Rust

hideshow 10 child comments

[–] ZeSystem@programming.dev [S] -3 points 2 months ago (9 children)

Where is the evidence?

hideshow 9 child comments

parent

[–] gravitas_deficiency@sh.itjust.works 10 points 2 months ago (2 children)

Come on, dude. You deleted the original post you made about this in /c/rust because you got so many people calling you out specifically for this, and you are recreating the post here in an attempt to whitewash and misdirect. Stop it.

Seriously, that sort of shit should be a ban-able offense.

parent

[–] Spyro@programming.dev 4 points 2 months ago

I removed the original post.

parent

[–] ZeSystem@programming.dev [S] -1 points 2 months ago

I didn't delete it. The admin removed it due to bot/LLM accusations. I spoke with the admin and resolved it. I'm not a bot. Since the original post was gone, I created a new one. I'm not hiding anything.

parent

[–] one_old_coder@piefed.social 1 point 2 months ago (5 children)

The vibe-coded README. And everything else. Do you think we are stupid?

hideshow 5 child comments

parent

[–] ZeSystem@programming.dev [S] -1 points 2 months ago (4 children)

I'm a markdown expert, and i type emojis using Win + . no AI needed.

hideshow 4 child comments

parent

[–] one_old_coder@piefed.social 1 point 2 months ago (3 children)

I’m a markdown expert

Holy shit, it's impressive. That's like 5 minutes of dedicated learning! Is there a PhD for this?

hideshow 3 child comments

parent

[–] ZeSystem@programming.dev [S] -1 points 2 months ago (2 children)

No PhD, just Win + . and a lot of Rust. But thanks for noticing!

parent

[–] one_old_coder@piefed.social 2 points 2 months ago (1 child)

Is the Rust vibe coded from your ass?

parent

[–] ZeSystem@programming.dev [S] 0 points 2 months ago

No, it's written with my hands and a lot of coffee. You can check the code. It's open

parent

[–] TehPers@beehaw.org 5 points 2 months ago

I want to explain what this is to my kids. Can you describe it in a way that Dr. Seuss would?

[–] CameronDev@programming.dev 5 points 2 months ago (16 children)

Some feedback:

let remote_url = "https://gist.githubusercontent.com/ZeSystem-Inc/20ddc1ac41d73c6033cee3b4a5ab1a85/raw";

You have effectively hardcoded the list of software you support, ideally you should be able to dynamically update the list, otherwise you have no way to revoke or update versions if required. And if its hardcoded, why bother network requesting for it, just build it into the binary. Would be a little larger binary, but even faster.

No dependency resolution – eliminates fragility.

Meaningless, there is no dependency resolution because thats done for you by the installers.

Written in Rust – memory-safe, zero-cost, ultra-fast.

The task you are doing is entirely IO bound, rusts performance is irrelevant.

hideshow 16 child comments

[–] ZeSystem@programming.dev [S] -1 points 2 months ago (12 children)

Actually, it's not static. I'm updating the package list.

hideshow 12 child comments

parent

[–] CameronDev@programming.dev 3 points 2 months ago (8 children)

Updating the gist gives a new URL no?

hideshow 8 child comments

parent

[–] ZeSystem@programming.dev [S] -2 points 2 months ago

No, when I edit the gist, the URL doesn't change. There are 32 packages right now. I've just added Epic Games. I use GitHub Gist.

parent

[–] ZeSystem@programming.dev [S] -4 points 2 months ago (6 children)

I think you should use wid. I already use my own download tool. It's better than winget, choco, and ninite.

hideshow 6 child comments

parent

[–] CameronDev@programming.dev 9 points 2 months ago (5 children)

Better is a wild claim.

You're right, gists do seem to update with the static url, however that isnt necessarily better, it now means your gist is effectively under your control, and you can replace the installers with malware packed ones. Operating a software repository/installer requires that people trust you, and that is basically impossible for a no-name dev with no history.

You ideally should be doing checksum checks as well.

hideshow 5 child comments

parent

[–] ZeSystem@programming.dev [S] -2 points 2 months ago (4 children)

I use official links and check versions.

hideshow 4 child comments

parent

[–] CameronDev@programming.dev 6 points 2 months ago (3 children)

Sure, you might today, but tomorrow? How can anyone trust that you wont start serving malicious links?

hideshow 3 child comments

parent

[–] ZeSystem@programming.dev [S] 0 points 2 months ago (2 children)

It's open source. Anyone can audit it. You can create your own sources.list, but if you distribute it, you must open the code. Also, "wid info <package_name>" shows the exact URL it downloads from. Example: wid info llvm shows the official GitHub release link.

parent

[–] CameronDev@programming.dev 4 points 2 months ago (1 child)

Thats how it works in theory, but in practice it comes down to trust more than anything else.

Its more effort to read and validate your list than it is to just go and download the installer directly. So you need people to trust you.

parent

[–] ZeSystem@programming.dev [S] 1 point 2 months ago

You're absolutely right. Trust is the real challenge, and I'm just starting to earn it. That's why I keep everything open and plan to add checksum verification. I know it takes time. I'm in it for the long run.

parent

[–] one_old_coder@piefed.social 1 point 2 months ago (2 children)

it’s not static

It is static. Please stop, it's embarrassing.

parent

[–] ZeSystem@programming.dev [S] -1 points 2 months ago (1 child)

The URL is static. The content is dynamic because I update the Gist. That's how Gist works.

parent

[–] one_old_coder@piefed.social 2 points 2 months ago*

And it's a very bad and dangerous idea, I'll leave it as an exercice to the reader.

parent

[–] ZeSystem@programming.dev [S] -1 points 2 months ago (2 children)

Actually, I have a Gist for this that you can use. I update the Gist from time to time. In fact, the sources.list file can be customized specifically.

parent

[–] exdor@programming.dev 1 point 2 months ago* (1 child)

The point is that you pinned a specific commit instead of a branch like main

And yeah calling dependency resolution fragile is weird. It is not an actual package manager, just a download tool.

parent

[–] ZeSystem@programming.dev [S] -1 points 2 months ago

I already use tags for releases. The commit hash is for development. You can check the releases page.

parent

[–] INeedMana@piefed.zip 4 points 2 months ago (7 children)

How could Wid help me type like this person does?

hideshow 7 child comments

[+] ArsonButCute@programming.dev 4 points 2 months ago (6 children)

[deleted]

hideshow 6 child comments

parent

[–] INeedMana@piefed.zip 9 points 2 months ago* (last edited 2 months ago) (5 children)

Look at OP's history. It's an LLM that in some other post got entangled into writing limerics for commenters. I started looking for an publicly available iocaine instance but couldn't find any. So who knows, maybe sending that LLM after San might poison it just a little bit? Even if it would only be in the comment, that would still be a small win

I get where you're coming from. But my comment is not a jab at San