Top
Best
New

Posted by ropbear 3 hours ago

Tailscale Traces Database Corruption to 16y/o SQLite WAL-Reset Bug(tailscale.com)
359 points | 49 commentspage 2
dolmen 2 hours ago|
Which SQLite driver for Go does Tailscale use?
sethops1 2 hours ago|
https://github.com/tailscale/sqlite
myshapeprotocol 1 hour ago||
Tracking down a 16-year-old edge case in database internals is peak engineering perseverance. Incredible deep dive.
jeffbee 1 hour ago||
Block device upfuckery layers are powerful against databases. Years ago some colleagues wrote one that provides most of the hazards described by "Parity Lost and Parity Regained"[1] to test FoundationDB, which immediately uncovered several flaws in a project that described itself as well-tested. It's easy to do this with all the probing features that Linux (and others) provide today.

1: https://www.usenix.org/legacy/event/fast08/tech/full_papers/...

dilyevsky 3 minutes ago||
With opus 4.7-ish to fable 5, immediately after release - before they locked it down, it was shockingly easy to find crash bugs in a lot of very heavily used DBs and other software.
jnwatson 1 hour ago||
I'm definitely going to use the word "upfuckery" instead of fault injection the next time I need it.
declan_roberts 1 hour ago||
> Now we’re in summer, we’re confident that we’ve found the bug, that we understand it—and more importantly, that we’ve fixed it.

This is the feeling I chase as a software engineer. It's the greatest motivator.

hn3ufz62f7 1 hour ago||
Learned something new today, thanks
Zenul_Abidin 1 hour ago||
Similar bug to the one that plagued Codex until 3 months ago.
ameliaquining 55 minutes ago|
Do you happen to have a link?
dzonga 1 hour ago||
you gotta admire the power of using json/b and simple KV stores.

so many people sleep on that.

pstuart 2 hours ago||
I imagine the SQLite eschews AI generated code, but using it for testing (vulnerability, performance, etc) would seem like an easy win.

I know their proprietary testing framework is their secret sauce so we may never know...

d-us-vb 1 hour ago|
Richard Hipp's recent talk at Software Should Work explains that AI agents have been testing SQLite and they've gotten a deluge of new bug reports from the fuzz-like testing they can do. But they do not do this in house; hobbyists and other organizations do this in their own internal agent-driven fuzzing.
More comments...