Sync that has never broken for me and works on a phone. My attempts at keypass with both google drive and syncthing invariably ended up with me needing to periodically do manual reconciliation. I’ve never had this problem with bitwarden. Also, bitwardens passkey hooks work on iOS. They appear unsupported by keepassium.

don’t sleep on frost owl. Owl heads are kind of round so it would make a good icon.

“Consecutive normal punches”

His roasts be literally disgusting. He’s off by 2x. Does that mean I only have to slap the chicken at about 2k mph to cook it like a normal person.

I keep reading about the “supply chain.” I will just leave this here. https://www.softwaremaxims.com/blog/not-a-supplier

Its worth adding, TikTok in China (it's called something else, I'm blanking) is entirely controlled on the state and there is absolutely no way that it would be permitted to host any political discussion or advocate mass action not approved by the state. Their "Hey call your congressman" stunt was the most idiotic PR move ever, because they demonstrated that this company is willing and able to leverage the userbase in the US in ways that would never be permitted in "West Taiwan".

I'm still onboard with rust as being better than C, however...

My understanding is that it is considerably harder to correctly write unsafe rust than it is to correctly write c, because if you accidentally violate any of safe rust's guaranteed invariants in an unsafe block, things go bananas.

Today in Zig

Spent most of the time running down annoying typos in the tokenizer.

Modern optimizing compilers are magical. I would need to check assembly but I would actually expect the if to be hoisted out of the loop entirely to relieve pressure on the branch predictor.

You need to me careful about benchmarking to find performance problems after the fact. You can get stuck in a local maxima where there is no particular cost center buts it’s all just slow.

If performance specifically is a goal there should probably at least be a theory of how it will be achieved and then that can be refined with benchmarks and profiling.

I can't remember exactly what all the pieces are. However, I believe its a combination of

• cgroups: process isolation which is why you can see docker processes in ps/top/etc but you can't for vms. I believe this is also what gets you the ability to run cross distro images since the isolation ensures the correct shared objects are loaded
• network namespaces: how they handle generating the isolated network stack per process
• some additional mount magic that I don't know what its called.

My understanding is that all of the neat properties of docker are actuall part of the kernel, docker (and podman and other container runtimes) are mostly just packing them together to achieve the desired properties of "containers".

I suspect they meant it runs natively in that it’s an aarch64 binary. It’s still running a VM under the hood because docker is really just a nice frontend to a bunch of Linux kernel features.