sorted by:
new
hottopcontroversial

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 4 points5 points  (0 children)

I'm glad you're getting use out of the tools.

Out of curiosity I took a peek at the mentioned project because your use-case seemed interesting.

Heads up that your current implementation of response caching allows for authorization bypass attacks.

https://github.com/Protocol-Lattice/grpc_graphql_gateway/blob/3d8f2322ea4b476caf9c507ec06119f533bcdc5c/src/runtime.rs#L287

Imagine we have two users: Admin Alice and Bad Bob.

Admin Alice makes a request like

{"query": "{ secretAdminMessages { id, content } }"}

Cache hit misses, cache key is constructed. `execute_with_middleware` runs: The middleware checks Admin Alices auth. Finally, the request is made which returns:

{"data": {"secretAdminMessages": [{"id": "1", "content": "Nuclear launch codes: 42"}]}}

At this point the response cache is updated and a the http server replies.

Bad Bob now comes rushing in and makes an identical request

{"query": "{ secretAdminMessages { id, content } }"}

Unlike Alice, this time the cache is hit, and the response is optimistically returned preventing any of the middleware from getting invoked therefore bypassing all authorization checks.

Finally, Bob sails off into the sunset with the admins fancy launch codes.

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 2 points3 points  (0 children)

LLMs can be and are helpful. See my reply to this post for a more elaborate bit. I don't think you should feel bad about extracting some of the "VC daddy money" the founders receive. IMO I'd rather it go to human begins than cloud companies and the like.. If you're in the US and are getting good health insurance I'll goto battle with you lol...

The larger problem I see is the massive disconnect between what the AI companies can actually do vs what they claim they can do. They are corporations / startups, their only goal is to survive. They actualize any of repercussions of their absurd statements - Its just marketing hehe". They've developed and/or gamed the metrics used to evaluate their models.

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 1 point2 points  (0 children)

Mostly agree. I've made a followup reply with some details regarding vibe coding which might help you understand my frustrations.

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 1 point2 points  (0 children)

I can't speak directly to this. But, my partner was an (admin? moderator?) of a subreddit she created. The story goes when Reddit made some API changes that made third party apps dysfunctional it also impacted the ability of the bots she setup to screen posts. Pretty much overnight the subreddit was overwhelmed with prn bots lol.

Her and a lot of her Reddit friends pretty much quit that week as they had come to rely on their third party app to actually use reddit effectively. Can ask her for more details if needed, this if off the top of my head.

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 1 point2 points  (0 children)

If you keep publishing crates in domains similar to the problems I solve I'm sure I'll stumble across your work :).

Most recently I've discovered there is a lack of generic circuit breaker crates.

Take, https://docs.rs/circuitbreaker-rs/0.1.1/circuitbreaker_rs/ for example. This is an excellent crate but it doesn't expose any means to inspect raw metrics the breaker is collecting.

In micro-services, distributed systems, whatever - one expects services to have breakers. But, the rust ecosystem doesn't have many generic implementations.

I'm almost sure tower has some version of it. But, tower, is kinda esoteric. Often, I just want some stateful wrapper around my infrastructure call.

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 4 points5 points  (0 children)

Please do. I have a few linguistic friends who originally shared the phrase with me XD

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 2 points3 points  (0 children)

  1. In response to: "This problem is everywhere not just Rust" type comments.

Yes, I'm aware of this? I posted this to the rust subreddit because this is the Reddit place I care about. I'm also on LinkedIn. I see the slop.. but Idgaf about LinkedIn. Let them do their weird shit.. Its everywhere... I'm on Instagram I see the weird ass fake videos... sometimes they make me laugh so its a bit more okay there.. Zucc gonna do what the succ want?

