ledgerdev

How zig has worked out in bun as compared to how rust has worked out in deno?

Looked around and seems pretty widespread. Links below to many issues, and some now fixed partially. Yeah, let's hope the open sourcing of those drivers make for a brighter future, but still I will do my damned best to never buy an nvidia product again.

https://github.com/NVIDIA/open-gpu-kernel-modules/issues/161 https://gitlab.gnome.org/GNOME/mutter/-/issues/2166 https://www.reddit.com/r/kde/comments/vgqyv2/wayland_nvidia_... https://gitlab.gnome.org/GNOME/mutter/-/issues/1891 https://forums.developer.nvidia.com/t/external-monitor-doesn...

This was on fedora 36... mostly screen will not wake from sleep, but also black lines on the screen, and complete signal mess up where I can barely see what's happening. I tried everything, like switched from hdmi to display port cables, installed latest drivers from nvidia, still it's a mess. Wasted countless hours jerking around with it. It was so unusable and gave up even trying any more a couple months ago. Maybe will try in a few more months because I would really like to use the machine with an external monitor.

I have learned my lesson, and will NEVER buy another nvidia product, not worth the trouble.

I have a laptop with nvidia card and wayland runs fine on the laptop screen, but lots of problems with docks and external monitors.

Wow JBM is very nice, love ligatures and it's so easy to read. Thanks for mentioning it.

This is an excellent video on the topic. https://youtu.be/u7UmGEMduI8

In short, the 4,500 year old date is based on very, very thin evidence, and much other evidence of longer timeline is simply ignored because "it's not possible".

Even 3 seconds is truly impressive!

Containers do not provide sufficient isolation to run untrused binaries. That's why aws built and uses firecracker for lambda.

Actually that's incorrect, there are a nunber of wasm runtimes that don't use v8. Here's links to a couple.

https://wasmtime.dev/

https://www.fastly.com/products/edge-compute

What sort cold start times do you hope to achieve? If it's serverless and no cost while not using(aka scale to zero), you can't run those containers all the time. For comparison the serverless version of sql azure takes ~50 seconds to cold start.

It seems to me that WASM is clearly a better suited technically as the core runtime of the future for serverless platforms... but the question is are isolates the VHS and WASM the Betamax in this story?

If you don't care about isolation... to do so requires a VM to securely isolate and that is a significant startup time and resource usage over a wasm module.

He does mention that he is looking for language to use for cli with fast startup. For cli and serverless cold start times become important so much so that clojure (non Graal complied) isn't usable for those scenarios.

It was 250 years between Newton's and Einstein's discoveries, so give it another couple hundred years or so. These things take time to bake LOL.

Same here, my $400 dock is completely non-functional with Fedora 35. I have read some reports it works with Arch, so maybe Fedora 36 will work.

> Maybe I could solve some of this stuff if I'd spend some time on it, I don't know. I do know that as long as I run Linux as my daily driver, my next laptop won't be a Lenovo.

Could not agree more. I was using mac's for a decade prior to buying thinkpad X1E a couple years ago. It's been an absolute disaster and I now loath them. Multiple years after purchase, the only distro I could find that even half works is Fedora.

Docking is worse, even under windows. So the dock was working under linux for a while but as a last week it's completely non-functional, no usb, no display. Under windows, probably 25% of the time the USB devices don't function on startup, and have to be unplugged and plugged back in. I was trying to run a monitor with hdmi and it would half the time not wake up. Switched to display port and it's a little better but still problematic. And if your computer goes to sleep, it's 5-10 minutes of trying to wake and often requires hard power cycle to come back. I had to set the computer to sleep only after 2 hour or so. This is with all firmware and os updates applied.

In the future, will be be selling these hot messes, and moving to a framework laptop. Doubtful I every buy another thinkpad, I have many fond memories of my first couple of IBM based thinkpads those were awesome machines.

What about zero downtime deploy of new version of your application? You have to take it down to restart, right?

Excellent point. Do you feel encryption/crypto shredding is good for these scenarios where nearly all data is sensitive?

> I may be misunderstanding you, but it feels like strings and datetimes are library related more than language related.

Yes would agree and see them as platform related. It's just too large a task to create from scratch. Like say on JVM you can compile to bytecode and have strings already built into platform, and java.time, and ability to access an ecosystem of libraries.

With zig could one could use c or rust libraries?

I have been thinking about creating a little higher level language that targets server side web assembly. Zig looks very attractive, but concerned with how to handle things like strings and datetimes.

How suitable is zig for such a task compared to say rust?

I like this, excellent way to handle permanent record deletion.

> What are the industry best practices for data deletion?

Tokenization. Exchange the data for tokens, and store the sensitive data someplace very secure separate from the main operational system. To process a delete, delete the token. Ideally this is handled via proxy, so it's a completely separate system from primary app.

Having used this method, I feel it ought to be used for every app storing sensitive data.

edit: I forgot to mention the biggest issue I have with crypto shredding (encryption per record) is that you can't correlate data between records as you can with tokens.

> Wasmer recently recently released a closed source wasm package manager. Something doesn't seem right. Anyone feel something is off here?

I have to agree. Are there any open source package managers similar to cargo?

Anyone know why they were rejected from Bytecode Alliance?

Yep, overloaded term. Anyone got a better idea for what to call it in the context of sensitive data within applications?

We have been using a token vendor for PCI level 1 compliance and it's been most excellent.

I can't tell you how many times over the years I've seen tens of millions of rows of sensitive data(e.g. ssn) sitting in databases unencrypted. Software devs as an industry really needs to take this more seriously, but often businesses simply will not allocate the funds to do this right because of minimal risks to the corporation. At least with PCI the companies are forced to take card data security seriously.. but for instance nacha data, not nearly as much.

Absolutely the way to handle sensitive data in every app, so much so that I'm working on an open source version.

> It doesn't address all the stuff that container orchestration tools address such as lifecycle management, update management, artifact management, autoscaling, networking, management access control, logging & metrics, etc.

Absolutely agree, it's just a core technology, which enables new model of operation, on which all that is necessary to run. Right now there is almost nothing.

> If you want to start faster than containers, you already can — by not using containers.

Only if don't care about security/isolation. WASM is strongly sandboxed. It's appropriate for multi-tenant systems, where containers/jvm/etc have to be run inside of virtual machines(e.g. firecracker) to get acceptable isolation.

> I suppose that's too slow for serverless cold start

Yep, half a second is way too slow for new instance per request. I think wasm startup time around 35 μs for lucet.

containers != native exe. WASM can start faster than containers, not exe.

Of course containers will be around probably forever, just as we still have mainframes. Note that current serverless and container platforms start and manage long running instances and occasionally incur cold starts.

WASM has near instant startup, making a cold start for each request feasible. I think this could be a key property/advantage that makes it preferable and more economically efficient in the long run.

WASM I think has a stronger sandbox as well. Containers in a multi-tenant environment need to run inside a virtual machine. WASM can be run in multi-tenant without the need to isolate each tenant in a virtual machine, again making it more efficient in long run.

edit: also recalled a relevant tweet from creator of docker https://twitter.com/solomonstre/status/1111004913222324225

Yes, but it will be large, ~40mb zipped. Net6 release broke trimming (tree shaking) with entity framework at least which caused an app of mine to balloon quite a bit.

Native AOT is on the roadmap for net7 which is good but very minimal support. For instance asp.net mvc is a non-goal (https://github.com/dotnet/runtime/issues/61231), so probably another 3 or 4 years before it's well supported.