Readit News logoReadit News
eeZah7Ux commented on Rust CLI with Clap   tucson-josh.com/posts/rus... · Posted by u/rajman187
kstrauser · 8 months ago
I can write and have written hand-tuned assembly when every byte is sacred. That’s valuable in the right context. But that’s not the common case. In most situations, I’d rather spend those resources on code ergonomics, a flexible and heavily documented command line, and a widely used standard that other devs know how to use and contribute to.

And by proportion, that library would add an extra .7 bytes to a Commodore 64 program. I would have cheerfully “wasted” that much space for something 100th as nice as Clap.

I’ve worked in big organizations and been the one responsible for tracking dependencies, their licenses, and their vulnerable versions. No one does that by hand after a certain size. Snyk is as happy to track 1000 dependencies as 10.

eeZah7Ux · 8 months ago
> No one does that by hand after a certain size

This is not true

eeZah7Ux commented on Rust CLI with Clap   tucson-josh.com/posts/rus... · Posted by u/rajman187
dietr1ch · 8 months ago
If all the code was crammed into the std library it'd be fine?

Functions need to build on top of simpler functions to be able to abstract problems and tackle them one at a time. There's innate complexity around and without trying to tame it into smaller functions/packages it seems you'll end up in a worse spot.

eeZah7Ux · 8 months ago
Yes, having a good std library would be fine. It would really limit the proliferation of crates.
eeZah7Ux commented on Ask HN: What Are You Working On? (June 2025)    · Posted by u/david927
cjflog · 8 months ago
Currently a one-man side project:

https://laboratory.love

Last year PlasticList discovered that 86% of food products they tested contain plastic chemicals—including 100% of baby food tested. The EU just lowered their "safe" BPA limit by 20,000x. Meanwhile, the FDA allows levels 100x higher than what Europe considers safe.

This seemed like a solvable problem.

Laboratory.love lets you crowdfund independent testing of specific products you actually buy. Think Consumer Reports meets Kickstarter, but focused on detecting endocrine disruptors in your yogurt, your kid's snacks, whatever you're curious about.

Here's how it works: Find a product (or suggest one), contribute to its testing fund, get detailed lab results when testing completes. If a product doesn't reach its funding goal within 365 days, automatic refund. All results are published openly. Laboratory.love uses the same methodology as PlasticList.org, which found plastic chemicals in everything from prenatal vitamins to ice cream. But instead of researchers choosing what to test, you do.

The bigger picture: Companies respond to market pressure. Transparency creates that pressure. When consumers have data, supply chains get cleaner.

Technical details: Laboratory.love works with ISO 17025-accredited labs, test three samples from different production lots, detect chemicals down to parts per billion. The testing protocol is public.

You can browse products, add your own, or just follow specific items you're curious about: https://laboratory.love

eeZah7Ux · 8 months ago
> the FDA allows levels 100x higher than what Europe considers safe

I thought it was an exaggeration so I checked. It's actually even worse:

EU is 0.2 ng/kg body weight and US is 50 µg/kg body weight. So the US limit is 250,000 times higher.

eeZah7Ux commented on Why is the Rust compiler so slow?   sharnoff.io/blog/why-rust... · Posted by u/Bogdanp
hu3 · 8 months ago
From the article, the goal was not to simplify, but rather to modernize:

> So instead, I'd like to switch to deploying my website with containers (be it Docker, Kubernetes, or otherwise), matching the vast majority of software deployed any time in the last decade.

Containers offer many benefits. To name some: process isolation, increased security, standardized logging and mature horizontal scalability.

eeZah7Ux · 8 months ago
> process isolation, increased security

no, that's sandboxing.

eeZah7Ux commented on Lyon Drops Microsoft to Boost Digital Sovereignty   digitrendz.blog/newswire/... · Posted by u/hermanzegerman
sigmoid10 · 9 months ago
Munich switched to Linux in 2012. But they switched back to Microsoft in 2020 because they never could get it to work completely. At least not to the level of comfort in the old system. Open source has its advantages, but MS dominates the business world because of its tech support that is truly second to none on that scale. If Europe wants independence, they need to support local businesses and not just technology.
eeZah7Ux · 9 months ago
The reason is bribery.
eeZah7Ux commented on Desktop Linux Hardening (2022)   privsec.dev/posts/linux/d... · Posted by u/pabs3
kramerger · 3 years ago
> do not run random net stuff (like scripts, “Git” etc.)

Man, half of the cool tools want me to do this

   curl cool-company.io | sh

eeZah7Ux · 3 years ago
Stay away from them.
eeZah7Ux commented on Endocrine-disrupting chemical exposure in womb impact fear, anxiety behavior   neurosciencenews.com/chem... · Posted by u/vitabenes
hollerith · 4 years ago
Because reality wouldn't be so perverse as to have multiple endocrine disrupters.
eeZah7Ux · 4 years ago
> greater LGBTQ+ acceptance recently has led to people being more open with that side of themselves, rather than it being the result of environmental pollution

That's a very weird implication. All human beings are complex products of social, economical, genetic, environmental and historical factors.

External factors do not make a person "less themselves" or "less real".

eeZah7Ux commented on Grafana releases OnCall open source project   grafana.com/blog/2022/06/... · Posted by u/netingle
morelisp · 4 years ago
At this point I trust the Go modules supply chain considerably more than any free distro's packaging, which is ultimately pulling from GitHub anyway.
eeZah7Ux · 4 years ago
This is plain false. Most production-grade distribution do extensive vetting of the packages, both in terms of code and legal.

Additionally, distribution packages are tested by a significant number of users before the release.

Nothing of this sort happens around any language-specific package manager. You just get whatever happens to be around all software forges.

Unsurprisingly, there has been many serious supply chain attacks in the last 5 years. None of which affected the usual big distros.

eeZah7Ux commented on Grafana releases OnCall open source project   grafana.com/blog/2022/06/... · Posted by u/netingle
nojito · 4 years ago
GPL and its variants are a no go where I work.
eeZah7Ux · 4 years ago
Then the problem is in the company and not in the license.
eeZah7Ux commented on Grafana releases OnCall open source project   grafana.com/blog/2022/06/... · Posted by u/netingle
MarquesMa · 4 years ago
This. I find open source projects written in Go or Rust are usually more pleasant to work with than Java, Django or Rails, etc. They have less clunky dependencies, are less resource-hungry, and can ship with single executables which make people's life much easier.

Just think about Gitea vs GitLab.

eeZah7Ux · 4 years ago
Hell no, I want stuff like OnCall packaged into Linux distribution. I need something stable and reliable and that receive security fixes.

Maintaining tenths of binaries pulled from random github projects over the years is a nightmare.

(Not to mention all the issues around supply chain management, licensing issues, homecalling and so on)

u/eeZah7Ux

KarmaCake day2044July 17, 2016View Original