4 ms·
I wouldn't say it definitely owns that niche, yet, until there is empirical evidence of how using Rust correlates to safer software. Until then, I think it's a
by hudon 3y ago
I wouldn't say it definitely owns that niche, yet, until there is empirical evidence of how using Rust correlates to safer software. Until then, I think it's a hope founded on a substantive argument (ie. the borrow checker) that is still at risk of not achieving its goals.
- aw1621107 3y agoThe Android team posted something on that topic about 6 months ago [0, HN discussion at 1]. One potentially relevant highlight: > To date, there have been zero memory safety vulnerabilities discovered in Android’s Rust code. > Historical vulnerability density is greater than 1/kLOC (1 vulnerability per thousand lines of code) in many of Android’s C/C++ components (e.g. media, Bluetooth, NFC, etc). Based on this historical vulnerability density, it’s likely that using Rust has already prevented hundreds of vulnerabilities from reaching production. The post has more details, and I think the entire thing is worth a read. [0]: https://security.googleblog.com/2022/12/memory-safe-languages-in-android-13.html https://security.googleblog.com/2022/12/memory-safe-language... [1]: https://news.ycombinator.com/item?id=33819616 https://news.ycombinator.com/item?id=33819616