6 ms·

Caveat: Saying “Just write it in rust” won’t change the fact that writing secure software is hard. The only thing that will actually prevent security holes is

Caveat: Saying “Just write it in rust” won’t change the fact that writing secure software is hard. The only thing that will actually prevent security holes is attentive software engineers deliberately choosing to learn tools and practice habits to avoid security holes by design. The professional judgement of a lot of those engineers is leading them to choose to learn rust right now.

pdimitar 5y ago
> Caveat: Saying “Just write it in rust” won’t change the fact that writing secure software is hard. Absolutely. It's just that statistically the memory safety bugs have been the dominant percent of all the bugs, so rewriting core tools in a memory-safe language does make sense.
- afarrell 5y ago
  Indeed. Time & attention are limited resources. By eliminating the dominant class of bugs you have more time and attention for more subtle bugs.
  - pdimitar 5y ago
    > Time & attention are limited resources. By eliminating the dominant class of bugs you have more time and attention for more subtle bugs. Beautifully articulated.
coldtea 5y ago
>Caveat: Saying “Just write it in rust” won’t change the fact that writing secure software is hard. No. But it will make sure there are no issues of the type buffer overflow and such. The rest, we can judge when the software is delivered.
- scoutt 5y ago
  > it will make sure https://www.cvedetails.com/vulnerability-list/vendor_id-19029/product_id-48677/Rust-lang-Rust.html https://www.cvedetails.com/vulnerability-list/vendor_id-1902... I'm not so sure.... And those are bugs from from people writing core stuff, like you know, the people who should know Rust better than you and me. People writing foundational code that your program will run on top of. Of special danger is the last CVE, that was rushed and backported into the last release. But nobody talks about it. I can imagine why. I can bet that the "but the bug happened within unsafe code" excuse will be the next Rust meme.
  - edg-l 5y ago
    I think this comment (on this same post) is relevant here https://news.ycombinator.com/item?id=27318979 https://news.ycombinator.com/item?id=27318979

pdimitar 5y ago

> Caveat: Saying “Just write it in rust” won’t change the fact that writing secure software is hard. Absolutely. It's just that statistically the memory safety bugs have been the dominant percent of all the bugs, so rewriting core tools in a memory-safe language does make sense.

afarrell 5y ago
Indeed. Time & attention are limited resources. By eliminating the dominant class of bugs you have more time and attention for more subtle bugs.
- pdimitar 5y ago
  > Time & attention are limited resources. By eliminating the dominant class of bugs you have more time and attention for more subtle bugs. Beautifully articulated.

coldtea 5y ago

>Caveat: Saying “Just write it in rust” won’t change the fact that writing secure software is hard. No. But it will make sure there are no issues of the type buffer overflow and such. The rest, we can judge when the software is delivered.

scoutt 5y ago
> it will make sure https://www.cvedetails.com/vulnerability-list/vendor_id-19029/product_id-48677/Rust-lang-Rust.html https://www.cvedetails.com/vulnerability-list/vendor_id-1902... I'm not so sure.... And those are bugs from from people writing core stuff, like you know, the people who should know Rust better than you and me. People writing foundational code that your program will run on top of. Of special danger is the last CVE, that was rushed and backported into the last release. But nobody talks about it. I can imagine why. I can bet that the "but the bug happened within unsafe code" excuse will be the next Rust meme.
- edg-l 5y ago
  I think this comment (on this same post) is relevant here https://news.ycombinator.com/item?id=27318979 https://news.ycombinator.com/item?id=27318979