Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Servo is now available on crates.io

servo.org

Post reply on HN
Print view View original

141–150 of 155 posts

Re: Servo is now available on crates.io

#141

Post by irishcoffee »

mort96 wrote: post #57
falcor84 wrote: post #55

Earlier quoted context omitted.

As I see it, the focus should not be about the coding, but about the testing, and particularly the security evaluation. Particularly for critical infrastructure, I would want us to have a testing approach that is so reliable that it wouldn't matter who/what wrote the code.

I disagree. Thorough testing provides some level of confidence that the code is correct, but there's immense value in having infrastructure which some people understand because they wrote it. No amount of process around your vibe slop can provide that.

Who is writing the tests? An LLM? If so, they have little value.

Re: Servo is now available on crates.io

#142

Post by ospider »

minimaxir wrote: post #58
echelon wrote: post #46

Earlier quoted context omitted.

This is super useful! I have immediate use for this. Do you know if Servo is 100% Rust with no external system dependencies? (ie, can get away with rustls only?) Can this do Javascript? (Edit: Rendering SPAs / Javascript-only UX would be useful.) Edit 2: Can it do WebGL? Same rationale for ThreeJS-style apps and 3D renders. (This in particular is right up my use case's alley.)

I have been building/vibecoding a similar tool and unfortunately came to the conclusion that in practice, there are just too many features dependent on the full Chrome stack that it's just more pragmatic to use a real Chromium installation despite the file size. Performance/image generation speed is still fine, though. In Rust, the chromiumoxide crate is a performant way to interface with it for screenshots: https://…

> there are just too many features dependent on the full Chrome stack

Do you mind elaborating on what features are missing?

Re: Servo is now available on crates.io

#143

Post by weregiraffe »

mort96 wrote: post #84
rafaelmn wrote: post #61

Earlier quoted context omitted.

If you're trusting core contributors without AI I don't see why you wouldn't trust them with it. Hiring a few core devs to work on it should be a rounding error to Anthropic and a huge flex if they are actually able to deliver.

I trust people to understand the code they write. I don't trust them to understand code they didn't write.

So you don't trust projects with more than one author? By definition, they'd have to understand each other's code.

Re: Servo is now available on crates.io

#145

Post by mort96 »

weregiraffe wrote: post #143
mort96 wrote: post #84

Earlier quoted context omitted.

I trust people to understand the code they write. I don't trust them to understand code they didn't write.

So you don't trust projects with more than one author? By definition, they'd have to understand each other's code.

Different people can understand different parts of the code.

Re: Servo is now available on crates.io

#146

Post by mort96 »

epcoa wrote: post #109
px43 wrote: post #76

Earlier quoted context omitted.

Yeah, having a code section that is writable and executable is a huge no-no from a security standpoint. JIT is a fundamentally insecure concept, just in general. By definition it's trading security for speed.

lol

I mean they're right.

Re: Servo is now available on crates.io

#147

Post by ghusbands »

simonw wrote: post #39

Here's a vibe-coded "servo-shot" CLI tool which uses this crate to render an image of a web page: https://github.com/simonw/research/tree/main/servo-crate-exp... git clone https://github.com/simonw/research cd research/servo-crate-exploration/servo-shot cargo build ./target/debug/servo-shot https://news.ycombinator.com/ Here's the image it generated: https://gist.github.com/simonw/c2cb4fcb15b0837bbc4540c3d398c...

I wonder why most of the "g" characters are cropped.

Re: Servo is now available on crates.io

#148

Post by stefs »

ghusbands wrote: post #147
simonw wrote: post #39

Here's a vibe-coded "servo-shot" CLI tool which uses this crate to render an image of a web page: https://github.com/simonw/research/tree/main/servo-crate-exp... git clone https://github.com/simonw/research cd research/servo-crate-exploration/servo-shot cargo build ./target/debug/servo-shot https://news.ycombinator.com/ Here's the image it generated: https://gist.github.com/simonw/c2cb4fcb15b0837bbc4540c3d398c...

I wonder why most of the "g" characters are cropped.

good catch

Re: Servo is now available on crates.io

#149

Post by rafaelmn »

raincole wrote: post #116
rafaelmn wrote: post #48

This should be the real benchmark of AI coding skills - how fast do we get safe/modern infrastructure/tooling that everyone agrees we need but nobody can fund the development. If Anthropic wants marketing for Mythos without publishing it - show us servo contrib log or something like that. It aligns nicely with their fundamental infrastructure safety goals. I'd trust that way more than x% increase on y bench. Hire a c…

Perhaps, you know, not every thing, especially not every thread on HN, has to be about AI? I read the link twice and no AI or LLM mentioned. I don't know why people are so eager to chime in and try to steer the conversation towards AI.

Someone in the thread said they vibe coded something trivial so I just made the connection. I'd like to see Servo get to full browser status. I don't think they have the resources to do it. Anthropic is virtue signaling about their commitment to security in foundational software. Seems like a perfect match - even if Servo won't take it upstream - other companies spent hundreds of millions on Firefox/Chromium skins - Anthropic could ship their OSS browser based on Servo and showcase how effective their models are at coding. Hiring a few core contributors and giving them model access should be cheap in comparison to ARC acquisition and such. Will echo way louder than toy C compilers and benchmaxxing.

Re: Servo is now available on crates.io

#150

Post by skrtskrt »

thephyber wrote: post #110
skrtskrt wrote: post #91

Earlier quoted context omitted.

AI as advanced fuzz-testing is ridiculously helpful though - hardly any bug you can in this sort of advanced system is a specification logic bug. It's low-level security-based stuff, finding ways to DDOS a local process, or work around OS-level security restrictions, etc.

Re-read the thread you are replying to. Each of the last 4 comments in your thread (including yours) are conflating what they mean by AI.

You must be lost.
Post reply on HN