News for hackers. Stuff that matters.

A comment on The Rust Libs Blitz. Parent comment

Re:The Rust Libs Blitz by cryptarch on Saturday May 06, 2017 @04:40AM (#14279352)
But you can read the dependency list or even the code and decide whether to use it or not?
[ Parent | on HN ]
Re:The Rust Libs Blitz by pjmlp on Saturday May 06, 2017 @05:02AM (#14279420)
Not in the presence of binary dependencies.

Also the amount of CVEs in FOSS projects show that even the process of code review for patches isn't enough.

[ Parent | on HN ]
Re:The Rust Libs Blitz by mixedCase on Saturday May 06, 2017 @03:43PM (#14281888)
You mean, in projects written in languages that are unsafe from beginning to end rather than in small blocks?
[ Parent | on HN ]
Re:The Rust Libs Blitz by pjmlp on Saturday May 06, 2017 @03:59PM (#14281966)
I agree, just stating that plain code review isn't enough.

Those patches also come in small blocks.

[ Parent | on HN ]