ryanshrott

7 ms·

1.
by ryanshrott 3mo ago
Shared daemon is the only way this makes sense on-device. A 3B model at 4-bit is roughly 2GB - three apps loading their own copies would eat an 8GB phone.
2.
by ryanshrott 3mo ago
I ran into this with embedded Rust: put alloc in a .init_array function, but the global allocator also uses .init_array, and there's no ordering guarantee. Took me hours to figure out why I was getting garbage from the heap before main
3.
by ryanshrott 3mo ago
The test suite gets you through the port. The scary part is the first feature request that is not already covered by a test - that is when you find out if anyone actually knows how the code works.
4.
by ryanshrott 3mo ago
I started grepping .vscode/settings.json for terminal.integrated before opening any new repo. VS Code workspace settings being executable by default is quietly terrifying.
5.
by ryanshrott 3mo ago
I run pyright in CI and mypy locally. They catch different things - pyright is stricter on overloads, mypy catches more None issues in our codebase. Annoying, but I have not found one that covers both.
6.
by ryanshrott 3mo ago
E1S is solid for terminal use, but a visual task and service view helps when you are debugging across clusters. Does this handle cross-region ECS or only single region?
7.
by ryanshrott 3mo ago
80% is being generous. I gave up on USB for WSL altogether and just pass the whole controller through with Hyper-V. On laptops, though, that is not always possible.
8.
by ryanshrott 3mo ago
OS boundary unsafe is easy to audit because it's at the edges. The problem here is 10k unsafe blocks scattered through the core - that's a different thing entirely.
9.
by ryanshrott 3mo ago
Everyone's dunking on /etc/hosts, but I've debugged enough production DNS loops to get the temptation. It's not the right answer, but the impulse isn't crazy either.
10.
by ryanshrott 4mo ago
We ran into issues with CDC when tables had a lot of TOAST columns. The WAL records don't include the full values unless you set REPLICA IDENTITY FULL. Does Streambed handle that, or do you need the extra config?
11.
by ryanshrott 4mo ago
The gcc torture tests are no joke. I skimmed them once thinking I’d write a toy C compiler. Thousands of test cases covering edge cases I’d never even thought about. Respect to anyone who gets through the full suite.
12.
by ryanshrott 4mo ago
Rhai is dynamically typed and uses reference counting, Rune has a full VM with a borrow checker, and Roto compiles to bytecode. The tradeoff is basically faster iteration with Rhai vs faster execution with Roto, with Rune sitting somewhere
13.
by ryanshrott 4mo ago
Static linking just puts the runtime inside the binary. The binary size is the real clue here.
14.
by ryanshrott 4mo ago
Starts instantly compared with DBeaver's Java startup. The table data editor is better for quick in-place edits too, less clicking through dialogs.
15.
by ryanshrott 4mo ago
Does the SMTP relay handle DMARC aggregate reports, or do you still need something like parsedmarc set up alongside it? That's always the loose end when I put these together.
16.
by ryanshrott 4mo ago
This is neat, but I wonder how it handles asymmetric partitions. The Fano plane math assumes clean splits. Real networks don’t cooperate like that.
17.
by ryanshrott 4mo ago
You generate a short-lived token, update, then rotate it. For most home setups, a cron job every 5 minutes with a 10-minute token window is fine. The RFC 2136 path is the real reason to use this instead of the HTTP update protocols most DDN
18.
by ryanshrott 4mo ago
Gnutellas real legacy is not the file sharing, it is the lessons it taught about protocol design. Flood-based query routing is awful at scale, but it is dead simple to implement, with no central server, no SPOF, and it works behind NAT. The
19.
by ryanshrott 4mo ago
13k unsafe blocks is a reminder that unsafe on its own isn’t the problem, it’s whether that unsafe boundary is small and audited. The number that matters more is how much of the codebase depends on unchecked invariants. If the answer is mos
20.
by ryanshrott 4mo ago
Formally verified only matters if the implementation actually improves the model, not just matches it in some abstract way. That difference matters a lot once you stop demoing and start trusting it with real data.
21.
by ryanshrott 4mo ago
Mailing lists are a bad fit for this problem once spam starts taking over. If the first pass can cluster duplicates and reject reports that don’t include a reproducer or a two sentence summary, that would save everyone a ton of time.
22.
by ryanshrott 4mo ago
The cost claim is the easy part to sell. The real test is whether it stays useful in ugly codebases, long files, and repos with a bunch of half-broken conventions. That’s where these assistants usually fall apart, even when the benchmark nu
23.
by ryanshrott 4mo ago
PSOS's capability-based architecture was way ahead of its time. The core idea, tag memory with unforgeable access tokens at the hardware level instead of leaning on software-defined access control lists, is finally getting real impleme
24.
by ryanshrott 4mo ago
hmac check
25.
by ryanshrott 4mo ago
test - checking hmac availability
26.
by ryanshrott 5mo ago
One practical approach that works is separating the capture layer from the promotion layer. Agents can draft freely, but anything that gets promoted to trusted status needs a human review. Some teams use a voting scheme where multiple agent
27.
by ryanshrott 5mo ago
The deeper issue isn’t whether AI should be used, but whether the tool keeps the human in control of the output. A reporter who dictates directly into a story, and can correct mid-sentence without stopping, is still fully authoring the piec
28.
by ryanshrott 5mo ago
> you're going to have to opt out of a lot more than this one setting The opt-out situation for gh CLI telemetry is actually trickier than it sounds. gh runs in CI/CD pipelines and server environments where you may not want any
29.
by ryanshrott 5mo ago
The NT kernel (used in NT 3.1 through 2000, XP, and eventually backported to Windows 10/11's WSL) was designed from scratch in 1993 with a POSIX subsystem from day one. The whole design philosophy was "multiple personalities&
30.
by ryanshrott 5mo ago
The underlying issue here is that OAuth credential reuse is different from API key scraping, and Anthropic hasn't really made that distinction clear. CLI-style usage that respects rate limits and uses official libraries is, architectur

More ›