joelellis | 4 years ago | on: Backdoored password manager stole data from as many as 29K enterprises
joelellis's comments
joelellis | 5 years ago | on: Amp: Vi-like terminal editor written in Rust
In regards to your second point, I will point you to the oft-linked https://wiki.alopex.li/LetsBeRealAboutDependencies .
Finally, your third point. Although much of the ecosystem is changing at a rapid pace, core and major packages, the ones most directly depended on, have either made very strong commitments towards stability, have a proven track record of having few or no breaking changes or both. Additionally, due to the nature of the package manager (and static linking), it's very easy to freeze the churning sections of the ecosystem for your application, use the important dependencies and even patch bugs you're encountering.
Additionally, the fact that rust's ecosystem is advancing at a rapid pace means that, well, it's advancing at a rapid pace. Most packages are high-quality and useful, and many are hugely advanced from what other languages have to offer, like the serde and regex crates. This reflects on the applications built with these libraries - you're probably heard of ripgrep, originally built almost purely to test the regex crate, or JQL, built on serde_json. There are many more amazing crates than I could possibly mention, and many more software projects like OneSignal's notification systems that showcase the amazing way the projects in the Rust ecosystem have been put together.
In short, most of the downsides that you mentioned are really mostly positives, and these positives do affect the applications a lot. Rust does have negatives, but it has plenty of positives, all of which have very concrete effects.
This is a bit of a wall of text, but your first paragraph irked me. Also, Gimp, OpenOffice and VLC are already huge. I don't use FileZilla, but I would expect similar.
joelellis | 5 years ago | on: Amp: Vi-like terminal editor written in Rust
joelellis | 5 years ago | on: SvelteKit Is in Public Beta
joelellis | 5 years ago | on: I can only think that modern front end development has failed
That's surprising - even external stuff usually has to follow the NHS's design system.
joelellis | 5 years ago | on: Fed up with the Mac, I spent six months with a Linux laptop
joelellis | 5 years ago | on: The Norway Problem
joelellis | 5 years ago | on: Collabora Office: The enterprise-ready edition of LibreOffice
joelellis | 5 years ago | on: Fairphone suggests Qualcomm is the biggest barrier to long-term Android support
> Support a stable kernel API probably wouldn't be that expensive
joelellis | 5 years ago | on: Microsoft in talks to buy Discord for more than $10B
Mojang recently announced that all mojang.com accounts would be migrated to Microsoft accounts. https://www.minecraft.net/en-us/mojang-account-move
joelellis | 5 years ago | on: Mozilla plans to remove the Compact Density option from Firefox's Customize menu
joelellis | 5 years ago | on: TailwindCSS v2.0
joelellis | 5 years ago | on: Ox is a fast text editor, written in Rust, that runs in your terminal
joelellis | 5 years ago | on: Compiler for the M language of the French DGFiP
https://twitter.com/DMerigoux/status/1314531302079688709
> The difficulty arose from a constraint on the part of the DGFiP which did not wish to publish, for security reasons, part of the logic of the calculation corresponding to the "multiple liquidations" mechanism. Raphael and I recreated this unpublished part in a new DSL.
> The DGFiP also did not wish to publish its internal test sets. We therefore proceed to the creation of a completely random test set, from the unpublished content, in order to be able to reproduce the validation of Mlang outside the DGFiP.
> A little less than a year after the publication of https://blog.merigoux.ovh/en/2019/12/20/taxes-formal-proofs...., we therefore found a compromise allowing to respect both the 'source code publication obligation, and the security constraints of the DGFiP.
> By allowing us to go to its operating site and confidentially access the source code that it did not wish to publish, the DGFiP has enabled us to find alternative solutions that make the publication of the source code concrete and operational. .
joelellis | 5 years ago | on: Witeboard
joelellis | 5 years ago | on: Launch HN: GitDuck (YC S20) – Zoom for developers with real-time code sharing
joelellis | 5 years ago | on: PWA Store