25 ms·
It also means trusting that the "unsafe" usage in the Rust code doesn't have any security bugs.
by sidlls 10y ago
It also means trusting that the "unsafe" usage in the Rust code doesn't have any security bugs.
- kibwen 10y agoIndeed, though trusting unsafe blocks in Rust is more tractable than trusting an entire C/C++ codebase due to the fact that unsafe blocks present a drastically reduced auditing surface.
- sidlls 10y agoThat's the contention, yes. In practice currently there is an incredible self-selection bias with respect to how tractable that position is if (when?) Rust becomes more widely used outside the circle of the True Faithful.
- bsder 10y agoSure, but the question is how wide the "unsafe" boundaries are. If I'm writing an application that uses the network in a standard way, I should be able to write a program with NO unsafe blocks. As always, things have bugs. Rust, itself, may have bugs that get exposed over time once adoption starts to increase. Rust gets some "security through obscurity" for the moment. Once they start pushing Rust code into Firefox, that will change dramatically.
- steveklabnik 10y agoThere's already a small amount of Rust in Firefox.
- bsder 10y agoThat's really cool, and I'm glad to hear it. As it expands in the Firefox codebase, it gives me the ability to tell people that "Yes, Rust is being used by lots of people".