Posts by yosh@toot.yosh.is
 (DIR) Post #B47UAEbHt6C4VvsWpc by yosh@toot.yosh.is
       0 likes, 1 repeats
       
       @NanoRaptor 1024 grams would be a "kibigram" I think. I really wish us computer folk would start consistently using the right prefixes for binary units because 💯 we should be doing better.
       
 (DIR) Post #B47UAFTWdRZxE9FqN6 by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       New blog post: a grand vision for Rusthttps://blog.yoshuawuyts.com/a-grand-vision-for-rust/A short post in which I try to articulate why I work on the things that I do in Rust. Spoiler: because I think it’s fun. But also because I want to make Rust an even safer language.
       
 (DIR) Post #B4UJWk6CpJv3iSwslM by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       @TechConnectify it's a good video!
       
 (DIR) Post #B57q3GxOyIIaaWp5vs by yosh@toot.yosh.is
       1 likes, 0 repeats
       
       Big new Wasmtime security release today - 11 new CVEs found including 2 critical ones using LLMs.https://bytecodealliance.org/articles/wasmtime-security-advisoriesIf LLMs can find this many critical bugs in a project that is as rigorous about security as Wasmtime, then get ready for projects with weaker security postures to do a lot worse. Like,,, actually.
       
 (DIR) Post #B57q3HNzNRZ9uzGKNE by yosh@toot.yosh.is
       1 likes, 0 repeats
       
       Like, you have to realize that Wasmtime is like if a group of fuzzing fanatics decided to start a group project. It implements a formally verified instruction set. Heck, parts of wasmtime itself are formally verified.However good you think your safety and correctness practices are, Wasmtime's are going to be better. This isn't just a toy either: it's a production-grade project used in tons of places.If LLMs can find 11 new CVEs in *that* - yeah it's legit, and I don't think we're ready.
       
 (DIR) Post #B57xp38sKzhxJxv1oO by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       @neauoire This also reminds me of https://f.duriansoftware.com/@joe/116366549257239624The only pushback I'd provide is that I think it's less "the people have chosen" and more "capital has chosen". We're here only because hundreds of billions have been sunk into this.
       
 (DIR) Post #B5BZqsjcNleHM3Hko4 by yosh@toot.yosh.is
       0 likes, 1 repeats
       
       I've been seeing a lot of posts in the past two days along the lines of: "Oh those bugs LLMs have found, well a fuzzer would have found them."I don't like that LLMs are able to find bugs. But *obviously* these things will find the lowest hanging fruit first. But that doesn't mean that they can do some real damage on projects that are written in memory safe languages and fuzzed 24/7 either. Exhibit A:https://toot.yosh.is/@yosh/116376054778890780
       
 (DIR) Post #B5BZr1linJg9NBL3po by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       I don't like what is happening here. The idea that anyone with a credit card can start farming 0-days is not something I enjoy. But just because I don't like it doesn't mean I'm going to deny it.I'd love to see people try and make the argument that the folks working on Wasmtime don't know what they're doing or should have worked harder. If the Wasmtime folks fail to meet the bar then the rest of the industry does too.
       
 (DIR) Post #B5O3SdXOYurjnFRUeW by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       @neauoire I was looking at Neralie and Arvelie and I really like both heh. Question tho: how do you pronounce Neralie timestamps? The obvious pronunciation for "750:000" would be "at 750 beats". Is that the way you'd say it?
       
 (DIR) Post #B5fSbty2e9jttfjudc by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       @neauoire loving the weck jars too!!
       
 (DIR) Post #B5mo87KPxsIXkI806i by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       In case people are wondering why GitHub has been having some issues as of late - the GitHub COO recently shared that they're handling up to an order of magnitude more traffic than they were a year ago.It's not like GitHub is just serving up pictures and text - things like the core git backend and actions are quite complex to host at scale. Idk, I guess I'm not surprised there are some stability issues when they're going from handling 1 billion commits/year to 14 billion commits/year.
       
 (DIR) Post #B5mo886z3J98Auqmo4 by yosh@toot.yosh.is
       0 likes, 0 repeats
       
       On the same topic - I'm also really annoyed by the “real  GitHub Uptime tracker" that's regularly posted. Evan Hahn did a good job breaking down why it's bad: https://evanhahn.com/in-defense-of-githubs-poor-uptime/The last paragraph in that post is titled: “There are better reasons to dislike GitHub”. And like, yeah - definitely.