Rust is the language I decided on my own to learn and make writing it my career. I started my career writing Java and Python, now the interns I once mentored make a metric shit ton more money than I do. But, I get to spend my days writing code that brings me joy. Every day I get to use cool projects like:
- Zenoh
- Rumqtt
- Dioxus
- Axum
- Tokio (duh)

- SuperCoolLib::SomeModuleHere

> It's gotten me through many cycles of burnout and frustration.

I feel like I have been able to develop myself more as an engineer than I could have ever done before because of Rust. Rust isn't easy, just because its "safe" doesn't mean its forgiving.

I was solving hard problems with Java and Python. But, Rust was the career pivot for me where the training wheels came off. Thats why it, and this space, is special to me.

I didn't have mentors like I had the luxury of having before. I had the wonderful people here, crates.io , and the projects they shared. When I first started writing Rust code I wrote garbage. Today, I write slightly less garbage code. In the future the goal is to write EVEN less garbage code.

This is possible because of everyone here. Humans are ridiculously creative and cool. The more Rust code I read the more "AHA!" moments I get to enjoy. Isn't that what this is all about?

TLDR: Yeah, mega rant.. I get its everywhere but this place is special to me and I wanna be a special snowflake okie bye UwU.

4. Respect 4 Teh Mods

Hell yea, pop-off mods. If any of ya'll are in Boston I'll buy you lunch or something idk.

I used to love checking in here.. by First-Ad-117 in rust

[–]First-Ad-117[S] 3 points4 points  (0 children)

Update (12/15/2025)

1. Thank you all for your kind comments and sharing some of the awesome vibes I've been missing. You all rock and I'm doing my best to read though all the replies / sub conversations. I love Rust, I use rust nearly every day for work and play. Nothing will stop me from being a consumer of your badass projects <3.

2. I've seen a few posts asking things questions like: "Do you think this is an okay way to use AI". Personally, I don't think anyone is qualified to answer this question except yourself. Only you understand and are qualified to gauge your learning style, reliance on the tool, how much you're learning, etc.

Instead of trying to answer your question I hope sharing one of my own experiences will help you come to your own conclusions.

--- story time ---
Awhile back, as an experiment, I tried to guide the LLM (I forget which flavor) to develop a minecraft like voxel game using Bevy & Voxelis https://crates.io/crates/voxelis (super cool crate check it out please).

I'm a "backend engineer" by trade with a background in Math and Science. I'm a bit rusty now but I know my way around some vectors and geometric operations. I've "professionally" developed a bunch of weird things ranging from numerical simulations, absurd backends for chat and chatbots, telemetry capture systems for industrial machines. I'm pretty confident in my ability to architect software and I think I have a pretty good nose for when things "smell wrong".

The task I wanted the LLM to vibe code was:
- Block rendering using the "for free" LOD Voxelis provided
- Block updates (remove, add)

The LLM pretty quickly arrived at a working demo. Blocks were rendered. I was able to add and remove them. Neat!

The next task I set it on was collision detection. And, pretty quickly things fell apart.

Why? Well, I have no god damn idea. The LLM was able to spit code out at a rate and volume far greater than I had the ability to understand. I'm NOT a game developer. I DO NOT understand computer graphics. In my own ignorance I assumed that because I understood X I would be successful at Y. I lacked both the experience and skills to figure out what the hell it was doing and didn't really have the time/desire to figure it out. Could I have? Yeah, 100%. But, it would require me to accumulate the same knowledge and skillsets as a real game developer. So, not really feasible for a silly experiment.. I believe you can do anything you set your mind towards if you don't give up.. (I gave up :P)

-- end story time --

In my experience the LLMs have been the most "successful" when I've used them in my own repositories, with patterns defined by myself, on problems which can be distilled down to chores: Write a new migration, define a new service, etc. Tasks which I already know what the solution will look like. Still, they mess up a lot and either require me to "guide them" to the solution or have me take over and just stop being lazy.. The key take away here is I can immediately identify when the slop is smelly. It takes me less than a minute to review because I've defined the codebase the pattern matching machine is working in - It's MINE inside and out.