Demi Marie Obenour

> Yeah, come to think, given the security needs of many of our users and the possibility that folks will be on Tor and w/o Javascript, this could be a...

Why is something pulling in `sdubby`? That is for `systemd-boot` and neither Fedora nor Qubes OS uses that by default.

> > @DemiMarie both `akmods` (not `akmods-nvidia`), and `xorg-x11-drv-nvidia` depend on grubby, and nothing except for `systemd-udev` depend on sdubby directly. > > That's because grubby-dummy does not provide a...

Do you have benchmarks that show how large the overhead is? Are these benchmarks ones that others can run? Given the security implications I’m inclined to think that this is...

> > Do you have benchmarks that show how large the overhead is? Are these benchmarks ones that others can run? > > Given the security implications I’m inclined to...

> > Without having specific benchmark data: virtiofsd won't do busy waiting but wait gracefully for incoming data. The CPU load is just shifted from B to A when you...

What about having the GC close any plugins that are no longer referenced? That's what the JVM does. And forcing a full GC whenever Go code must be unloaded is...

I know it's​ a finalizer. It is also what the JVM does with JNI code, and the only safe solution I know of without Rust-esque lifetime tracking, generating proxies for...

Here is a thought: what about having plugins export their API as a first-class object, such that the plugin gets unloaded when the API object is garbage collected?

This seems like a macOS kernel bug to me. FYI the call to `Filename.quote` isn’t sufficient if the filename is untrusted. You need a `--` before the filename to prevent...