News for hackers. Stuff that matters.
Re:Why you should, actually, rewrite some of it in Rust by Manishearth on Wednesday July 12, 2017 @12:46PM (#14754086)
It's ... debatable.

Heartbleed implemented their own memory management system (and had a bug in their use of it). This is pretty unusual even in C. It's extremely unusual in Rust, but who's to say that a similar implementation in Rust would come across the same challenges and implement their own memory management too? And write the same bug? Ultimately this kind of system would be unsafe code anyway, so Rust won't help you there. The question is if a Rust programmer would design such a thing (it's very non-Rust-y). The answer is probably "no". However, the same can be said about C programmers and the heartbleed code, so you have a bit of a no-true-scotsman vibe happening here.

So, yes, heartbleed could have happened in Rust too. I do feel it's less likely (Rust more strongly forces you to compartmentalize unsafe abstractions), but all of that is really debatable.

Re:Why you should, actually, rewrite some of it in Rust by youdontknowtho on Wednesday July 12, 2017 @12:57PM (#14754201)
Yeah, the openssl codebase was pretty crazy due to cross platform support over multiple decades...I guess it grew organically and turned into a enough of a mess that the OpenBSD team started the libressl project. There are some pretty good youtube videos about the work that they did.
Re:Why you should, actually, rewrite some of it in Rust by petters on Thursday July 13, 2017 @02:16AM (#14759124)
Thank you for the clarification.