dochtman

Is this common across the industry, or mostly used at Amazon? I’ve been a professional software engineer for 20 year and read a lot of HN, but I think I haven’t seen this particular acronym around muc…

Do you think Seveneves is weaker than Fall? That seems like a really hard sell to me.

https://dirkjan.ochtman.nl/writing/2018/07/15/science-fictio... …

I think I’ve noticed that cargo install would pick up newer semver-compatible versions than what was in the lockfile unless I passed —-locked explicitly, which seemed surprising to me.

I have a fair bit of experience writing Rust code and the current status is totally deliberate. I find module file sizes of about 400-800 lines of code optimal in terms of my ability to find things vs…

If you look at the chart in this article, it looks like energy density has been on a linear rather than exponential path for the last three decades.

Working from home.

I use Secretive to authenticate to SSH (including GitHub) with my Mac’s TouchID. Feels like this is (almost) as secure, while being more convenient (no extra hardware required). Of course it is a Mac-…

QUIC does run in user space, and also uses congestion controllers running inside the QUIC stack, in user space. (I work on a QUIC implementation in Rust.)

I don't know your context, but here are some thoughts on what I've seen/experienced: Allow remote work -- European rates are much lower than Silicon Valley rates even now, and I imagine…

Is there documentations of the protocols used for this?

If you reply here, I'm happy to relay your comments to that issue.

I don't think the list of possible future features has been kept especially up-to-date -- we should probably fix that (or get rid of the list). If you want to weigh in on that issue to discuss wh…

On the Python angle, I recently spent some time building Python bindings for another Rust project with PyO3 and was quite happy with the result. Since then, I’ve been toying with the idea about buildi…

See my other answer.

That issue should be fixed in the next release. It is definitely a nuisance, but fixing it is not easy due to the assembly code involved.

It uses ring for cryptographic operations, yes. However, note that all the ASM in ring is meticulously kept up to date with BoringSSL upstream, which ring was derived from. Plus, there was pretty succ…

Happy to answer any questions that come up!

This is actually not (2018), it’s from a few days ago.

The list of unstable features they want to use is interesting: https://github.com/Rust-for-Linux/linux/issues/2 …

The list of unstable features they want to use is interesting: https://github.com/Rust-for-Linux/linux/issues/2 …

The API has generally been pretty stable, so I don't think you should be too worried about that. I haven't talked to other stakeholders about a version 1.0, and we actually have some larger …

I think ring does support WebAssembly. Yeah, the ASM in ring is not great, but unfortunately Rust does not currently provide us with all the guarantees we need to write safe crypto code (for examp…

We have some documentation on what we've done to learn from previous vulnerabilities: https://docs.rs/rustls/0.19.0/rustls/manual/index.html We try very hard …

Match statement exhaustiveness checking is one example, especially combined with the pervasiveness of enums (instead of constants).

No argument from me that you can easily go wrong in any language, but I would argue that Rust has features other than memory safety that can also assist in building more reliable/secure software.

I am a maintainer for rustls ( https://github.com/ctz/rustls ). What would your team need to be able to migrate to a different TLS stack that so far has proven to be safer, and pas…