Reactionary Software?

submitted by fschmidt from self.programming

sorted by:
top
newinsightfulfun
you are viewing a single comment's thread.

view the rest of the comments →

[–]fatman 3 insightful - 1 fun3 insightful - 0 fun4 insightful - 1 fun -  (10 children)

While I love the idea of reactionary software, I hate the idea of writing any more Java code in my lifetime.

The JVM is one of my worst enemies.

What do you think about Rust and Go?

[–]fschmidt[S] 2 insightful - 2 fun2 insightful - 1 fun3 insightful - 2 fun -  (9 children)

What is wrong with Java and JVM? I looked at Rust and Go a long time ago. I hate Rust. Go is okay.

[–]fatman 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (8 children)

Java build system is outdated and painful.

What other languages ran for nearly 10 years with their most common logging package allowing remote code execution?

Java is the only language I have ever used where I import a package for something relatively simple and somehow the entire 4GB heap gets consumed.

Also the code is so verbose , but for what benefit? At least in Rust with the extra verbosity you get guarantees about data races not being possible, etc...

[–]fschmidt[S] 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 1 fun -  (7 children)

Why does one need a fancy build system? I just use "make" or compile all.

Why did you link to JNDI? I replaced Log4j.

All modern libs are bloated, you can't blame Java for that. Java with my libs is lean enough.

Rust looks really horrible to me. No garbage collection, for example. Also see this.

[–]fatman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (1 child)

Why does one need a fance build system? I just use "make" or compile all.

When you need to create and distribute self-contained executables for multiple OS that bundles dependencies (and their dependencies, and their dependencies, and resolves conflicts between all of them). In Rust and Go it's simple ... like 'cargo build' or 'go build' and everything is handled. What are you doing? Treading through a hellscape of jar, javac, and god forbid maven or gradle commands and tons of XML files?

Why did you link to JNDI? I replaced Log4j.

Because most java programs use Log4j, and since that JNDI change in 2013, most of those programs were left wide open to remote code execution. This got exploited in the wild at a massive scale. How pathetic... a logging package led to countless people and enterprises getting hacked... java is a piece of shit.

Rust looks really horrible to me. No garbage collection, for example. Also see this.

No garbage collection is a feature IMO. It's just faster. Also the language makes it easy to get rid of your resources, like automatically dropping locks or running destructors when you exit a closure, etc. (This is the Drop trait in Rust)

[–][deleted] 1 insightful - 2 fun1 insightful - 1 fun2 insightful - 2 fun -  (0 children)

muh dependencies

[–]fatman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (4 children)

When you gonna put HTTPS in front of your website? On plain old HTTP every middleman who handles this traffic gets to see everything in fulltext (and modify it maliciously while it's in-transit).

It's free and simple to self-sign a SSL certificate and stick it in front of your site.

[–]fschmidt[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (3 children)

Never, of course. This is exactly the kind of pointless complexity that should be rejected. No one is going to bother maliciously modifying my site in-transit.

By the way, my site is implemented in Luan which allows adding HTTPS with 1 line of code, but I still won't do it.

[–]fatman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (2 children)

You won't write 1 line of code to protect your userbase and keep their browsing habits private? As Joe Biden says, "C'mon, man!"

HTTPS is not perfect security of course. But it will prevent an entire class of exploits and snooping techniques.

[–]fschmidt[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (1 child)

Their browsing habits are tracked by the browser and sent to Google or Apple, so HTTPS doesn't keep this private.

[–]fatman 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 1 fun -  (0 children)

Would you rather have Google and Apple know (and any government who got a warrant)... or would you rather have EVERYBODY know?