Viewing profile — benwilber0

The "runtime" word is very confusing in this case. It's a web application server written in Rust (Axum/Tokio), that has hooks into Lua bindings (mlua) so that application behaviors…

Looks neat. I built a programmable server for Server-Sent Events using a similar stack (Rust/mlua/axum) [1]. I think the Rust/Lua interop story is pretty good. [1] https://github.c…

> I am surprised more projects don’t provide a Lua scripting layer. Completely agree. I've been adding Lua scripting support to pretty much everything I make now. Most recently my …

Github was a "social network" from its very beginning. The whole premise was geared around git hosting and "social coding". I don't think it became enshittified later since that wa…

But why are they spending any time switching away from Redis at all unless they are a hosting provider offering Redis-as-a-service? I wasn't aware the license had any negative affe…

Your company invested hundreds of engineering hours switching from Redis to a clean fork of Redis?

> I probably would have gone for turning the UaF into an type confusion style attack I'm aware that Linux is nearly 40 years old at this point, and C is even decades older. But it …

> their software also downloaded a 250MB update file every five minutes How on earth is a screen recording app 250 megabytes

> contention slowdowns caused by having a primary key that needs a lock (incrementing key) This kind of problem only exists in unsophisticated databases like SQLite. Postgres reser…

You use a regular bigint/bigserial for internal table relations and a UUID as an application-level identifier and natural key.

> Always use a BigInt (64 bits) or UUID for primary keys. Use bigint, never UUID. UUIDs are massive (2x a bigint) and now your DBMS has to copy that enormous value to every side of…

Tokio + Axum + SQLx has been a total game-changer for me for web dev. It's by far the most productive I've been with any backend web stack.

Americans in the market for a "premium" shower head are clearly not looking for the cheapest thing on the market. So it's obvious that they would be willing to spend more for the a…

got hugged. Maybe the next post will say "Blog is hosted on a Nintendo Wii (running Varnish)"

My initial thought is about GPG's "Web of Trust" system for trusting strangers' keys. But I don't know if that's a very good example since it always seemed somewhat esoteric and ma…

I'm guessing because users will just "verify" themselves, and then the whole thing is meaningless.

The first mistake we're going to see a library developer make is: def execute(query: Union[str, Template]): Maybe because they want their execute function to be backwards compatibl…

the {name} parameter is in the locals() dict like it always is

Aren't there other benefits to server-side parameter binding besides just SQL-injection safety? For instance, using PG's extended protocol (binary) instead of just raw SQL strings.…

Don't use one of the most permissive licenses in existence and certainly not one that doesn't provide copyleft. This is all very well established at this point and yet somehow the …

> when we tried to use them in production at scale Debian and Ubuntu have been using them in production and "at scale" for decades. What are the "sharp edges" that you're trying to…

What is an example of something that would require "distributed signing"?