Coughing baby vs. atom bomb

>120k LoC of probably largely vibecoded nonsense for a window with a text box and a button that lets you send and receive some data over a HTTP API.

"I will make loads of assumptions without checking so that I can invent reasons to get mad"

Note that about 30,000 of those lines are JSON files for localization and testing, as one example.

How much UI text does this thing have that it needs thousands of lines of localization? Where are these files?

Especially curious because I see a whole lot of hardcoded english text in there…

Are you arguing that 90k LoC for a window with a text box and an overengineered textarea tag is somehow more acceptable than 120k?

There is "only one Firefox" but Firefox exists in a market that is not just commoditized, but subsidized to the tune of billions by 3 of the 10 largest companies in the world.

The world may need Firefox but it's funny how people complain about Mozilla's dependence on Google while also complaining about every attempt to become more financially independent from Google.

People "want" a lot of contradictory things. People "want" them to be less financially reliant on Google, while also "focusing" on a browser in a market that is entirely commoditized and subsidized by 3 of the 10 largest companies in the world - and having a wholly implementation independent browser engine when it's so massively difficult and capital intensive that even Microsoft gave up on it.

Firefox incorporated parts of the Servo effort which were able to reach maturity. Stylo (Firefox's current CSS engine) and Webrender (the rendering engine) and a few other small components came from the Servo project.

Most other parts of Servo were not mature enough to integrate at the time Mozilla decided to end support for the project and didn't look like they would be mature enough any time soon. The DOM engine for example was in the early stages of being completely rewritten at the time because the original version had an architecture that made supporting the entire breadth of web standards challenging.

Keep in mind that you can continue adding Rust to Firefox without replacing whole components. It's not like Mozilla abandoned the idea of using more Rust in Firefox just because they stopped trying to rewrite whole components from the ground up.

I think it just depends on whether or not you interpret the phrase "no one knows" neutrally or pessimistically.

Saying that there could be something there, but "no one knows" doesn't mean that there is something there. But it's still true.

If that's the case, it would be a lot simpler (and equally accurate) to say that "no one knows" what the source repo is doing, either! The median consumer of packages in any packaging ecosystem is absolutely not reading the entire source code of their dependencies, in either the ground truth or index form.

That's certainly true - and would also be true (maybe even moreso) if vendoring dependencies was widespread. Seems just as easy to hide things in a "vendored" directory that's 20x the size of the library.

Do you think only the Israelis are pissed about the Iranians funding the Houthis and Hezbollah?

The Saudis were at war with the Houthis for several years, Hezbollah assassinate Lebanese politicians and repeatedly starts wars that nobody else in Lebanon wants, which also includes intervening in the Syrian civil war on behalf of Assad and starving out Syrian villages. Ask the Syrians how they feel about Hezbollah.

>No state-sponsored hacking affected Americans materially.

Uh, what?

NotPetya was kind of a big deal.

Not in the US. I had to look it up and I work in infrastructure software

That is unequivocally true with some things. You don't want people exercising their "self-determination" to own private nukes.

LLMs aren't nukes.

They're more like printing presses or engines. A great potential for production and destruction.

At their invention, I'm sure some people wanted to ensure only their friends got that kind of power too.

I wonder the world we would live in if they got their way.

An LLM that can hack anything is not as harmless as a printing press. Please stop pretending it is.

There's a simultaneous push coming from the government to support PQC, ASAP, so it's not just researchers pushing this.