3 ms·
All discussion I saw about the issue was quite civilized. https://old.reddit.com/r/rust/comments/epzukc/actix_web_repository_cleared_by_author_who_says/ https:
by Brave-Steak 7y ago
All discussion I saw about the issue was quite civilized.
https://old.reddit.com/r/rust/comments/epzukc/actix_web_repository_cleared_by_author_who_says/ https://old.reddit.com/r/rust/comments/epzukc/actix_web_repo...
https://old.reddit.com/r/rust/comments/epoloy/ive_smoketested_rust_http_clients_heres_what_i/ https://old.reddit.com/r/rust/comments/epoloy/ive_smoketeste...
I get that people hate Reddit around here, but pushing this on them as vitriol by the Rust community there is wholly unfair. The impression I've gotten is that the developer of actix used unsafe too much, made no attempt to inform users that his framework was thus not safe to use (to the level expected of a Rust project), and rejected plenty of PR's where these issues would've been fixed, while being belligerent about continuing to write unsafe code.
https://cdn.discordapp.com/attachments/648807492931026953/667520639455854593/img-2020-01-16-160126.png https://cdn.discordapp.com/attachments/648807492931026953/66...
He'd even started deleting comments and entire issues just for pointing out unsafe code. And it seems like he's had the archives deleted, since the archived pages which used to exist are no longer accessible (I didn't even know that was possible?).
http://web.archive.org/web/20200117043715/https://github.com/actix/actix-net/issues/83 http://web.archive.org/web/20200117043715/https://github.com...
Frankly, after years of seeing people defend C/C++ projects because "well, just get better", I think it's a good thing that security-consciousness is at a point where developers are being rightly criticized for playing fast and loose with security. There are always complaints about how we have no idea what kind of code being used on NPM or other package systems. But make some effort to improve it and now they're the bad guys? Oh, come on. You can't have it both ways.
And as somebody else has already pointed out, plenty of other projects also had PR's regarding safety issues, as linked by the original article which tested all these projects. The actix author is the only one who rejected them, and he's the only one facing complaints.
- Brave-Steak 7y agoFound a working copy of the original Github issue: https://gist.github.com/mafrasi2/debed733781db4aba2a52620b6725adf https://gist.github.com/mafrasi2/debed733781db4aba2a52620b67... Aside from maybe the second to last comment, I don't see anything here that deserved deletion.