| Github | https://github.com/edwintorok |
| Lobste.rs | https://lobste.rs/~edwintorok |
| https://www.linkedin.com/in/torokedwin |
| Github | https://github.com/edwintorok |
| Lobste.rs | https://lobste.rs/~edwintorok |
| https://www.linkedin.com/in/torokedwin |

How we restructured TESSERA's geospatial embeddings from millions of individual numpy files into sharded Zarr v3 stores for efficient HTTP streaming, enabling everything from single-pixel mobile lookups to regional-scale analysis with just a couple of range requests.
I'm pretty happy what we at robur achieved over the years in terms of deploying #MirageOS unikernels, take a look yourself http://webmshare.com/play/QG0jJ
What you see is the deployment of the unikernel "unipi" (https://github.com/robur-coop/unipi) named "website", with a remote to my blog repository.
Now, dnsvizor (https://github.com/robur-coop/dnsvizor) hands out IP address (DHCP) and registers the name "website.mirage". It also acts as DNS resolver.
What we see next is the website served by the just deployed unikernel (on http://website.mirage).
The last bit we see is the query log of the dnsvizor resolver (at 10.0.42.2 -- out of a habit, http://dnsvizor.mirage would work as well). Here we see that the website.mirage unikernel requested git.robur.coop (both A and AAAA records), and later firefox looked up website.mirage.
The initial web interface is mollymawk (https://github.com/robur-coop/mollymawk).
Running on albatross https://github.com/robur-coop/albatross
This has been achieved thanks to the brilliant robur team and NGI funding :) 🎉 🙌🏾
@david_chisnall long ago I used to file my taxes in Romania by taking a USB drive to their office (I don't live there anymore, but nowadays you can file them online).
Every single time I got some kind of malware in return (well I used Linux, so an unwanted .exe could only have been malware). So whatever antivirus solution they were using, it was ineffective. Similarly whenever students would ask a professor for a copy of their slides on a USB drive: they'd sometimes get some malware along with it.
It seems like in places like this a very simple anti-malware solution would've been to flag any new executable being copied from or to a removable and writable drive as malware, especially if it is accompanied by autorun.inf. Autorun.inf on a writable removable drive is a very bad idea (not that it is a better idea on a CD-ROM, but it is too late to change that).
@dinosaure nginx is going to be hard to beat. But it is interesting that the scalability shape between OCaml and nginx is not that different. Nginx just has the advantage that its single core performance starts from a much higher point.
I'm assuming these are all HTTP/1.1 benchmarks? Unfortunately `wrk` and `wrk2` don't support http/2, but I found this tool that does: https://nghttp2.org/documentation/h2load-howto.html
@david_chisnall https://github.com/llvm/llvm-project/blob/main/clang/tools/clang-format/git-clang-format would this help? IIUC it only formats what you changed.
If the 2 styles are too different from each other you'll end up with an inconsistent style in the file though.
If you do reformat the whole codebase then a merge driver could help [e.g. with outstanding PRs/branches) (it reformats all 3 sides of a merge, and is usually able to avoid conflicts most of the time that way) https://github.com/emilio/clang-format-merge.
(Or equivalently if you use `jj` there is a configuration option to autoformat each commit).
You can also define certain commits to be ignored by 'git blame', e.g. the reformatting commits.
I haven't tried this with clang-format, but the equivalent steps with `ocamlformat` work great (and we've done several repo wide reformats on version upgrades).
[Changelog] Release of OCaml 5.4.1 and 4.14.3: We have the pleasure of announcing the dual releases of OCaml 4.14.3 and OCaml 5.4.1, dedicated to the memory of Nicolaas Govert de Bruijn on the anniversary of his death.
Those releases are a collection of safe and valuable runtime bugfixes.
The OCaml 5.4.1 release also contains a fix for the -pack mode for macOs and various TSAN fixes.
More importantly, those new versions harden the Marshal module against malicious… https://ocaml.org/changelog/2026-02-17-ocaml-541-and-4143?utm_source=dlvr.it&utm_medium=mastodon

Back in 2016, the artificial intelligence maker OpenAI had just incorporated as a nonprofit and applied to the Internal Revenue Service for tax-exempt status. The application shows the vast distance OpenAI and the technology that it researches and develops has traveled in under a decade. At the time, OpenAI told the IRS it did not plan to enter into any joint ventures with for-profit organizations, which it has since. It also said it did “not plan to play any role in developing commercial products or equipment.” A spokesperson for OpenAI, Liz Bourgeois, said the organization’s mission has remained constant, though the way it’s carried it out has evolved.
@david_chisnall @gandi I just logged to my Gandi account and it didn't require receiving an email. I do have 2FA enabled with a Yubikey though.
They also have a "recovery by QR code", and "recovery by Security key" method. The QR code won't help if you never saved it, but if you ever added a Security key, then it might be possible to use that to recover.