GitHub disables XZ Repository(www.phoronix.com)

posted 6 months ago

Wyre@sh.itjust.works

cybersecurity@sh.itjust.works

19 commentshide report

Sort:

Hot Top Controversial New Old

You are viewing a single thread.

View all comments View context

[ - ]

subtext@lemmy.world

8 points

6 months ago

Thanks for this! Good to know that Zstd seems to be a pretty much drop in replacement.

permalink

report

parent

[ - ]

sugar_in_your_tea@sh.itjust.works

8 points

6 months ago

It looks like someone made a Rust implementation, which is a lot slower and only does decompression, but it’s at least a rival implementation should zstd get some kind of vulnerability.

permalink

report

parent

[ - ]

Killing_Spark@feddit.de

8 points

6 months ago

Yep that would be me :)

There is also an independent implementation for golang, which even does compression iirc (there is also a golang implementation by me but don’t use that. It’s way way slower than the other one and unmaintained since I switched to rust development)

permalink

report

parent

[ - ]

sugar_in_your_tea@sh.itjust.works

1 point

6 months ago

Awesome! It’s impressive that it’s decently close in performance with no unsafe code. Thanks for your hard work!

And that Go implementation is pretty fast too! That’s quite impressive.

permalink

report

parent

[ - ]

Killing_Spark@feddit.de

1 point

6 months ago

Sadly it does have one place with unsafe code. I needed a ringbuffer with an efficient “extend from within” implementation. I always wanted to contribute that to the standard library to actually get to no unsafe.

permalink

report

parent

[ - ]

sugar_in_your_tea@sh.itjust.works

1 point

6 months ago

Ah, I saw a PR from like 3 years ago that removed it, so it looks like you added it back in for performance.

Have you tried contributing it upstream? I’m not a “no unsafe” zealot, but in light of the xz issue, it would be nice.

permalink

report

parent

[ - ]

Killing_Spark@feddit.de

1 point

6 months ago

Have you tried contributing it upstream?

I didn’t yet just because I didn’t get around to it (and because I am not sure the std lib even wants this feature).

I’m not a “no unsafe” zealot, but in light of the xz issue, it would be nice.

I don’t think the two relate. I wouldn’t drop any dependency, the ringbuffer is implemented in the same repo.

permalink

report

parent

Show more comments

Cybersecurity

!cybersecurity@sh.itjust.works

Create post

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We’re all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your “friends” socials you’re just going to get banned so don’t do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !cybersecurity@lemmy.capebreton.social !securitynews@infosec.pub !netsec@links.hackliberty.org !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

Community stats

1.6K
Monthly active users
1.3K
Posts
2.6K
Comments

Community stats

Community moderators