issue and they reported it. Ffmpeg could request that they report it privately perhaps. Google has a moral duty to report the bug. Software should be correct and secure. O
160.
by vsgherzi 1y ago
I understand ffmpeg being angry at the workload but this is how it is with large open source projects. Ffmpeg has no obligation to fix any of this. Open source is a gift and is provided as is. If Google demanded a fix I could see this being
161.
by vsgherzi 1y ago
Hm does this mean Triangulation is an NSA creation or are they just using it?
162.
by vsgherzi 1y ago
gotcha that makes sense, thanks for sharing! Impressed that you were eventually able to make a full ebpf router to stand in for the DPDK one, might have to look into it as a serious alternative for me. Differences between tuning and hardwar
163.
by vsgherzi 1y ago
Oh wow interesting, so the rewrite only went 1/2 as fast? I know cloudflare uses ebpf quite heavy whereas the Great Firewall uses DPDK. I wonder if cloudflare's motivation is just to run it easier on GCP. Any cloudflare employee&#
164.
by vsgherzi 1y ago
Location: California Remote: No Willing to relocate: yes Technologies: Rust, NodeJS Resume/CV: 4+ years experience as a fullstack and systems developer with a specialty in rust and nodejs Email: sgherzivincent@gmail.com blog: https:&#
165.
by vsgherzi 1y ago
Anywhere I could read more about the DMA attacks?
166.
Tarmageddon: RCE vulnerability highlights challenges of open source abandonware(edera.dev)
98 points by vsgherzi 1y ago|57 comments
167.
by vsgherzi 1y ago
No has seemed to call it out yet but swift uses a form of garbage collection but remains relatively fast. I was against this at first but the more I think about it, I think it has real potential to make lots of hard problems with ownership
168.
by vsgherzi 1y ago
It's strange to me that others push the unsafe keyword as an "I told you so". Perhaps it's just the way rust presents it. Most rustacians I follow agree that Rust's power is turning unsafe things into safe wrappers
169.
by vsgherzi 1y ago
The problem is definitely real, I'd hope that as the ecosystem matures we come to better solutions. Microsoft and google are pretty heavily invested these days so I'd expect they'd be able to provide some clarity here. I thin
170.
by vsgherzi 1y ago
This is a problem I'm pretty invested in so let's take a look. If we add the list of dependencies from the modules this is what we get anyhow = "1.0.98" base64 = "0.22.1" bytes = "1.10.1" constcat = &
171.
by vsgherzi 1y ago
Unsafe rust still enforces many of rust's rules. The only powers you get with unsafe rust are de-refrencing raw pointers, calling unsafe traits / functions, and the ability to access or modify mutable statics. You can read more ab
172.
by vsgherzi 1y ago
Block the UK. Ridiculous behavior.
173.
by vsgherzi 1y ago
They're just moving fast and breaking things 100x faster. Who cares what code does just vibe it all away /s
174.
by vsgherzi 1y ago
Cool blog but a little concerned. I’ve never had to write anything this complex and multithreaded before but I would have thought that rust would guard against something like this better… isn’t fearless concurrency the tag line
175.
SIMD in zlib-rs part 2(tweedegolf.nl)
2 points by vsgherzi 1y ago|0 comments
176.
by vsgherzi 1y ago
author here, thanks for reading and all of your thoughts! Here's another older HN thread with some interesting comments. https://news.ycombinator.com/item?id=43930640
177.
by vsgherzi 1y ago
Because I want my mind to be changed. I see orgs and companies I respect doing things differently than me but I don't understand why. I want to use this language, I want to use this ecosystem so I'm trying to get others who disagr
178.
by vsgherzi 1y ago
Thank for the reply! I see, I guess I have alot more to think about ...
179.
by vsgherzi 1y ago
I get that. In general for something like a production server in cpp versus rust do you think the rust version is going to just have more lines of code associated with it or is it just the way I'm thinking about it? I love the Oxide po
180.
by vsgherzi 1y ago
Hi Steve! Big fan! Folks on Bluesky just pointed me in the same direction. Looks like it has potential.

More ›