billywhizz's comments

On: Global warming has accelerated significantly

[billywhizz]

the chinese can

On: A better streams API is possible for JavaScript

[billywhizz]

that sounds way off. there is a big perf hit to async, but it appears to be roughly 100 nanoseconds overhead per call. when benchmarking you have to ensure your function is not going to be optimized away if it doesn't do anything or inputs/outputs never change.

you can run this to see the overhead for node.js Bun and Deno: https://gist.github.com/billywhizz/e8275a3a90504b0549de3c075...

On: Show HN: 22 GB of Hacker News in SQLite

[billywhizz]

i played around with this a while back. you can see a demo here. it also lets you pull new WAL segments in and apply them to the current database. never got much time to go any further with it than this.

https://just.billywhizz.io/sqlite/demo/#https://raw.githubus...

On: Karpathy on Programming: “I've never felt this much behind”

[billywhizz]

> We are just dumber than them.

you are, for sure.

On: Denial of service and source code exposure in React Server Components

[billywhizz]

is it not obvious?

> These issues are present in the patches published last week.

> The patches published last week are vulnerable.

> If you already updated for the Critical Security Vulnerability, you will need to update again.

On: Jepsen: NATS 2.12.1

[billywhizz]

the OP was specifically about jetstream so i guess you just didn't read it?

[KaiserPro → billywhizz]

just imagine I'm claude,

smoke bomb

[nickpeterson → KaiserPro]

He Vanished!? Find him you fools!

On: Microsoft drops AI sales targets in half after salespeople miss their quotas

[billywhizz]

is this really the best use case you could come up with? says it all really if so.

On: NPM debug and chalk packages compromised

[billywhizz]

> When a package in the npm registry has established provenance, it does not guarantee the package has no malicious code. Instead, npm provenance provides a verifiable link to the package's source code and build instructions, which developers can then audit and determine whether to trust it or not

[OptionOfT → billywhizz]

It prevents the npm publish from locally modified source code.

On: QEMU 10.1.0

[billywhizz]

if you want to look at existing implementations on top of kvm then these might be useful - rust-vmm is a core library for AWS' firecracker vmm.

https://github.com/rust-vmm/kvm https://github.com/kvmtool/kvmtool https://github.com/sysprog21/kvm-host

On: SQLite (with WAL) doesn't do `fsync` on each commit under default settings

[billywhizz]

yes. most folks don't seem to understand this. but, you can get something approaching such guarantees if you are able to limit yourself to something as (seemingly) simple as updating a ledger. this approach is used in a lot of places where high performance and strong consistency is needed (see e.g. LMAX disruptor for similar). https://tigerbeetle.com/