johnpyp.dev

johnpyp.dev

@johnpyp.dev

9 followers42 following56 posts

This Rust serde_yml situation is actually insane. Author disabled issues, making random massive AI changes all across the codebase, causing UB, etc. Feels like there needs to be a RUSTSEC warning on this. This is absurd name squatting + awful behavior. See dtolnay’s twitter post if you haven’t…

I’d go so far as to say this behavior is so erratic as to potentially be hiding something malicious. +4k/-4k line diffs of meaningless stuff mixed with unsoundness. Great way to get xz vulns in there… Crate names like serde_yml come with great power, and this is a crazy example of misusing it.

It doesn’t quite make sense to me that people are going crazy about DeepSeek just *today*… V3 came out a month ago. R1 was released 7 days ago, and folks realized the importance from the get go. Why did it take so long for stocks to drop? The time lag is baffling. There’s no “new” info.

Other than OpenAPI or gRPC, are there any popular or mature RPC codegen’d frameworks that are good for both Rust and web? I hate that gRPC requires the gRPC web proxy. #rustlang #rpc

You are up to date.