4 ms·

Is anyone aware of secondary effects this has had? e.g. removed C++ code that has later found to have bugs, or newly re-written crates now more useful to the

Is anyone aware of secondary effects this has had? e.g. removed C++ code that has later found to have bugs, or newly re-written crates now more useful to the wider community than the same code locked up in C++.

hsivonen 8y ago
> e.g. removed C++ code that has later found to have bugs The article links to a longer article (https://hsivonen.fi/encoding_rs/ https://hsivonen.fi/encoding_rs/) about encoding_rs. The longer article mentions a bug that got fixed in Firefox ESR after the code had been replaced with encoding_rs in non-ESR Firefox. (I wrote the bug, too, though.) > or newly re-written crates now more useful to the wider community than the same code locked up in C++. encoding_rs is an example of a crate developed for Firefox but also developed as a crates.io crate from the start. ripgrep is probably the best-known Rust-only app that uses encoding_rs. Since Visual Studio Code bundles ripgrep, I believe Microsoft shipped encoding_rs before Mozilla did!
- vtesucks 8y ago
  In terms of deploying rust directly to make money- Microsoft is probably the leader right now with actix used in azure iot
  - polskibus 8y ago
    Did you mean this actix? https://github.com/actix/actix https://github.com/actix/actix Is it mature? Can you shed more light on how is it used in production?
    - steveklabnik 8y ago
      They're referring to https://news.ycombinator.com/item?id=17433142 https://news.ycombinator.com/item?id=17433142 I don't believe that it uses Actix, though. Actix was created by and is maintained by a Microsoft employee.
      - pjmlp 8y ago
        He has mentioned on an HN comment that they are using it internally, but isn't allowed to disclose how. https://news.ycombinator.com/item?id=17191454 https://news.ycombinator.com/item?id=17191454
      - fafhrd91 8y ago
        We use actix at azure iot
        steveklabnik 8y ago
        Ah, something that’s not in that repo? That’s awesome!
  - nicoburns 8y ago
    Dropbox are also using Rust in both their storage layer, and their desktop client.
    - vtesucks 8y ago
      You do realize that dropbox has very small profits, right? They made all of 50m in q2
earenndil 8y ago
> removed C++ code that has later found to have bugs I doubt this would ever be discovered; who would analyze code that was formerly a part of Firefox?
- hsivonen 8y ago
  > who would analyze code that was formerly a part of Firefox? People looking for bugs in Firefox ESR.
  - ryacko 8y ago
    People looking for bugs in Waterfox or Pale Moon.
  - liopleurodon 8y ago
    I know it's "extended support release" but I keep reading this as "Firefox Eric S. Raymond"
- nickpsecurity 8y ago
  There's actually a lot of people who want actual, experimental data to back a language's claims about safety. A subset of them use C and C++. I occasionally argue with them about safety benefits of other languages. They demand more proof than the design, esp field data. I do keep stuff like this as experimental evidence that will add up for such empiricists over time. Although, I prefer controlled experiments where you teach amateurs C, modern C++, and Rust over a specific time followed by testing (esp fuzzing) of their code to test the safety claims. Run it in a dozen different places to see if results are consistent. There's also folks that just study these things to identify patterns in problems created, prevented, or detected (at what effectiveness) in various languages and techniques in software development. Along similar vein, each bug report also provides (in theory) a test case for automated tools that detect bugs. It's very important to have a huge, diverse pile of code to test those tools with. That's because each one's algorithms might have blind spots missing bugs. The more code and bugs we have, the better we can assess those algorithms' accuracy. And then build better algorithms. :)

hsivonen 8y ago

> e.g. removed C++ code that has later found to have bugs The article links to a longer article (https://hsivonen.fi/encoding_rs/ https://hsivonen.fi/encoding_rs/) about encoding_rs. The longer article mentions a bug that got fixed in Firefox ESR after the code had been replaced with encoding_rs in non-ESR Firefox. (I wrote the bug, too, though.) > or newly re-written crates now more useful to the wider community than the same code locked up in C++. encoding_rs is an example of a crate developed for Firefox but also developed as a crates.io crate from the start. ripgrep is probably the best-known Rust-only app that uses encoding_rs. Since Visual Studio Code bundles ripgrep, I believe Microsoft shipped encoding_rs before Mozilla did!

vtesucks 8y ago
In terms of deploying rust directly to make money- Microsoft is probably the leader right now with actix used in azure iot
- polskibus 8y ago
  Did you mean this actix? https://github.com/actix/actix https://github.com/actix/actix Is it mature? Can you shed more light on how is it used in production?
  - steveklabnik 8y ago
    They're referring to https://news.ycombinator.com/item?id=17433142 https://news.ycombinator.com/item?id=17433142 I don't believe that it uses Actix, though. Actix was created by and is maintained by a Microsoft employee.
    - pjmlp 8y ago
      He has mentioned on an HN comment that they are using it internally, but isn't allowed to disclose how. https://news.ycombinator.com/item?id=17191454 https://news.ycombinator.com/item?id=17191454
    - fafhrd91 8y ago
      We use actix at azure iot
      - steveklabnik 8y ago
        Ah, something that’s not in that repo? That’s awesome!
- nicoburns 8y ago
  Dropbox are also using Rust in both their storage layer, and their desktop client.
  - vtesucks 8y ago
    You do realize that dropbox has very small profits, right? They made all of 50m in q2

earenndil 8y ago

> removed C++ code that has later found to have bugs I doubt this would ever be discovered; who would analyze code that was formerly a part of Firefox?

hsivonen 8y ago
> who would analyze code that was formerly a part of Firefox? People looking for bugs in Firefox ESR.
- ryacko 8y ago
  People looking for bugs in Waterfox or Pale Moon.
- liopleurodon 8y ago
  I know it's "extended support release" but I keep reading this as "Firefox Eric S. Raymond"
nickpsecurity 8y ago
There's actually a lot of people who want actual, experimental data to back a language's claims about safety. A subset of them use C and C++. I occasionally argue with them about safety benefits of other languages. They demand more proof than the design, esp field data. I do keep stuff like this as experimental evidence that will add up for such empiricists over time. Although, I prefer controlled experiments where you teach amateurs C, modern C++, and Rust over a specific time followed by testing (esp fuzzing) of their code to test the safety claims. Run it in a dozen different places to see if results are consistent. There's also folks that just study these things to identify patterns in problems created, prevented, or detected (at what effectiveness) in various languages and techniques in software development. Along similar vein, each bug report also provides (in theory) a test case for automated tools that detect bugs. It's very important to have a huge, diverse pile of code to test those tools with. That's because each one's algorithms might have blind spots missing bugs. The more code and bugs we have, the better we can assess those algorithms' accuracy. And then build better algorithms. :)