Live data from Hacker News

What Makes .NET Core So Special?

blog.jamesmichaelhickey.com

231–240 of 247 posts

Re: What Makes .NET Core So Special?

#231
post #201

Earlier quoted context omitted.

I should say (since i've got your attention) that i'm almost 100% sure that all of your customers would be more than willing to sacrifice a startup time for a well-coordinated callback when everything is warmed up, as a toggleable option of course. To explain this a bit better, i'd definitely be happy even waiting 10+ minutes for all of my controllers/hub methods to be instant response. I could then subscribe to an e…

Tiered Compilation is tweaked in a way that it provides a very good balance between startup time and throughput, which is what a majority of users would need. If you want to privilege throughput and don't care about startup time, then you should try COMPlus_ReadyToRun=0 as an environment variable. This will force to use non-crossgened code so the JIT can better optimize your code.

How about using native compilation?

Re: What Makes .NET Core So Special?

#232

I’m in the process of porting a bunch of go code to dotnet core 2.1 on AWS lambda. I’m on a Mac using vscode. I never installed mono, just the dotnet sdk. Honestly, I’ve been amazed at how good the tools have been. For cli and serverless dev, it’s been surprisingly great. It’s fast. C# is decent. The cold starts are not as fast as go, but not terrible. Memory usage is low. It’s been a legitimately positive experience…

As someone eager to start (properly) learning C#, is doing so on Mac actually viable? It sounds like it from your post but would be eager to hear your thoughts (I only have a Mac at home to practice on).

Yes, Unity3d developers have been developing in C# on Mac for over a decade. Visual Studio for Mac (aka Xamarin Studio aka MonoDevelop) is better than Xcode in some respects.

Re: What Makes .NET Core So Special?

#233

Earlier quoted context omitted.

If you want to be on the JVM I highly recommend giving Kotlin a look before Java. Great language and excellent tooling.

I would like to learn Kotlin, but I've no prior knowledge about Java... That's a real impediment? If it isn't, do you know (by chance) about some resource(s) for a total newbie/newcomer to the language? thanks in advance.

I don't think lack of other JVM knowledge will be a big impediment, but it might be a small annoyance bootstrapping a project (e.g. how to do dep mgmt) and debugging (how to read a stack trace).

Re: What Makes .NET Core So Special?

#234
post #131

Earlier quoted context omitted.

This is a bit off-topic, but on another occasion, Scott Hanselman infamously used the term "5:01 developers" targetted at many of the same people ;)

Do you have a reference for that?

Here: https://www.hanselman.com/blog/501DevelopersFamilyAndExcitem...

I'm not sure if that is the original post.

There was a bit of backlash against it, someone even published a 5:01 Manifesto, but that site is not maintained any more :D

Re: What Makes .NET Core So Special?

#235
post #131

Earlier quoted context omitted.

This is a bit off-topic, but on another occasion, Scott Hanselman infamously used the term "5:01 developers" targetted at many of the same people ;)

TBH I worked in high stress environments (gambling and finance). Management didn't care that I would work to 7-8pm most evenings (9pm start) and do a few all nighters. A few times I was like 30 minutes late twice in a row I would get called in for a talk about "tardiness". I was younger at the time and I thought they would cut me a bit of slack after delivering the impossible on time!! After a while you realise that…

If you deliver the impossible on time, they'll just ask for the even more impossible next time...

Re: What Makes .NET Core So Special?

#236
post #179

Earlier quoted context omitted.

I'm working on a fairly complex e-commerce platform built on .Net Core, I'm really happy with it. We use EF core too. It's a pretty serious project, and for us, the benefits of our developers being able to natively develop on Macbooks and being able to deploy to Linux containers outweighs missing features. Swings and roundabouts...

Which IDE are you guys using?

The Windows guys are using VS Professional, I'm mostly using VS Community, though I've dabbled with Rider a bit. If I was starting out with zero VS experience I'd probably go for Rider, but I'm so used to VS I use that, even though Community isn't as good as Professional.

Re: What Makes .NET Core So Special?

#237

Earlier quoted context omitted.

> I really hope the platform can break out of the Microsoft silo and attract talent from other dev communities The problem is often trust. Like so many Microsoft projects, to me the goal of .Net Core seems to be to get as much people as possible on to a proprietary language and/or get as many devs as possible onto developing stuff that doesn't hurt Microsoft. There's no guarantee that MS will not pull the plug at som…

It isn't a proprietary language. Anyone can implement the language spec. Do you people do any basic research, you know just googling or reading the license?

> Anyone can implement the language spec.

No. So far, only Microsoft has implemented the language spec and as long as no one else does it, no one can. Prove to me that "anyone can implement it" by pointing to someone who has done it, instead of relying on some theoretical "it could be done" fantasy.

The amount of effort, time, energy needed is just not something anybody else outside of MS is able or willing to put into implementing the language spec.

Re: What Makes .NET Core So Special?

#238

Earlier quoted context omitted.

It's probably less secure by default. Make sure to reject all HTTP requests where the Origin header doesn't match the local server host, or just all request with an Origin header.

What you really need is a shared secret between (embedded) browser and (local) server. IP, host header, origin header can be checked as defense in depth, but can't prevent local privilege escalation from non browser clients and are quite fragile even in browsers. (or use a secure non TCP/IP based communication channel)

> but can't prevent local privilege escalation from non browser clients

That is such a different threat model though. A native app has a lot more permissions than a web page. Trying to protect one native app from another is not really done much. Like, are MS Word documents encrypted so Slack can't read them from disk?

Re: What Makes .NET Core So Special?

#239
post #234

Earlier quoted context omitted.

Do you have a reference for that?

Here: https://www.hanselman.com/blog/501DevelopersFamilyAndExcitem... I'm not sure if that is the original post. There was a bit of backlash against it, someone even published a 5:01 Manifesto, but that site is not maintained any more :D

Scott Hanselman is a workaholic. He is also very evasive at answering questions directly if it isn't politically expedient. I have noticed this both in a few email correspondences I've personally had with him and through his comments on his website. I quite like how he explains things and I do think he is a good dude.

Hanselman is also one of those developers that can bang code out 24/7. I've met them. They can get a lot of stuff done, however there is usually someone like me that is picking up the pieces left behind.

Recently I worked with one and he banged out an MVC project, commented out all the tests I wrote after he changed the API I wrote and then went on holiday to Greece for several weeks and then was moved onto another project. Guess who had to clean up the mess ...

Re: What Makes .NET Core So Special?

#240

Earlier quoted context omitted.

What you really need is a shared secret between (embedded) browser and (local) server. IP, host header, origin header can be checked as defense in depth, but can't prevent local privilege escalation from non browser clients and are quite fragile even in browsers. (or use a secure non TCP/IP based communication channel)

> but can't prevent local privilege escalation from non browser clients That is such a different threat model though. A native app has a lot more permissions than a web page. Trying to protect one native app from another is not really done much. Like, are MS Word documents encrypted so Slack can't read them from disk?

You can have multiple OS users on the same computer.
Post reply on HN