Hacker Timesnew | past | comments | ask | show | jobs | submit | Telaneo's commentslogin

Go ask FFmpeg what they're writing their encoders and decoders in.

That isn’t particularly helpful to someone asking a question in good faith. What others are using doesn’t clarify why they are using it. Plus, FFmpeg is itself a decade older than Rust. The OP is asking about starting a new project today.

> What others are using doesn’t clarify why they are using it.

It does if you ask them, or at least research the topic at hand.


Isn’t that just the same as answering “Google it”, then? We’re on a discussion forum, where matter experts visit, talking about a specific topic. If one can’t ask their questions in this highly relevant situation, where can they? The point of HN is supposed to be gratifying curiosity.

Just don't try reporting a security issue to them.

Is this a reference to this: https://qht.co/item?id=45785291 ?

If so, FFmpeg's stance is very understandable in my opinion.


Somewhat, but somewhat not. Yes it's a very obscure format, and yes it's partially a marketing stunt from Google for their AI tools. But it's also a real bug which is exploitable on ffmpeg. And we have seen in the past that state sponsored hacking groups specifically target media decoders with obscure formats that aren't often tested or known about.

Media decoders are one of the highest risk programs since they deal with untrusted user input and are incredibly complex. So just because a large project like ffmpeg uses C, doesn't mean there isn't very good reason to consider a language like Rust for saftey reasons.


If Google want secure encoders and decoders, then they can donate money or patches. Since they don't, the clearly don't actually care all that much, or are just mooching of volunteers' goodwill.

The disadvantage in speed when using Rust is pretty obvious.[1] When it comes to video encoding and decoding, I and FFmpeg care a lot more about speed than memory safety. So those reasons have been considered and largely discounted.

[1] https://xcancel.com/FFmpeg/status/1924137645988356437 (to be fair, this is only transpiled from C, so it could probably be optimised further, but that apparently needed a 20k USD bounty to then not even happen (as far as I can tell))

[2] https://www.memorysafety.org/blog/rav1d-perf-bounty/


Looking forward to a decently speedy encoder coming around. The reference one for AV1 is really not that great, and the same is true here. But as soon as we get SVT-AV2 or whatever, I'll be a very happy camper.

Sound like a Chrome/Youtube problem. My 2012 Macbook Pro plays 1080p AV1 just fine in VLC (pretty sure Youtube works fine too in Firefox, but I didn't check whether or not it was AV1 or H264).

For reference: dav1d 0.5 can decode 143 FPS of a 1080p 8-bit video on a third gen core i7.[1] I doubt there's been much in the way of regressions since then. 10-bit and 4k is obviously a lot more heavy, but not really relevant to older devices.

[1] https://www.phoronix.com/news/dav1d-0.5 (it's mislabled as a core i3, but the 3770K is a core i7).


Bad regulation should't be reperesentaive or regulation as a whole. If you don't get it right the first time, you're allowed to try again, and that's what should be done with regulations providing bad incentives.

Gaming has already gone though a period of pushing subscription games, and most died, since people generally didn't want to pay a fee per game they played. That only left the big players in that space, while everybkdy else went back to releasing games the normal way. I fail to see why things would go a different way this time around.


The legal system is kind of like an evolutionary process. We try things, see if they work, and adjust over time. So far I think this has indeed led to a better legal system, but I can see why the set backs and injustices of the world make that difficult to assess.

Regulation also creates jobs, even bad regulation, so there's almost a Keynesian argument to be had about its relationship to our economic system.


Bad regulation is representative of regulation as a whole, because most of it is bad, or at least ineffectual, particularly in California.

Blanket dismissal of regulations is about as silly as a blanket dismissal of laws. Some laws are "bad", some are "good", but the point is who do they hurt, and who do they serve? Regulations are tools, like laws, and can be written to serve the needs of the people, for good things.

I'm not even saying this should be dismissed with a blanket dismissal.

First example is a reminder that regulation can be bad.

Second is an actual concern about this specific regulation. This is a concrete concern about the incentives it creates. There wasn't a single response to this comment about exactly WHY questioning effectiveness of it is irrational.


> Second is an actual concern about this specific regulation. This is a concrete concern about the incentives it creates.

Like I said in my OP comment, the problem with saying "this regulation will push devs to subscription-based game models" is that it does not explain why that would happen. It just assumes it would.

This argument to me is like saying "forcing people to wear seatbelts will push them to take the bus instead". Why would this be such a problem that people ditch their whole mode of transit? I see it that way because I can't think of a single case where designing your game server architecture with decommissioning and redistributing to your users in mind would be difficult or costly at all, and I have seen no convincing explanations


I think a study of regulatory capture would definitely support your views

Extraordinary claims require extraordinary evidence.

I wish subscription games could be preserved too, but this is probably about as good as it's going to get.

I doubt companies are going to go all in on subscription games, since that's more or less been tried and failed, and only WoW and a few others are left standing from that. Or maybe they'll try and fail, since the temptation is just too great (think Sony and Concord trying their luck with hero shooters, even though everyone with threw or more brain cells knew it would never make back what it cost).


I was really hoping that the WMF could manage to not shoot itself in the foot for a while, and I guess it's been nearly 7 years since Fram was banned and unbanned, so I guess it's about time.

> Who runs around the web in 2026 allowing random JS?

Within a rounding error, 100% of people on the internet.


It’s a lot higher pct when you count vpns with JS filtering, ad blockers, etc.

Even then, they're using disallow lists. If you go on a random web page with novel JS, then that'll still be run.

The only people working of allow lists are the people running NoScript and the like, and those truly aren't running random JS. But those people are a rounding error compared to the greater internet.


If you have access to a Norwegian IP, then yes.

So if you load AOSP and don't use Google Play Services, then you're exempt?

I would hope so.

Simple. You don't.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: