Readit News logoReadit News
Manishearth commented on Memory Safe Languages in Android 13   security.googleblog.com/2... · Posted by u/brundolf
goodpoint · 3 years ago
Not only that, they are also comparing new code with pretty old code.
Manishearth · 3 years ago
They're also explicitly tracking new code by language, and talking about memory safety vulnerabilities per year, and they also link to [1] which talks about how most memory safety bugs they get are in new code.

Most of the graphs here are about new code.

[1]: https://security.googleblog.com/2021/04/rust-in-android-plat...

Manishearth commented on Memory Safe Languages in Android 13   security.googleblog.com/2... · Posted by u/brundolf
heather45879 · 3 years ago
The problem with Rust is the language syntax is ugly. It has a ton of visual noise.

I think folks who write languages should have a typographer on their team because something like this:

use std::collections::HashMap

Is a typographic nightmare. While I understand “form follows function”, it’s tough to be excited to program in something like this.

Manishearth · 3 years ago
I always say that if the strongest complaint people have about your language is syntax; you've already succeeded.
Manishearth commented on So Zero It's Negative? (Zero-Copy #3)   manishearth.github.io/blo... · Posted by u/notriddle
sdwr · 3 years ago
Thanks for replying!

If I understand correctly, GATs are about being able to change compiler assumptions about data types in user code? Generics acting on the compiler?

How is that helpful? Is it that you're trying to skip all the language boilerplate around creating objects? Are there any risks/footguns to that approach?

Generic type-driven code makes my head hurt, let me know if I'm somewhat close

Manishearth · 3 years ago
I don't understand your question.

GATs allow traits to abstract over associated types that are themselves to some degree abstract. In this case, it's necessary to do the relevant trait machinery around lifetime transformation since we need to be able to talk about "a replaceable lifetime of a type" in a generic way.

Manishearth commented on So Zero It's Negative? (Zero-Copy #3)   manishearth.github.io/blo... · Posted by u/notriddle
sdwr · 3 years ago
Looks like a useful tool for the toolbox, although the class names in pt2 can go die in a pit. Do you know of anything similar on the JS side?

What are the compiler bugs you ran into? I'm no compiler expert, but my suspicion is that they were more feature requests than anything else, considering you're working in a "here be dragons" area of the map.

Manishearth · 3 years ago
(the person who posted the article here isn't the author (me))

The bugs in part 1 all around using higher ranked trait bounds. I'd disagree with the characterization that they're "feature requests": five years ago, yes, I would agree, but this entire area of the compiler needs to be bug-free for an upcoming feature (GATs) anyway, and indeed, the issues I found were often fixed by people working on fixing related GAT bugs. Ultimately, my use of higher ranked trait bounds is an attempt to emulate some of what GATs get you in stable Rust, so it's not surprising that the bugs are in the same area of the code.

Manishearth commented on Things I wish someone told me about getting a promotion   radhika.dev/mid/... · Posted by u/_ttg
hansor · 4 years ago
>You will never get a promotion or raise if there's no formal performance review process and career ladder.

That is total BS. I had promotion multiple times just because business owner liked me and valued my work.

>You have to be performing at the next level for several months

Total BS too. Maybe in India.

> VISIBILITY

This one is not BS! I have seen many many developers without any rise - just because they do not attend any meetings, they look like bumps(no suits!), and those who do not talk much with their own boss or boss above...

When I manage to do something BIG - i make sure that my boss, his boss, and boss above KNOWS that we tried hard and delivered. It's not a shame to brag about real accomplishments :)

In that way I received 32% pay-rise in past 2 years.

Manishearth · 4 years ago
> Total BS too. Maybe in India.

This has been the case at both my current and previous (American tech) jobs.

And it's pretty racist to assume that a person is working or has worked in India just because they have an Indian name.

Manishearth commented on Why AWS loves Rust, and how we’d like to help   aws.amazon.com/blogs/open... · Posted by u/carllerche
nicoburns · 5 years ago
Sure, but from my perspective (you probably had better insight into these companies involvement than me) there was always a question about how committed companies this large really are when they only have a few projects in the language. Hiring core developers puts all doubts to bed (and also the kind of investment that actually for counts for something).
Manishearth · 5 years ago
I think most of these companies have had a pretty large investment, they're just not really open about it in many cases. So yeah, it's a pretty visible signal, but the investments they had already were much larger ones. A team of core developers is a pretty small investment compared to having a ton of teams all over the place, which most of them had already.

Deleted Comment

Manishearth commented on Servo’s new home   blog.servo.org/2020/11/17... · Posted by u/g0xA52A2A
sweetlucipher · 5 years ago
Is WebGPU part of Servo? I know the guys at Mozilla were developing WebGPU API in Rust. Looking to see where it's going (I assume Firefox has to use it too. Chrome already has experimental support)

Any idea?

Manishearth · 5 years ago
The wgpu crate is being developed by Firefox engineers for Firefox. As lastontheboat said we had a student integrate it into Servo this year.
Manishearth commented on Servo’s new home   blog.servo.org/2020/11/17... · Posted by u/g0xA52A2A
the_other · 5 years ago
On the face of it, this sounds great! I hope it leads to bold new things.

It also produces an interesting coherence:

Google + MS -> Blink

Apple -> Webkit

Linux -> Servo

All the main OSs now have their own web rendering engine.

The 00s saw anti-trust against MS for this practice (ok, for the rigid way MS forced their engine onto their users)... but today the market has coalesced around the same core idea, cementing the notion that general purpose OSs need a web rendering engine.

Might this pave the way for a better cross-platform UI development? Rather than shipping Electron to every device for every app, apps might leverage the web renderer tied to the OS?

I'm just wondering out loud. I was actually hoping we'd collectively move back towards native apps with better cross-platform tools, rather than integrating web apps deeper into OSs (even tho' I'm a web developer by trade and stand to gain from this).

Manishearth · 5 years ago
The Linux Foundation is basically a catch-all foundation for smaller open source projects, this is not "Linux owns a browser engine".

The "Linux" there is more of an indicator of its origins than its purpose.

Manishearth commented on Servo’s new home   blog.servo.org/2020/11/17... · Posted by u/g0xA52A2A
wmf · 5 years ago
Is anyone paying Servo developers now? This is the real issue.
Manishearth · 5 years ago
Many of us are looking for (or have found) dayjobs, but it's possible some folks may be open to contracting work on servo/etc. But nobody is being paid to work on servo right now.

u/Manishearth

KarmaCake day9674January 21, 2013
About
Rust Core Team, ex-Servo at Mozilla

https://manishearth.github.io

View Original