maclockard's comments

maclockard | 1 year ago | on: Timeline of the xz open source attack

I think that trust needs to be 'pushed deeper' than that so to speak. While this would be an improvement, what happens if there is a malicious actor at Github? This may be unlikely, but would be even harder to detect since so much of the pipeline would be proprietary.

Ideally, we would have a mechanism to verify that a given build _matches_ the source for a release. Then it wouldn't matter where it was built, we would be able to independently verify nothing funky happened.

maclockard | 2 years ago | on: 95%-ile isn't that good (2020)

I love dan luu's blog posts. Great examples of principled thinking. Much of their writing on (computer) performance has pushed my own thinking and expectations.

maclockard | 2 years ago | on: Accidental database programming

Not just delivery, but also security. Browsers offer a level of isolation and safety that you generally don't get with native desktop apps. Things like iOS do bridge the gap a bit more though

maclockard | 2 years ago | on: You don't need a CRDT to build a collaborative experience

I understand what you are saying here in terms of the difference between using wall-clock or causal ordering to determine who 'wins' for LWW. However, both of these strategies seem convergent to me? In any case, all clients will agree on whose changes win.

1. With wall-clock decided by clients, A + B changes will win since C's wall-time is earlier (yes, C could lie, but still would converge).

2. With wall-clock decided by server C will win and everyone will agree.

3. With causal ordering, everyone will agree that A + B won.

2 is not a CRDT since it requires a central server, but I think 1 would still count? Or stated another way: I'm not sure the _convergence_ is what determines if these strategies are CRDTs or not, but rather whether or not this decision making is _distributed_ or not.

maclockard | 3 years ago | on: You might not need a CRDT

I actually talked to the drifting in space team about our experience implementing multiplayer. Really cool to see their findings!

Our team ended up having a similar take away, we wrote a blog post detailing our approach and experience here: https://hex.tech/blog/a-pragmatic-approach-to-live-collabora...

For the most part is been surprisingly solid! I was very much expecting to need to completely rewrite it by now, but its met most of our present needs.

The only real shortcoming is not being able to support line specific commenting. While we _could_ support it, any minor update to the text would result in the comment being marked 'stale' with a high false positive rate. I've considered adopting CRDT/OT just for the text editing portion to solve this.

maclockard | 3 years ago | on: Bun: Fast JavaScript runtime, transpiler, and NPM client written in Zig

I'm also pretty cynical of most JS rebuild/reinvention projects. I'm very tentatively excited by this one _because_ it looks like all it does is incrementally improve. Having something that is a drop-in API compat replacement for yarn 1/npm and node makes it potentially really easy to get the benefits of incremental perf improvements _without_ needing to reinvent the wheel like yarn 2 or deno.

maclockard | 4 years ago | on: Who Contributed to PostgreSQL Development in 2020 and 2021?

That's assuming that these people only contribute to PostgreSQL. I'm betting most of the folks listed here make major contributions on other projects or at work.

Your comment feels like a bit of unfair judgement, particularly since a lot of those you are implying that are 'only 1x programmers' are effectively donating their time.

maclockard | 4 years ago | on: Reactive, DAG-based notebooks in Hex 2.0

I really love how reactivity is being utilized across the stack. It's been pretty big on the frontend for a while now (React, etc), but I think data is another space it can really shine.
page 1