Daily Shaarli

All links of one day in a single page.

July 14, 2026

lobste.rs is now running on SQLite | Lobsters

SQLite lessons:

  • The SQLite gem supports user defined functions (udfs) and we used it to implement some missing functions in SQLite like regexp, if and stddev so that we wouldn't have to deal with too many sql migration workarounds.
  • SQLite doesn't support unsigned bigints. Previously, the mariadb was using unsigned bigints for certain ids, so we had to switch those to bigints for the migration.
  • Collation in SQLite is rather weak compared to MariaDB. Lobste.rs used utf8mb4_general_ci in MariaDB, but used NOCASE in SQLite. The downside of NOCASE is that it only supports ASCII characters, not the full UTF case folding.
  • Use the preferred Contentless-Delete Tables in SQLite for your full text search tables. These are not the default. I'm constantly surprised by the default choices of SQLite.
    [...]
    Overall lessons:
  • I think a key ingredient in making this work was good communication from everyone that participated. I don't think this would have been possible otherwise.
  • Migrating the underlying database without having access to the production database is really hard to get right. This was my first underlying database migration without having access to production. One lesson I'll take away from this is that I'll make sure to have realistic dataset sizes before doing another underlying database migration in the future.

Wishes:

  • I wish we could say in a test, "Fail if you encounter any full table scans". Which would have caught the perf issues we experienced during the first deploy.
  • I wish creating a production like dataset would be much easier than having to manually write something and waiting a week.
My Thoughts on the Bun Rust Rewrite - Andrew Kelley

By the main developer of the Zig language

Internet protocols are changing | APNIC Blog
Blog Stéphane Bortzmeyer: RFC 9846: The Transport Layer Security (TLS) Protocol Version 1.3
Mari Nelepen – Marketing portal

À vendre
Ce domaine de marketing est à vendre : toute offre supérieure à 25 000 € HT sera prise en considération. Veuillez envoyer votre proposition avant le 21 juillet 2026 à l’adresse servicedesk@score-worldwide.com. Nous avons légèrement prolongé le délai afin de donner à RN ou à Marine Le Pen l’occasion de présenter une proposition sérieuse.

sftcd/tinfoil: TLS Is Not For Obligatory Interception Lovers

This repository is a place to collect together arguments for not breaking TLS. By "breaking TLS" I mean significantly weakening the protocol, or implementations or deployments of the protocol, so that the security claims made in the protocol specification can no longer be credibly maintained.

Le blocage DNS casse tout sauf le piratage (dixit Google) - Korben

Google annonce documents à l'appui que le blocage DNS ne sert à rien, et provoque des dégâts collatéraux.

Maintenant, c'est vrai que Google ne joue pas les chevaliers blancs par pure bonté d'âme. En fait, ce qu'ils défendent, c'est leur résolveur maison, leur cloud et leurs clients. Elle reste par exemple très silencieuses sur tous les projets de loi de blocage qui avancent en ce moment même au Congrès américain.