Viewing profile — mustache_kimono

[flagged]

Wow, yeah, really hate this.

> Now it needs to be put into shape so that all the unsafe blocks are eliminated All the unsafe seems to be FFI? https://github.com/search?q=repo%3Aoven-sh%2Fbun+unsafe+lang... > a…

> Why not use a struct of arrays? I would assume because then the shape of the data would be too different? SOAs is super effective when it suits the shape of the data. Here, the d…

> The two obvious examples Appreciate this rincebrain. Know that you know better than most and this certainly covers my 2nd point. I don't imagine these cases cover my first point …

> Two examples that I can find I think you may be misreading my point above. I am not arguing ZFS doesn't have bugs. That's nuts. I am arguing that the bug the parent says he has w…

> There's been several instances. I think you're missing the 2nd feature to the parent's point that I take issue with, which is this is not just a bug that a scrub wouldn't find , …

> Scrubs check hashes, not structure. How is the structure not valid here? Can you explain to us how an fsck would discover this bug (show an example where an fsck fixed a similar …

> Imagine that a directory ZAP has an entry that points to a bogus object ID. That would be an example. The ZAP block is intact but its content is inconsistent. The above is intere…

> Imagine a race condition that writes a file node where a directory node should be. You have a valid object with a valid checksum, but it's hooked into the wrong place in your dat…

"Scrubs differ significantly from traditional filesystem checks. Tools such as fsck or chkdsk examine logical structures and attempt to repair inconsistencies related to directory …

> That will also put it on the unfortunate position of being the place that breaks every time somebody adds a bug to the C code. Can someone explain charitably what the poster is g…

> Why would I use it for s3? You have it the wrong way around. Here, ZFS uses many small S3 objects as the storage substrate, rather than physical disks. The value proposition is t…

> I think that companies like Oracle, SAP, and Broadcom begin to resemble specialized private equity firms This is an entirely fair/accurate. I suppose what I am getting at is that…

The next sentence is more defensible: >> Certainly, these companies not endure as innovators: when coercion is your business model, innovation is not merely unnecessary but activel…

> Page management isn't really a thing we can do well "in user space". But it is the thing most high performance OLTP DBMSs, most of us are aware of, do? I'm also not sure your cit…

> On performance: ... In particular I am thinking how there's a whole body of research of database buffer pool management Why? The solution thus far has been to turn off what the k…

> there are many of us who are very thankful for them. Why? Can you explain, in light of the article, and for those of us who may not be familiar with qubes-mirage-firewall, why?

Bryan Cantrill, "Unikernels are unfit for production". [0] [0]: https://www.tritondatacenter.com/blog/unikernels-are-unfit-f...

> I think Rust is more unsafe than C due to supply chain issues in the Rust ecosystem This is such an incredibly cheap shot. First, the supply chain issues referenced have nothing …

> I'm more interested in the % of rust code that is marked unsafe. I think you should less interested in % unsafe as what the unsafe is used to do, that is, it's likelihood to caus…

> Your sense seems more than a little unrigorous. 1/160 = 0.00625. So, several orders of magnitude fewer CVEs per line of code. This is incorrect. Chalk it up to the flu and fever!…

> Github says 0.3% of the kernel code is Rust. But even normalized to lines of code, I think counting CVEs would not measure anything meaningful. Your sense seems more than a littl…

> So the prediction that incautious and unverified unsafe {} blocks would cause CVEs seems entirely accurate. This is one/the first CVE caused by a mistake made using unsafe Rust. …

> You don't generally need specific versions of GCC or Clang to build it I'm pretty sure. You need a C11 compiler these days with loads of non-standard extensions. Note, for a very…