The semver trick (2019)

Re:The semver trick (2019) by viraptor on Saturday August 01, 2020 @09:00PM (#24025402)

If you're adding encryption support, you're likely adding openssl which brings hundreds of cryptographic primitives you're not going to use. Are you lazy because you didn't write your own RSA? (you can do it in ~3 functions)

That generalisation didn't work well, because as you say - it's about tradeoffs.

[ Parent | on HN ]

Re:The semver trick (2019) by heavenlyblue on Sunday August 02, 2020 @07:19AM (#24027902)

I can’t implement RSA in the amount of time it takes me to Google the name of an RSA library.

I can implement left pad faster than it would take me to Google the name of the library, check whether it actually does what I want and then add it to my package manifest as a dependency.

[ Parent | on HN ]

Re:The semver trick (2019) by linkdd on Sunday August 02, 2020 @07:40AM (#24027994)

The amount of work needed to write a secure implementation of RSA (you would surely need a library like gmp to handle big numbers) is not worth my time, I would gladly trade that against some download/compilation time.

The same goes for efficient map/reduce framework or even a key/value database (what's wrong with using BerkleyDB/SQLite instead of writing your own storage format?).

I need to serialize user-supplied data ? I'm gonna use a library that will handle edge cases I can't think about.

But I'm not gonna use SpringBoot only for its logging facility, or Django only for its ORM, or a BNF parser generator to parse "hello world".

[ Parent | on HN ]