Hacker Newsnew | past | comments | ask | show | jobs | submit | classicposter's commentslogin

https://bsky.app/profile/jacob.gold/post/3msvjwys7lc2t

Hey, did the memory leak really solve with slop rewrite?


Memory leaks in Bun not in the javascript it runs


https://x.com/yagiznizipli/status/2082905235459117202

They were pleased to be faster than Go in the "Hello World" benchmark, but unfortunately, they lag behind Node.js and Deno in complex real-world workloads.


Yes, they probably don't know C ABI.


I recall an instance where he mocked the project as "Microslop" on his blog and then quietly edited the post later. That aside, the earlier rewrite from TypeScript to Go involved efforts to minimize regressions as much as possible—such as announcements to users and the community, and a phased, one-on-one migration. This project, however, is a different story. It becomes from a buggy product to an entire slop product.


> I recall an instance where he mocked the project as "Microslop" on his blog and then quietly edited the post later.

Sorry, this is wrong. Not relating Bun project.

https://web.archive.org/web/20260204011603/https://ziglang.o...

> Microslop Windows provides a large ABI surface area for doing things in the kernel. However, not all ABIs are created equally. As Casey Muratori points out in his lecture, The Only Unbreakable Law, the organizational structure of software development teams has a direct impact on the structure of the software they produce.


This slop rewrite introduced new vulnerabilities and regressions.


Care to elaborate?


He must be suffering from AI psychosis.


https://github.com/oven-sh/bun/issues/30921

> A CVE wasn’t announced for an HTTP Request Smuggling vulnerability

Even before the acquisition of Anthropic, there had never been a single vulnerability report.

https://github.com/oven-sh/bun/security

Do not use this in production.




https://github.com/oven-sh/bun/security

Surprisingly, they appear to have not disclosed any vulnerabilities whatsoever. It's likely there have been numerous vulnerabilities in the past, but they are all being ignored.

https://x.com/DavidSherret/status/2031432509301428644


This is really poor form given that Anthropic is going around getting all kinds of public goodwill for finding CVEs in other people’s products.


Yeah! Why would the company that stands to make themselves look better in front of an IPO do such a thing?! Next thing you're going to tell me was that this whole rewrite was another marketing ploy to help potentially turn themselves in multi-millionaires!


Yes, it is helpful for a company to be very clear that in a choice between the safety and integrity of their customers, and profit, they are choosing profit.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: