Re:Exploring Rust (from C#)
by scott_s on Wednesday March 23, 2016 @05:30PM
(#11348416)
Since tomp objects to trusting code, then I agree with
Manishearth: if you're never willing to trust code, then you can never have guarantees. Even the proof engine is trusted code.
[ Parent
| on HN ]
Well, you have to trust something... Silicone manufacturer, CPU designer, the OS, the compiler...
But the big difference is, if I can do proofs and the compiler breaks my trust, that's a bug in the compiler. On the orher hand, Rust disallows complex proofs entirely, so I have to use unsafe code and trust random humans!