Maybe it wouldn't matter either way if people stopped putting untrusted executable code into basic build processes.
You could get rid of a huge portion of the go standard library and have a massive ecosystem of leftpads, but the fact that `go build` can easily be run in off-line mode and doesn't execute any code other than the go toolchain itself, means you have a fundamentally more trustworthy ecosystem overall.
Rust, on the other hand, might keep you from a subset of buffer overruns, but it will gladly run obfuscated, untrusted code in your name when you wouldn't otherwise expect it to.
As an industry, we need to somehow stop making this mistake.
I do not think this is a "mistake". This is the result of different priorities.
Rust has done nothing to make me safer (although I agree that memory safety is desirable) and the supply chain issues make me less safe.
Still parts of the industry want it. If your business is putting locked down app stores and media-consuming devices in everybody pockets, than memory safety is much more important than for the rest of us.
> the fact that `go build` can easily be run in off-line mode and doesn't execute any code other than the go toolchain itself
You can trivially run Cargo in offline mode, via the --offline flag. Nothing about this capability, in either Go or Rust, results in a more particularly trustworthy ecosystem.
How would proof even look like? I don't think AWS digitally signs their invoices, and everything else can be faked just as easily as the original assertion.
A person bumps into at the train station. They just need $5 to get home. Could you just spare them $5? They had the money, but they lost their wallet and now they just need to get home.
Exactly. Considering you could buy an iPhone and a MacBook Neo for roughly the same cost … will be very interesting to see this device in action. Can iOS replace MacOS for a user that doesn’t need a local Xcode? Can I spend $2k for the device I use in my pocket and on my desk… and put the rest of my money into cloud/server infrastructure if I have that need?
Wouldn’t it be nice if services like Codespaces or Coder or Gitlab would allow you to target running on their hosted/integrated platform, or let you launch that same container completely locally? Sometimes I wanna take my “remote” dev environment off-line but still benefit from the integrated UX.
If you can express that operation in Terraform, then Coder would let you do that. First problems I can think of are connectivity from the Coder provisioner to your local machine (Tailscale? Local?), and migrating disk images if you want to actually switch a workspace between environments (local provisioner could do this, but no matter what it’ll be slow and janky).
> The towing numbers are always higher in Europe than US too, despite being the same cars (as far as I know).
Mostly due to differences in environment, AFAIK. Americans drive faster, and towing instability seems to increase with the square of the speed. Also, most travel trailers in the US wouldn't be car-towable anyway, because we have expectations on amenities and size that are predicated on using at least a half-ton pickup for the tow vehicle. Trailers with the compromises needed to be towed European-style aren't popular, so it becomes a self-reinforcing cycle.
“Results are compared to previous-generation Mac mini systems with Apple M4, 10-core CPU, 10-core GPU, 32GB of unified memory, and 2TB SSD.”