On my trusty M1 Max, a tiny test crate with graviola 0.4 as its single dependency runs clean `cargo check` 1.31x faster than with sha2 0.11, and clean `cargo build` 1.11x faster.
Remote
Dirkjan Ochtman
@djc@hachyderm.io
mastodon
4.6.6
Fan of Rust, open source maintainer.
1103
Followers
161
Following
37
Posts
Joined November 08, 2022
Website:
GitHub:
Twitter:
Posts
@cliffle@hachyderm.io FWIW, your blog's TLS certificate seems to have expired.
I suppose asking for new contributors on a popular programming language blog is equivalent to inviting a slop tsunami.
Replying to
@janl@narrativ.es
So Mozilla is spending some of its revenue on sponsoring a football club now?
Replying to
@jnsgruk@hachyderm.io
@jnsgruk@hachyderm.io @ctz@infosec.exchange for Rust applications, we plan to release a version of rustls-platform-verifier with upki support soon.
https://github.com/rustls/rustls-platform-verifier/pull/235
Replying to
@tay@tech.lgbt
@tay@tech.lgbt @cpu@hachyderm.io I highly recommend using software with built-in ACME capabilities. (For HTTPS, this could be Caddy, but both Apache and nginx have support too.)
Replying to
@andrewnez@mastodon.social
@andrewnez@mastodon.social could I get access to the list of dead critical repos in the Cargo ecosystem (ideally in order of criticality)? Seems very relevant to my RustSec work.
Replying to
@yossarian@infosec.exchange
@yossarian@infosec.exchange I think this would be very challenging in the Rust ecosystem, where type safety means that evolving your API in a semver-compatible way is harder.
Replying to
@yossarian@infosec.exchange
@yossarian@infosec.exchange so can you only unlock a dependency upgrade once all its dependents in your graph have also upgraded?
Replying to
@andrewnez@mastodon.social
@andrewnez maybe. And arguably it’s not all that different from triggering every downstream’s CI via Dependabot/Renovate after the release.
Though now I’m wondering for Rust if it would be feasible to do like a static analysis version of this, plowing through the rustwide corpus looking for specific code paths.
Replying to
@andrewnez@mastodon.social
@andrewnez having something crater-like would be amazing, but it also seems very expensive, potentially prohibitively so? I do wonder if we could do the static analysis version of that at least for languages like Rust.
Replying to
@jnsgruk@hachyderm.io
Wow, Bluesky is not having a good day today.
After 13 months of work, today we released Hickory DNS 0.26.0 (our memory-safe DNS libraries and server), which should be more robust, faster and easier to use correctly. Detailed release notes are here:
https://github.com/hickory-dns/hickory-dns/releases/tag/v0.26.0
From an LLD maintainer: “wild is worth calling out separately: its user time is comparable to lld's but its system time is roughly half, and its parse phase is 4-8x faster than either of the C++ linkers.”
https://maskray.me/blog/2026-04-12-recent-lld-elf-performance-improvements
(Via @llvmweekly@fosstodon.org.)
Replying to
@gvwilson@mastodon.social
@gvwilson haven’t seen anything like that. Have gotten a request to interview as someone else, and to sell my X account.
Very cool to see that Google is using Hickory DNS (which I help maintain) to power DNS message parsing in the Pixel firmware!
https://security.googleblog.com/2026/04/bringing-rust-to-pixel-baseband.html?m=1
An update on rustls performance: it’s still pretty fast.
Replying to
@atpfm@mastodon.social
@atpfm@mastodon.social @siracusa@mastodon.social I guess I’m kinda slow (despite being a long-time listener and member) — I only got it when he mentioned he was wearing his shorts.
Replying to
@notgull@hachyderm.io
@notgull@hachyderm.io maybe consider doing unmaintained RustSec advisories for any of these that have not yet found new maintainers? Might be a better way to reach out to people using them.
Replying to
@arichtman@eigenmagic.net
@arichtman@eigenmagic.net @gvwilson@mastodon.social how do you see that being related to the roles defined in the paper?
Replying to
@gvwilson@mastodon.social
@gvwilson@mastodon.social Rust has const as a language-level construct to represent fixed values, and also has a std library type for one-way flag.
Replying to
@andrewnez__dup_21468@mastodon.social
@andrewnez when aiming for operational simplicity, feels like SQLite would be a better fit than Postgres, especially when all the interactions come in through the network anyway. (See also: Fossil?)
Replying to
@hanno@mastodon.social
@hanno@mastodon.social I think that change is pretty old and predates major AI use.
Replying to
@sven@social.treehouse.systems
@sven have been wondering if/how much funding would be needed to make (faster) progress on things like new SoC bringup etc?
Replying to
@scottjenson@social.coop
@scottjenson@social.coop @siracusa@mastodon.social this might be cool to mention on @atpfm@mastodon.social.
Replying to
@filippo@abyssdomain.expert
@filippo@abyssdomain.expert @dominik@mastodon.honnef.co sounds like a really interesting model, congrats on scaling beyond yourself!
Replying to
@samuelcolvin@fosstodon.org
@samuelcolvin @pydantic suggest you put in a salary range indication (and post to /r/rust).
Replying to
@nick@mastodon.social
@nick@mastodon.social I use Firefox always. Still some sites which fail to work correctly though.