marcopolo

Exciting to have a hackable Go based editor. The onboarding was pretty nice from a Vim user. Although I'm having some trouble with my fish shell also having vim bindings.

As a sibling comment pointed out this isn't comparing the same things. I'll try to provide a better comparison.

On a warm build on my machine, after editing a string in Zed's `crates/zed/src/zed.rs` and editing a string in Rune's `./cmd/rune/main.go`

Zed: `cargo build --release`: 284s (debug 30s)

Rune: `go build ./cmd/rune`: 15s

note I'm using a release build in Cargo to make it a bit fairer as all builds are "release" builds in Go.

I'm glad to see this change. I didn't much use the AI features, but I did want to support Zed. $20 seemed a bit high for that signal. $10 seems right. $5 with no tokens would be nicer.

Great work folks

The fact that this already has git support is amazing. I can easily migrate my Keybase git repos with a single command.

https://abseil.io/about/design/swisstables I found more useful in explaining the details of Swiss Tables.

Also of note: - Go's Swiss Table implementation is inspired by Cockroachdb's Swiss Table implementation which is inspired by Google's Abseil Swiss Table.

Masking in the WebSocket protocol is kind of a funny and sad fix to the problem of intermediaries trying to be smart and helpful, but failing miserably.

The linked section of the RFC is worth the read: https://www.rfc-editor.org/rfc/rfc6455#section-10.3

Sure you can. The bool is a signal telling the thing yielding values to stop.

This looks great. Meta question, does Safari enforce the privacy policy of extensions in anyway? Besides trusting that this doesn’t leak any data, is there another mechanism that guarantees this?

You may be interested in Nix. It can track all the dependencies of your project. So you d an copy them to a server, or Tarball them, or just run them with Nix on the server. It also has a nice property that you only ship what is necessary, since it keeps track of all dependencies.

I too am surprised with the amount of negative feedback. This isn't a post about locking you into AWS. Pulumi, Terraform, and friends are tools that work across cloud providers, and even your own infrastructure.

The real meat of this argument is that in the future DevOps won't be managing infrastructure to hand off to application developers. It will be creating meta programs that are designed to be used by application developers to let them build their own infra securely and reliably. This is what the `awsx` package in pulumi is. A predefined set of best practices that can be used by the application developer to create.

As someone who's worked as various stages of sysadmin throughout the past 10 years, I see this (pulumi-like) as the future. And I agree with the article in general.

"The reference-types proposal is now supported. It provides a new type, externref, which can hold any JavaScript value, for example strings, DOM references, or objects."

This is exciting! It opens up faster possibilities for wasm apps

Cryptic.io Founder here, SSL is far from perfect, and the recommended practices really should be standard. Especially if they want us to trust them with our personal files. But thank you EFF for putting pressure. (mini-plug: if you want a completely encrypted solution checkout https://cryptic.io)

Yes! It's using the excellent Stanford Javascript Crypto Library. Source here: https://github.com/cryptic-io/web

Thanks! It's been open sourced since conception, here's the repo: https://github.com/cryptic-io/web. We choose a website because it has the smallest barrier of entry. We are planning on releasing a browser extension that would verify the code on the website against the open source repo to prevent tampering. We are planning on making a native app in the future as well.

I'm a little wary in how it works, does it read all my notifications (texts, bank alerts, emails) send them to pushbullet servers, then send them again to my computer? Or is their some pairing encryption step I'm missing?

Wow, this is really cool. I'll definitely try porting some examples over. I'm pretty interested in seeing how they overcame the separate context for functions.

The problem lies when you have the function accessible in the global scope. Example:

A = E; E = function(x){ window.secret=A(x); return window.secret };

As you can just change how the function works.

If the maintainer is reading this, I submitted a pull request that significantly speeds up CCM encryption by using arraybuffers. I'd love to see it merged in: https://github.com/bitwiseshiftleft/sjcl/pull/89