How do you responsibly disclose to 15 thousand websites?

You don't (well not unless you want to run a mass email campaign that is indistinguishable from spam)

Ah, my bank. They're actually kind of bad all round and I am going to switch to something actually modern eventually but you know, switching banks is not something you do casually

It honestly does feel like astroturfing. I use Gemini models across a range of client and personal projects, in AI Studio and GCP and they just work.

Maybe it's a b2b vs b2c thing.

Third, many of them are maintained by people with vested interests - for example they're an "awesome list of marketing automation tools" and the author is the owner of one such tool.

It's not just about demand, it's about do you think valuation that prices them into serving 1000x that demand is worth paying for.

Yup.

I am currently throwing a lot of tokens exploring various theories of speeding up matrix multiplication on Metal.

If you won't be ambitious why do you assume somebody else will?

Tell that to legal firms and patent guys

Honestly it's time to get rid of C as a language used where security is a factor. Enough already. Why the hell is a lib like brotli that processes public general internet traffic, and maintained by google, not in rust?

Security is a factor everywhere. And C is everywhere. There's not going to be a "rewrite everything in Rust" project until after there is some legit penalty for selling / offering software in C that could be more secure in another language.

I think Mozilla got it right when they abandoned the effort to rewrite the entire browser in Rust and instead focused on analysis of which modules needed priority rewrites. If a module has historically had zero memory-related bugs, then there are other higher priority things to spend time on.

That said, Google Project Zero should have had Brotli on their radar. Hopefully they still have people and resources.

I’ll point out that Servo was always a research project — any thought of it replacing Gecko was an incredibly long-term stretch goal. It was _a lot_ more interested in “can we write a high-performance browser engine in Rust” (there’s a reason why it significantly predates Rust 1.0 — they were very much developed together!) and “can we implement parallelism in places where browsers historically have not” (because you have more guarantees of safety).

Chromium _has_ been replacing certain components with ones in safe languages, and it seems like that will continue slowly (with integrating them into the existing codebase, with web compatibility risk of any changes in behaviour, with the risk of performance and power regressions).

Asterinax. RustPyhon. PHP 8.5 rewrite in Rust. FFMPEG and Qemu might follow soon. It's inevitable.

Sorry, I find the supply chain risks of Rust much more worrying than these memory safety issues. So how about we get rid of Rust? At least cargo is a problem.

Because these applications were created long before Rust existed.

There is a cost to conversion.

Rust-Brotli (by Dropbox) is actually a drop-in replacement for the Brotli C lib: https://github.com/dropbox/rust-brotli#:~:text=rust-brotli%2...

Dropbox switched to it a decade ago, so it's probably quite product-ready.

Brotil was actually created post rust, but before rust took off.

Check Librsvg, or php-rust. Or tons of gtk4-rs software doing it just fine.

It's not even an application it's a compression library

I can understand why people used a C library for these apps, as when HTTP2 was specified, the C lib was the only game in down.

However, why not switch to the Rust lib when it was available? I suppose people at Dropbox are now pretty happy they did in 2016: https://dropbox.tech/infrastructure/lossless-compression-wit...

It's slower, though. Too high a price to pay for safety it seems.

I think there's a difference between quantization and "gridification" - the latter removes swing too, everything goes to 4:4

Not really - gridification of swing usually defines a certain amount of swing and then gridifies to that exact amount - whether it's a pure triplet swing, something heavier, or lighter.