Please stop using passkeys for encrypting user data

· · 来源:archive资讯

In practice, (and yes, there are always exceptions to be found) BYOB is rarely used to any measurable benefit. The API is substantially more complex than default reads, requiring a separate reader type (ReadableStreamBYOBReader) and other specialized classes (e.g. ReadableStreamBYOBRequest), careful buffer lifecycle management, and understanding of ArrayBuffer detachment semantics. When you pass a buffer to a BYOB read, the buffer becomes detached — transferred to the stream — and you get back a different view over potentially different memory. This transfer-based model is error-prone and confusing:

消费者“不买小内存”的心理(12GB+256GB已成起步配置),导致单机消耗的存储bit数呈指数级增长。TrendForce集邦咨询2026年2月的最新数据显示,近三个月来,手机存储芯片现货价格累计上涨超过300%。其中,1TB闪存成本从2025年的200多元飙升至近600元;2026年第一季度DRAM价格涨幅达80%-95%,12GB LPDDR5X内存成本从200元涨至近600元,256GB UFS4.0闪存涨幅也达到80%-90%,成本直接翻倍。

'It's hard,这一点在91视频中也有详细论述

负责人透露,不同年份“工艺皮”本质相同,批发价均70元左右一斤,零售价差极大,标五年款卖500元一斤,标十年款卖1000元一斤,仅凭外观就能翻倍抬价,利润超成本十倍以上。

Postgres has its own primitives for things that forges currently build custom infrastructure around. A trigger on the refs table firing NOTIFY means any connected client learns about a push the moment it happens, which is how forges normally end up building a custom webhook polling layer. Multi-tenant repo isolation becomes a database concern through row-level security on the objects and refs tables, and logical replication lets you selectively stream repositories across Postgres instances, a kind of partial mirroring that filesystem-based git can’t do. Commit graph traversal for ancestry queries and merge-base computation falls to recursive CTEs, and pg_trgm indexes on blob content give you substring search across all repositories without standing up a separate search index.

CNN’s Jake

But after years of building on Web streams — implementing them in both Node.js and Cloudflare Workers, debugging production issues for customers and runtimes, and helping developers work through far too many common pitfalls — I've come to believe that the standard API has fundamental usability and performance issues that cannot be fixed easily with incremental improvements alone. The problems aren't bugs; they're consequences of design decisions that may have made sense a decade ago, but don't align with how JavaScript developers write code today.