Profile avatar
briansmith.bsky.social
https://briansmith.org
42 posts 792 followers 90 following
Regular Contributor
Active Commenter

Could you possibly care about my schedule? I hope not. But there is a not-insignificant chance that you do if you are reading this. I have a little note for you: github.com/briansmith/r...

If you have an interest in *ring*, the 0.17.10 release is an important one to prepare for. A brief note to help you out: github.com/briansmith/r...

In order to help people, especially packagers, update from *ring* 0.17.8 to 0.17.9, I’ve started a thread github.com/briansmith/r....

Released *ring* 0.17.9. X25519 is about 20% faster for GCC users (clang got it in 0.17.8). AES-GCM is slightly faster. Auditing the code for memory safety and panic-freeness should be easier now. Expect 100% compat with 0.17.8, but MSRV was raised from 1.61 to 1.63; still Debian-Stable-friendly.

New study on the effect of driver aids on crash risk: - Lane keep assist: -19% - Driver monitoring systems: -14% - Automatic emergency braking: -10.7% - Adaptive Cruise Control: +8% - Cruise Control: +12% No data on speed limit alerts though. www.sciencedirect.com/science/arti...

I wish I wasn’t the kind of person to question whether a language’s mutex implementation guarantees acquire/release semantics.

Rust Rules! (Programming Language-Wise) www.eejournal.com/article/rust... Ferrous Systems has carved out a leadership role with respect to Rust solutions for safety-critical systems. Its flagship tool chain, Ferrocene, has achieved IEC 62304 Class C qualification for medical device software.

It's a big week for voting technology. We're launching VotingWorks, the voting system we've been hard at work on for six years. Transparent, secure, and easy to use. So every American can trust their ballots are counted correctly. voting.works/machines

You are: 🧑‍🎓 a prospective intern 🦀 interested in rust 🔒 and functional safety ☀️ available this summer 🇯🇵 to work in Japan 👇👇👇 woven.toyota/en/careers/d...

I want to share my experience today with Google support, trying to get Gemini (their AI/plagiarism machine) turned off in my Google workspace account. That account is where I personally do all my work communication—I am an editor, and most of my work contracts explicitly ban any use of Generative AI

Time to deprecate & remove wasm32-unknown-unknown. It is basically the same as a WASI 0.2 environment that exposes no components. It’s easy to create a minimal WASI 0.2 environment that implements wasi-random—or whatever—by delegating to the host (browser, etc.). This would simplify many libraries.

Thinking about switching to RedNote Actions for CI. I heard it has native loongarch64 support.

NEWS: The massive Chinese hack of U.S. telecoms breached firms Charter, Consolidated and Windstream as part of a historic espionage campaign. Security vendor Fortinet was a key intrusion point. Investigators are still grappling with the damage. That and much much more: www.wsj.com/tech/cyberse...

If magic links work well for signing into your website then passkeys are probably a poor alternative for improving sign-in convenience, as they are overkill and the costs associated with them are high, especially end user support costs. Why not OpenID Connect w/ Discovery using the email address?

Saw Wicked, the stage production, in L.A. last night. It was truly a masterpiece of art. I usually avoid musicals of all sorts, and I seem to annoy people with my Hamilton review (“absolutely not worth the ticket price”). Especially if you have no interest in it, consider giving it a go.

When I order something from overseas on eBay I reliably (100% of the time) get a phishing text related to my package being stuck in customs. Receiving this message is the primary & only mechanism by which I learn my package has arrived in the US before it shows up at my door a few days later.

If you have chopped down a tree, drug it into your home, placed it in a pot of water, and decorated it with lights, then it is highly likely that you plugged it into whatever outlet that room has. If it isn’t a GFCI outlet, you can get an “inline” GFCI cord/wall-wart for this.

AFAICT, the best defense against disasters (e.g. fire) caused by water (rain/sleet/snow/hose overspray) in electric decorations (e.g. Christmas lights) is the exclusive use of GFCI power outlets. If you don’t have conveniently-placed GFCI outlets, inexpensive “inline” GFCI adapters are available.

Supply chain attack via a shell injection in a PR branch name (!) due to unsafe use of GitHub Actions' pull_request_target. Inserted a crypto miner in the PyPI package. Paging @yossarian.net to the courtesy phone. Would github.com/woodruffw/zi... have caught it?

This was stabilized in Rust 1.81 as std::hint::assert_unchecked (doc.rust-lang.org/std/hint/fn....), while the functionally equivalent `if !cond { std::hint::unreachable_unchecked() }` has been stable since Rust 1.27, released in 2018.

Many Californians seem to feel too overwhelmed by the daily grind to do anything to make this world more beautiful. But there is something you can do, no matter how busy you are: You can remove the compliance stickers from your cars’ driver side window. Please! Encourage others do the same.

Let's Build a FIPS-validated Rust Crypto Library: briansmith.org/lets-build-a...