3 ms·
I cannot wait until the first nasty exploit due to a Rust vulnerability. I just can't.
by JustSomeNobody 10y ago
I cannot wait until the first nasty exploit due to a Rust vulnerability. I just can't.
- amelius 10y agoThose vulnerabilities will most likely be of the form "developer got annoyed by Rust's overly complicated typesystem, and took some shortcuts".
- TillE 10y agoIndeed. There's a whole universe of logic bugs that lead to serious exploits. Memory safety is nice, but I wish Rust evangelists would 1) stop acting like it's a panacea, and 2) acknowledge that Rust isn't really fully baked yet. I have various complaints about the language and standard library, but the real show-stopper is this: https://github.com/rust-lang/libc/issues/290 https://github.com/rust-lang/libc/issues/290
- tdb7893 10y agoYeah, they are pretty smug about it. The problem is that nothing short of perfect developers will completely stop errors but seeing how we see major memory safety exploits in C at least a few times a year for the past couple decades it might be time to start considering come sort of solution, whether it is Rust or otherwise.