Readit News logoReadit News
smitherfield commented on Replacements for existing software written in Rust   github.com/TaKO8Ki/awesom... · Posted by u/prabir
singhrac · 5 years ago
I mostly agree with this sentiment but I think it's not that necessary to point out. Yes, some of these are abandonware but many are written by the same set of strong Rust programmers. I think you'd be hard pressed to argue that ripgrep or fd is not a valuable contribution to the OSS ecosystem.

The more interesting question is - why is that? Sure, Rust is memory safe, but I suspect the real reason people built high quality software in Rust is because cargo is good and because minimizing copies is part of the culture around the language. This means that libraries are cheap to use, and as a result programming feels productive, because you don't have a reason to reinvent the wheel (see arrays in C, or various Boost libraries that have been moved into stdlib C++). For example, compare the cost of Python's click to Rust's clap. Or look at serde.

I find it more interesting to ask the question "why do people spend so much hobby time writing interesting programs in Rust?".

smitherfield · 5 years ago
> because you don't have a reason to reinvent the wheel [in Rust]

This is a somewhat comical statement in a thread about "Rewrite it in Rust."

smitherfield commented on Preparing Rustls for Wider Adoption   abetterinternet.org/post/... · Posted by u/jaas
staticassertion · 5 years ago
Sure, but there's no evidence of that.
smitherfield · 5 years ago
No evidence? We know for a fact that US, Russian, Chinese, British, Israeli etc. intelligence agencies are looking for crypto vulnerabilities, and we know for a fact that they do not publicize the vulnerabilities they find.
smitherfield commented on Preparing Rustls for Wider Adoption   abetterinternet.org/post/... · Posted by u/jaas
staticassertion · 5 years ago
> It's a slight improvement at best.

That's a hefty judgment. If we look at major attacks on TLS endpoints I'd summarize them as, in order,:

1. Memory safety

2. Weak / old configurations

3. Invalid state machine transitions

Rustls addresses all 3 of those, or at least it attempts to. (1) is obvious - it's rust. (2) rustls only supports the subset of TLS versions that are considered safe. (3) rustls avoids issues like gotofail and smacktls by encoding state machines as types, turning invalid state transitions into type failures.

Plus, the actual crypto primitives are extremely well tested and built off of other existing libraries.

So yeah, maybe some aspect of the crypto is incorrect, but, while interesting from an academic perspective, the real world ranks those other 3 things as way more important.

smitherfield · 5 years ago
That's if you look at major PUBLICIZED attacks on TLS endpoints. It's quite plausible that the people who've found (i.e. are looking for) attacks based on incorrect crypto aren't publicizing them.
smitherfield commented on We need to know the origin of Covid-19   desmoinesregister.com/sto... · Posted by u/RickJWagner
true_religion · 5 years ago
This may or may not be true, but its the same sort of reasoning that was used to justify the Iraq War and we all know how that turned out.

Before the war, Saddam was acting unquestionable suspect by not allowing inspectors free access to locations and constantly moving material and persons around. In truth, it was a presence. A chemical weapons program was expensive, and hard to keep safely hidden so Saddam simply pretended that it existed by acting like he had something to hide.

As for China, it could be something as simple as regional managers hiding poor response times and safety violations that would have their heads rolling. It doesn't mean that there was a leak intentionally or unintentionally.

Disclaimer: I'm playing the devil's advocate here. Having a corona virus outbreak in the same city as your military installation studying corona virus is suspect.

smitherfield · 5 years ago
But it wasn't an adverse inference in that case, at least not from Saddam's perspective. He wanted the world to believe he had WMDs, because he believed, not unreasonably (c.f. North Korea), that this would deter military action by the U.S. and his other enemies (Iran, Syria, Israel, Saudi Arabia).
smitherfield commented on Walter Mondale has died   nytimes.com/2021/04/19/us... · Posted by u/FillardMillmore
smitherfield · 5 years ago
Mondale proposed some interesting ideas during his Presidential campaign, in particular a national industrial policy, that I think we would have done well to take heed of.
smitherfield commented on We need to know the origin of Covid-19   desmoinesregister.com/sto... · Posted by u/RickJWagner
FpUser · 5 years ago
>"...If one of the parties to a lawsuit conceals or destroys important evidence..."

Then how do you treat this Anthrax archive destruction done with the blessing from FBI? https://en.wikipedia.org/wiki/2001_anthrax_attacks

smitherfield · 5 years ago
I would (and do) consider it very suspicious.
smitherfield commented on We need to know the origin of Covid-19   desmoinesregister.com/sto... · Posted by u/RickJWagner
koheripbal · 5 years ago
"If you were innocent, you would let us search your home."

There is a very fine line between destroying evidence, and refusing an investigation.

...and, don't get me wrong - I believe it's entirely possible that covid-19 escaped from the Wuhan Lab - but a refusal to be party to a politically charged investigation should not infer guilt.

Your rational is similar to assuming someone is guilty because they refuse to answer police questions.

smitherfield · 5 years ago
This is more like if the police come to search your house, and find that you've burned it down, or you've barricaded yourself inside with guns and hostages.

But, let's assume for the sake of argument that your analogy is the correct one. You know where they assume that if you don't let the police search your house, or if you don't answer police questions, you must be guilty? China.

So, we can just as easily judge the Chinese government by another heuristic: The Golden Rule

smitherfield commented on We need to know the origin of Covid-19   desmoinesregister.com/sto... · Posted by u/RickJWagner
smitherfield · 5 years ago
I think a useful concept with this is the legal doctrine of adverse inference.[1] If one of the parties to a lawsuit conceals or destroys important evidence, it is assumed that that evidence would have been unfavorable to the party which concealed or destroyed it.

So, while we may not be able to know for sure how COVID-19 originated, we can certainly draw an adverse inference from the behavior of the Chinese government.

[1] https://en.wikipedia.org/wiki/Adverse_inference

smitherfield commented on Chrome 77 Breaking Drag and Drop Events   bugs.chromium.org/p/chrom... · Posted by u/ardenpm
mpol · 6 years ago
"Doing an IE6" for Google would be quite different from what Microsoft did, who wanted the desktop to stay relevant. For Google the web is just an advertisement platform. If/When Firefix is gone, they will hold all the cards. "Doing an IE6" might mean removing support for ad-blockers. Or making Google DNS mandatory. Or have everything you do on the web be phoned to Google, to improve your advertising experience. Assume they will find creative ways to monetize the web, ways that we didn't even think of yet. If you thought the web in 2019 was bad, beware of the Google Future.
smitherfield · 6 years ago
"Or have everything you do on the web be phoned to Google, to improve your advertising experience."

Chrome already does this.

smitherfield commented on Makefiles – Best Practices   danyspin97.org/blog/makef... · Posted by u/lelf
aaaaaaaaaaab · 7 years ago

    CFLAGS := ${CFLAGS}
    CFLAGS += -ansi -std=99
What's the point of the first line? Why not just:

    CFLAGS += -ansi -std=99

smitherfield · 7 years ago
Speaking of, why both -ansi and -std=99 [sic[1]]?

[1] should be -std=c99

u/smitherfield

KarmaCake day1770March 26, 2015View Original