Hacker News: alsadi

Have you considered defusing SSH from the likes of xz backdoors?

alsadi — Mon, 01 Apr 2024 11:39:27 +0000

Article URL: https://bcksp.blogspot.com/2024/03/how-to-disable-xz-backdoor-or-alike-in.html

Comments URL: https://news.ycombinator.com/item?id=39893041

Points: 1

# Comments: 0

New comment by alsadi in "XZ backdoor: "It's RCE, not auth bypass, and gated/unreplayable.""

alsadi — Sun, 31 Mar 2024 16:00:22 +0000

Untill the entire scope of this is identified I suggest activating the kill switch

https://bcksp.blogspot.com/2024/03/how-to-disable-xz-backdoo...

I identified another bottleneck in WASM Python binding

alsadi — Mon, 20 Mar 2023 21:34:21 +0000

Article URL: https://old.reddit.com/r/WebAssembly/comments/11wwm5x/identifying_another_bottleneck_if_solved_wasm/

Comments URL: https://news.ycombinator.com/item?id=35239096

Points: 2

# Comments: 0

Show HN: I made calling WebAssembly from Python 25x times Faster

alsadi — Mon, 06 Mar 2023 08:28:35 +0000

I found a serious bottleneck in Python binding of Wasmer and Wasmtime and I found a trick to make 25x faster. Then beat all that using NumPy.

Comments URL: https://news.ycombinator.com/item?id=35038739

Points: 5

# Comments: 0

Why there are randomness in ranking algorithm?

alsadi — Sat, 04 Feb 2023 21:56:09 +0000

Article URL: https://medium.com/@alsadi/why-there-are-randomness-in-ranking-algorithm-11e6917d0ab8

Comments URL: https://news.ycombinator.com/item?id=34658797

Points: 2

# Comments: 0

New comment by alsadi in "Serving Files in Python: How FastAPI Failed Us"

alsadi — Thu, 02 Feb 2023 07:23:59 +0000

here I've eliminated uvicorn, nothing changed

https://gist.github.com/muayyad-alsadi/3a1e1cdbafca34df8b178...

New comment by alsadi in "Serving Files in Python: How FastAPI Failed Us"

alsadi — Thu, 02 Feb 2023 04:25:44 +0000

Many things have changed since the old days. In PEP 3333 sendfile is exposed as opposed to PEP 333 (so in the WSGI days they had no way of doing it, but in ASGI they can do it).

The assumption that nginx is always there no longer hold, specially in microservices, ex. Running behind haproxy (does not service static files) or running bechind cloud provides like AWS ALB.

New comment by alsadi in "Serving Files in Python: How FastAPI Failed Us"

alsadi — Thu, 02 Feb 2023 04:16:59 +0000

As I pointed out in my other comment, serving a static file should be a single call to a kernel routine called sendfile (sendfile in c or in python io.sendfile or loop.sendfile). No loop, no memory copy, no further context switch.

Again if you think I was not fair to fastapi, suggest a change to the fastapi part. Do not cripple the competing solution.

If you want believe the time is wasted by the introduction of uvicorn layer as opposed to pure python implementation, I can run the fastapi in pure python ASGI without that layer, it would be worse. Because you uvicorn is one of the best implements.

New comment by alsadi in "Serving Files in Python: How FastAPI Failed Us"

alsadi — Wed, 01 Feb 2023 23:41:04 +0000

BTW being ASGI is not excuse because ASGI spec (PEP 3333) have a section on how to expose and make use of sendfile kernel routine.

https://peps.python.org/pep-3333/#optional-platform-specific...

New comment by alsadi in "Serving Files in Python: How FastAPI Failed Us"

alsadi — Wed, 01 Feb 2023 23:33:03 +0000

I made it like that to be as fair as possible and as simple as possible. I've done other experiments with same results. If you think I was not fair to the fastapi part feel free to edit the fastapi part in the form of github gist. And give me the link.

New comment by alsadi in "Serving Files in Python: How FastAPI Failed Us"

alsadi — Wed, 01 Feb 2023 23:24:13 +0000

It's reported here and they suggest adding nginx with x-accel which is basically surrending.

https://github.com/tiangolo/fastapi/issues/5803

Serving Files in Python: How FastAPI Failed Us

alsadi — Wed, 01 Feb 2023 22:04:45 +0000

Article URL: https://medium.com/@alsadi/secret-sauce-is-zero-copy-single-context-switching-b749bd614dca

Comments URL: https://news.ycombinator.com/item?id=34618582

Points: 5

# Comments: 10

New comment by alsadi in "“Coding is basically just ifs and for loops.”"

alsadi — Sat, 04 Dec 2021 18:48:09 +0000

Computers are just infinite tape marked out into squares... (Turing machine). A pyramid is just a stack of cubic rocks.

New comment by alsadi in "Virtual DOM is pure overhead (2018)"

alsadi — Thu, 01 Jul 2021 08:23:01 +0000

I do agree. When I first see it I knew that. Comparing two sequences (actual dom and dom) to find diff is like O(n^2) and the assumption that dom ops is expensive is a lie (premature optimization). Dom ops on ids and classes and fragments is very fast. In most cases a slow dom is always a developer fault failing to use fragments.

New comment by alsadi in "How much faster is Redis at storing a blob of JSON compared to PostgreSQL? 16×"

alsadi — Sun, 29 Sep 2019 14:21:16 +0000

How about making it redis+msgpack vs. postgresql json-like?

New comment by alsadi in "Architecting Containers: Understanding User Space vs. Kernel Space (2015)"

alsadi — Sun, 11 Aug 2019 16:18:09 +0000

2015

New comment by alsadi in "Treat Medicines Like Netflix Treats Shows"

alsadi — Thu, 07 Mar 2019 16:57:51 +0000

We are big pharam, give us tons of money and hope that we cure you! We don't! we just treat you.

New comment by alsadi in "The CPython Bytecode Compiler Is Dumb"

alsadi — Mon, 25 Feb 2019 08:08:00 +0000

Some optimizations can be enabled

"python -OO -m compileall mydir"

But it's merely skipping comments and names

New comment by alsadi in "Tesla Model 3 Owners Vent About Polar Vortex Affecting Cars"

alsadi — Mon, 04 Feb 2019 11:10:58 +0000

I guess Prius is not affected. But Prius is borning.

New comment by alsadi in "Why does APT not use HTTPS?"

alsadi — Tue, 22 Jan 2019 20:56:10 +0000

> Kazakhstan forces their citizens to install government-issued certificate to use SSL.

So why debian/ubuntu vulnteer to remove this layer? Why doing the equivalent of installing random certs for every gov/isp on every user?

Yes, government can force someone to install it, but it won't use force on every single person.