rkerno (u/rkerno) - Readit News

rkerno commented on Golang's big miss on memory arenas avittig.medium.com/golang... · Posted by u/andr3wV

rkerno · 4 days ago

I think the overall sentiment with this post is sound, but arenas aren't the answer to Go's performance challenges. From my perspective, possibly in an effort to keep the language simple, Go's designers didn't care about performance. 'let the GC handle it' was the philosophy and as a result you see poor design choices all the way through the standard library. And the abstracting everything through interfaces then compounds the issue because the escape compiler can't see through the interface. The standard library is just riddled with unnecessary allocations. Just look at the JSON parser for instance and the recent work to improve it.

There is some interesting proposals on short term allocations, being able to specify that a local allocation will not leak.

Most recently, I've been fighting with the ChaCha20-Poly1305 implementation because someone in their 'wisdom' added a requirement for contiguous memory for the implementation, including extra space for a tag. Both ChaCha20 and Poly1305 are streaming algorithms, but the go authors decide 'you cannot be trusted' - here's a safe one-shot interface for you to use.

Go really needs a complete overhaul of their Standard Library to fix this, but I can't see this ever getting traction due to the focus on not breaking anything.

Go really is a great language, but should include performance / minimise the GC burden as a key design consideration for it's APIs.

rkerno commented on Vibe Code Warning – A personal casestudy github.com/jackdoe/pico2-... · Posted by u/jackdoe

rkerno · a month ago

I personally find AI generated code to be pretty average. I might get AI to write a function, then rework it. I use it a lot for reviews, which helps. And also as a sounding board for research - this is by far the most valuable use case, saves a ton of time. Or get it to write tests similar to what you have, just tell it what you want tested, and get it to suggest.

I definitely don't trust the code it writes, especially for anything remotely complicated.

rkerno commented on Google spoofed via DKIM replay attack: A technical breakdown easydmarc.com/blog/google... · Posted by u/frasermarlow

rkerno · 5 months ago

This to me just appears to demonstrate what a house of cards email security really is....surely with the collective brains on this forum we can come up with an alternative that solves all of this. And surely Google needs to serve these sites under a different domain name....why aren't these sites published under something like 'hostedbygoogle.com'?

rkerno commented on Query Engines: Push vs. Pull (2021) justinjaffray.com/query-e... · Posted by u/tanelpoder

rkerno · 8 months ago

It's pretty easy in a push based model to let the 'pusher' know that no more data is required. It's just like unsubscribing from an event, or returning a 'no more' status from the callback. The push model does feel more natural to me, but perhaps that comes from familiarity with linux piping.

rkerno commented on Rails for everything literallythevoid.com/blog... · Posted by u/FigurativeVoid

jchw · a year ago

Don't really know much about Rails because I wound up picking Django instead when faced with the choice many years ago. That said, honestly, my perspective of Ruby on Rails has been tainted by watching GitLab get pwned over and over and over. My distro can barely keep up with GitLab being pwned because by the time the security release hits stable channels there's already another CVE. I liked GitLab, but something is deeply wrong.

Of course clearly not all apps are GitLab, but GitLab is the only Rails app I run, and must be one of the most problematic software I've ever deployed for security patching, and most of it seems to do with issues in the Ruby side of things. What makes GitLab so uniquely crap at security, and how do you avoid it as a Rails developer?

rkerno · a year ago

Gotta say, this comment is spot on. I had a small peek under the covers when another of the major severity issues surfaced and the conclusion reached is that the software is fragile as f*k. I'll be migrating as soon as I have some spare cycles. Still no conclusion as to whether Rails, Ruby or GitLab is the major contributor, but the result is awefull.

rkerno commented on Borgo Programming Language borgo-lang.github.io/... · Posted by u/MrBuddyCasino

jitl · a year ago

I don't work on the language, but I think building a compiler in Go (or C) is a pain in the ass compared to using a language that has discriminated union types, and based on the aesthetics of the language, the authors probably agree with me. The language is styled enough like Rust to make it seem like this is for "rust people" more than "Go people" anyways – I think if this was targeting Go people, it would use the native Go syntax for things like import (here replaced with "use") and adding methods, here replaced with "impl ..."

rkerno · a year ago

There might be an audience for disillusioned rust people who get bored with fighting the borrow checker etc, but true rust developers, like c++ devs want control and won't want to hand that to go's runtime.

My guess from the readme is that the author loves some of the rust features and syntax but the simplicity of having the go language and runtime take care of making it work is just too compelling. As far as the language itself, there's nothing here that you couldn't build with go and it would likely be more productive.

rkerno commented on Borgo Programming Language borgo-lang.github.io/... · Posted by u/MrBuddyCasino

rkerno · a year ago

If you're targeting Go to cross-compile to, why would you build the language in Rust? Keeping to the go tool chain would reduce a lot of friction for those who are using go already, which I presume is a significant chunk of your target audience.

rkerno commented on Scripts should be written using the project main language joaomagfreitas.link/scrip... · Posted by u/freitzzz

rkerno · 2 years ago

Really interesting comments here. I haven't found an appealing option for scripts and CI ( I think I am allergic to yaml ), bash is just way too fragile. So I've decided to write my own scripting language that is written in Go, similar in many ways to Lua, but with first class support for executing other commands, running API tests, and manipulating data. Currently dogfooding with plans to share in a few months once I'm confident it's good to start getting feedback. So, one executable plus your scripts, cross platform, no yaml.

rkerno commented on The Linux graphics stack in a nutshell, part 2 lwn.net/SubscriberLink/95... · Posted by u/zorgmonkey

rkerno · 2 years ago

Am I the only one who finds it ironic that this is Part 2 of an 'in a nutshell' document?

rkerno commented on Building a faster hash table for high performance SQL joins questdb.io/blog/building-... · Posted by u/nhourcard

rkerno · 2 years ago

Hi, I'm curious how you deal with the potential for hash collisions across a large data set - is that a post-join check?