News for hackers. Stuff that matters.

A comment on DuckDB – An embeddable SQL database like SQLite, but supports Postgres features. Parent comment

Re:DuckDB – An embeddable SQL database like SQLite, but supp... by wffurr on Sunday September 20, 2020 @12:42PM (#24535033)
Having sqlite included in all browsers with standard bindings would have been great.
[ Parent | on HN ]
Re:DuckDB – An embeddable SQL database like SQLite, but supp... by jansommer on Sunday September 20, 2020 @02:02PM (#24535846)
It would! But it would also be a security nightmare. Exploit SQLite and you could use it in Safari, Chrome and Firefox - everybody could be affected.
[ Parent | on HN ]
Re:DuckDB – An embeddable SQL database like SQLite, but supp... by andyfleming on Sunday September 20, 2020 @02:24PM (#24536046)
How would that be different from someone editing something in window.localStorage?
[ Parent | on HN ]
Re:DuckDB – An embeddable SQL database like SQLite, but supp... by jansommer on Sunday September 20, 2020 @02:48PM (#24536284)
If that's all you need, it wouldn't make sense to include SQLite in the browser. If you're going to include a relational database you might as well use it
[ Parent | on HN ]
Re:DuckDB – An embeddable SQL database like SQLite, but supp... by CRConrad on Sunday September 20, 2020 @03:58PM (#24536887)
I think that meant: How would that be more of a security nightmare than some malicious site editing your browser's whatever.localstorage?
[ Parent | on HN ]
Re:DuckDB – An embeddable SQL database like SQLite, but supp... by hajile on Monday September 21, 2020 @09:20AM (#24543009)
Ironically, all the IndexDB implementations were just thin layers on top of sqlite last I checked.
[ Parent | on HN ]
Re:DuckDB – An embeddable SQL database like SQLite, but supp... by WorldMaker on Monday September 21, 2020 @05:52PM (#24548864)
The original slow IndexedDB implementations were done that way, but my understanding is that anything fast and "modern" probably isn't in 2020 as most of the browsers moved to their own IndexedDB storage implementations that are not SQLite-based. IndexedDB has very different expected performance characteristics than a pure relational DB (as it is a key/value store with indexes closer to most "NoSQL" DBs than to SQLite) and it did not (and does not) make long term sense to use SQLite below the hood.
[ Parent | on HN ]