Hacker News new | past | comments | ask | show | jobs | submit | ibotty's comments login

And if there were one (`drop` kind-of is that function though), it will consume the file handle so you cannot call it again.

Look at the hardware first:

The hardware in the Ceph test is only capable of max 1.7TiB/s traffic (optimally without any overhead whatsoever).

I also assume that the batch size (block size) is different enough that this alone would make a big difference.


The comparison is a little pears to apple. Similar nutritions but different enough to not draw conclusions. The hardware in the Ceph test is only capable of max 1.7TiB/s traffic (optimally without any overhead whatsoever).

I also assume that the batch size (block size) is different enough that this alone would make a big difference.


Even if we take different hardware into account we can readjust for measured vs theoretical throughput.

Ceph cluster achieves 1 TiB/s / 1.7 TiB/s = 0.58% of theoretical throughput.

3FS cluster achieves 6.6 TiB/s / 9 TiB/s = 0.73% of theoretical throughput.


That difference is still pronounced, yes. But the workload is so different. Training AI is hardly random read. Still not a comparison which should lead you to any conclusions.


Can you point out where it says it won't be a reproducible output?

https://github.com/signalapp/Signal-Android/blob/main/reprod...


I skimmed and didn't see that but the "apkdiff" script extracting the apk because "diff doesn't work well on zips" made my gut twitch.

Why can't I sha256sum the two apk?


Archive formats are hard to make reproducible because there are lots of ways of making different yet equivalent archives. So it’s not surprising to me that someone would fail at this hurdle and find it frustrating to resolve. Nix defined their own format for this to avoid this exact problem.


It seems there are multiple reasons. For one, the apk files include a digital signature and you won't have Signal's and Google's private keys available to recreate their signatures.


Thank you for this nice response. Did you already know or did you look it up? please don't tell me you just copied and pasted my question into an input form somewhere and it gave a bunch of reasons...

i should have done that.


I was interested in this so I had a look at the tools.

Now that I asked ChatGPT, it didn't include this reason - perhaps it's too obvious and no-one has written it down before.


Ah nice; they got rid of that explicit warning - instead though we have the entire section about "bundlePlayProdRelease" including an externally sourced binary blob.

A significant improvement.

/s


I don't understand how the details of the build process matter if the resulting files can be checked to be bit by bit identical? I can only think of something like Signal and Google conspiring to backdoor the binaries during the build process via this external binary blob. But if Google is part of this, they could also do it within Android which is not fully open source.

If you don't like this, you use the non-Play Store build instead (which supposedly doesn't include any binary blobs, but I haven't checked).



It's not only potentially infested with vulnerabilities. It's also not possible to filter io_uring using seccomp at all. So if you allow io_uring, you allow all that is possible with it.


I bought a 1st generation framework in a pretty early batch. In between I upgraded to a ryzen mainboard and use the old mainboard as a desktop computer in the dedicated case.

The old battery is not as good as it were (even though I only charge it until 75%, which the bios lets me configure) and the display hinges are a little too weak. The hinges got fixed for newer models, even in the factory second 1st gen Intel I bought for a friend they are fixed.

There was a time when they could not keep up with bios updates, but that has apparently been sorted out. And it's not worse than other vendors...

I have no regrets.


IMO the big problem is that it's very hard (and AFAIK no way has even be proposed) to restrict from the outside which syscall-alikes are allowed via io_uring. This is trivial with regular syscalls. That's important if you ever co-host applications with different security domains.


Is there some documentation on how to integrate it into a different web app? I would really like to open a template that is stored in the database and handle sending the mail, "exporting" (rename it to "save"), etc.

Is that possible?


You can visit the following page for documentation on how to integrate it into your angular web app. https://www.npmjs.com/package/@send-with-ses/ng-email-design...

You can integrate your api call in the exportHtml() method to save it to your database. And you can load the same template into the component by providing it to [template].

ex: <lib-email-designer [type]="selectedTemplateType" [template]="selectedTemplate" #emailEditor></lib-email-designer>


That's just an initial encoding as described e.g. here: https://peddie.github.io/encodings/encodings-text.html

Am I missing something?


Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: