Hacker News: dochtman

The Rule of Three and Four

dochtman — Tue, 12 May 2026 10:53:29 +0000

Article URL: https://www.bcg.com/publications/1976/business-unit-strategy-growth-rule-three-four

Comments URL: https://news.ycombinator.com/item?id=48106472

Points: 1

# Comments: 0

New comment by dochtman in "Let’s Encrypt – Stopping Issuance for Potential Incident"

dochtman — Fri, 08 May 2026 20:24:27 +0000

A lot of Let’s Encrypt is not the software but a bunch of auditing and process that ensure compliance and make it legible to the required auditors.

Weekend at Bernie's – assessing critical open source repos

dochtman — Fri, 08 May 2026 15:00:09 +0000

Article URL: https://nesbitt.io/2026/05/08/weekend-at-bernies.html

Comments URL: https://news.ycombinator.com/item?id=48064183

Points: 4

# Comments: 0

GitHub Actions is the weakest link

dochtman — Tue, 28 Apr 2026 11:58:14 +0000

Article URL: https://nesbitt.io/2026/04/28/github-actions-is-the-weakest-link.html

Comments URL: https://news.ycombinator.com/item?id=47933257

Points: 252

# Comments: 93

Bringing Rust to the Pixel Baseband

dochtman — Sat, 11 Apr 2026 21:59:35 +0000

Article URL: https://security.googleblog.com/2026/04/bringing-rust-to-pixel-baseband.html

Comments URL: https://news.ycombinator.com/item?id=47734393

Points: 2

# Comments: 0

New comment by dochtman in "Hickory-DNS: a Rust based DNS client, server, and resolver"

dochtman — Mon, 23 Feb 2026 09:52:52 +0000

That's the policy, but we've been a bit more conservative in practice. `main` currently targets 1.88, but that's only because a security issue in the time crate has forced our hand (one reason I don't like the time crate all that much). Before that, it was 1.83 (from November 2024). Our last release targets 1.71 (from July 2023).

New comment by dochtman in "Swift is a more convenient Rust (2023)"

dochtman — Sat, 31 Jan 2026 23:15:24 +0000

I'd bet a supermajority of Swift commits comes from Apple developers. Pretty sure the rust-lang/rust commit authors would be much less centralized.

New comment by dochtman in "Mermaid ASCII: Render Mermaid diagrams in your terminal"

dochtman — Thu, 29 Jan 2026 09:27:47 +0000

mmdr: 500-1000x faster Mermaid rendering, zero browser dependencies

dochtman — Thu, 29 Jan 2026 09:27:04 +0000

Article URL: https://github.com/1jehuang/mermaid-rs-renderer

Comments URL: https://news.ycombinator.com/item?id=46807750

Points: 3

# Comments: 0

New comment by dochtman in "Is Rust faster than C?"

dochtman — Thu, 15 Jan 2026 07:59:42 +0000

I think the way Rust checks borrows also makes it a lot more feasible to avoid allocations/copies; not because it is impossible to do in C, but because doing it in C requires writing very careful documentation and the caller to actually read that documentation. In (safe) Rust this is all checked by the compiler such that libraries can leverage it without blowing their complexity budget.

New comment by dochtman in "The State of OpenSSL for pyca/cryptography"

dochtman — Thu, 15 Jan 2026 07:54:07 +0000

There’s also a compounding effect: I’ve heard from a hardware vendor that they spend a lot of time optimizing OpenSSL to get the most out of their silicon, so for their customers they suggest using OpenSSL to get the most out of the hardware.

The state of the kernel Rust experiment

dochtman — Sat, 13 Dec 2025 07:14:21 +0000

Article URL: https://lwn.net/SubscriberLink/1050174/63aa7da43214c3ce/

Comments URL: https://news.ycombinator.com/item?id=46252712

Points: 119

# Comments: 130

New comment by dochtman in "Gnome is better macOS than macOS"

dochtman — Sun, 23 Nov 2025 17:22:13 +0000

How is the HiDPI situation, and font rendering? Last time I tried it on my M1 Max with Asahi it still looked substantially worse.

New comment by dochtman in "Fast UDP I/O for Firefox in Rust"

dochtman — Fri, 26 Sep 2025 21:10:42 +0000

I'm pretty sure private PKIs are an option that is pretty straightforward to use.

Security is still a lot better because the root is communicated out of band.

New comment by dochtman in "Fast UDP I/O for Firefox in Rust"

dochtman — Fri, 26 Sep 2025 21:08:45 +0000

When I asked about financial support, the Senior Principal Software Engineer from Mozilla I talked to said "Mozilla has no money".

To be fair, we've gotten a great amount of code contributions from the Mozilla folks, so it's not like they haven't contributed anything.

(I am one of the Quinn maintainers.)

New comment by dochtman in "Do the simplest thing that could possibly work"

dochtman — Fri, 29 Aug 2025 20:44:41 +0000

I would argue that regexes are often more complex than simple parsers.

New comment by dochtman in "Modern CI is too complex and misdirected (2021)"

dochtman — Wed, 20 Aug 2025 08:31:20 +0000

(2021)

New comment by dochtman in "CRLite: Certificate Revocation Checking in Firefox"

dochtman — Tue, 19 Aug 2025 18:55:35 +0000

CRLite is awesome, and it deserves more usage; notably most non-browser clients on Linux machines don’t get any revocation handling at all.

New comment by dochtman in "Ask HN: What toolchains are people using for desktop app development in 2025?"

dochtman — Sat, 09 Aug 2025 17:59:46 +0000

Tauri seems interesting. It combines a Rust core with the platform-native browser engine for presentation. Of course a potential downside is rendering incompatibilities between engines/platforms.

New comment by dochtman in "Ask HN: Have you ever regretted open-sourcing something?"

dochtman — Wed, 06 Aug 2025 07:02:29 +0000

No, they don’t.

Selling support contracts is actually hard.

GPL/AGPL preclude widespread adoption (these days) — the grandparent explicitly mentioned “permissive” licenses.