Viewing profile — dcsommer

Sure they care about elegance, or at least brevity. Minimizing tokens out, or generally "token efficiency," is part of the objective function for these systems. It doesn't mean the…

What is the binary size comparison including wasm + js?

https://www.memorysafety.org/docs/memory-safety/

Codecs are difficult and expensive to develop. Therefore they get reused in many contexts, including security critical ones. Sandboxing is shown over and over to not be a great sec…

Performance should not be priority #1. Security should be. Why do we slow down all CPUs to prevent SPECTRE attacks yet continue to write in C? As rav1d shows, the perf loss is far …

How is this POV compatible with the exploitable vulnerabilities, caused by memory safety, found in openh264, x264, dav1d, and practically every video decoder out there?

We must not continue to develop media codecs in memory unsafe languages. Small, auditable sections can opt-out perhaps, but choosing default-unsafe for this type of software is clo…

I think GP is simply identifying a potential popular niche that could be satisfied in a future city builder game, which seems quite on topic.

Just for reference, Wamedia ships on the major Meta apps and on iOS, Android, Desktop, and Web platforms.

We invested a lot into build system optimizations to bring this number down over time, although we did accept on the order of 200 KiB size overhead initially for the stdlib. We ini…

Great reading to see beyond the clichéd, sanitized retellings of that era. It really makes you consider the prices paid for what some call progress.

Great work by the MS team. It is great progress to shift OOB access into a controlled crash. These kinds of panic bugs are then easy to remediate, with clear stack traces, as we se…

> basically fine How many type confusion 0 days and memory safety issues have we had in dynamic language engines again? I've really lost count.

Is there a straightforward path to building Zig with polyglot build systems like Bazel and Buck2? I'm worried Zig's reliance on Turing complete build scripts will make building (an…

It would be cool to build a "library clout" measure for all open source software. First collect for all deployed software systems measures of usage per platform and along other int…

This is interesting if true, but without data I can't take this claim at face value.

Neither are high and low surrogates - those are big ranges of code points that are illegal except for one specific (and not recommended) encoding (utf-16). Yet, there they will rem…

Seems more proper to call it a `ProbabilityDistribution` type. It's a more general and intuitive way to handle the concept.

Enforcement needs to be on the sales side, as enforcement at the consumer level is obviously impossible to scale. Also, class 2 (and 3) should not be allowed in bike lanes. If you …

Unsafety in a language is fine as long as it is clearly demarcated. The problem with Go's approach is there no clear demarcation of the unsafety, making reasoning about it much mor…

"Strongly typed" is stretching it. Type checking is bolted on and not part of `erlc`. Typing is quite unergonomic in Erlang/Elixir (similar to Typescript bolted onto JS). The type …

> 40% of Americans believe that God created the earth in the last 10,000 years. Citation needed. That claim is not compatible with Pew research findings which put only 18% of Ameri…

Have there been any studies or economists predicting macro-level benefits to the US economy with the tariffs? I'm not aware of any (much the opposite), but I'm interested if they e…

Yet I feel that AI gives such instant gratification that the boredom and struggle required for imagination is short-circuited and atrophies.

For what languages would removing 'std::' realistically cause ambiguity for practicioners?