News for hackers. Stuff that matters.

A comment on Replacements for existing software written in Rust. Parent comment

Re:Replacements for existing software written in Rust by coldtea on Friday May 28, 2021 @09:46AM (#27315249)
>Caveat: Saying “Just write it in rust” won’t change the fact that writing secure software is hard.

No. But it will make sure there are no issues of the type buffer overflow and such.

The rest, we can judge when the software is delivered.

[ Parent | on HN ]
Re:Replacements for existing software written in Rust by scoutt on Friday May 28, 2021 @11:12AM (#27316331)
> it will make sure

https://www.cvedetails.com/vulnerability-list/vendor_id-1902...

I'm not so sure....

And those are bugs from from people writing core stuff, like you know, the people who should know Rust better than you and me. People writing foundational code that your program will run on top of.

Of special danger is the last CVE, that was rushed and backported into the last release. But nobody talks about it. I can imagine why.

I can bet that the "but the bug happened within unsafe code" excuse will be the next Rust meme.

[ Parent | on HN ]
Re:Replacements for existing software written in Rust by edg-l on Friday May 28, 2021 @04:17PM (#27319961)
I think this comment (on this same post) is relevant here https://news.ycombinator.com/item?id=27318979
[ Parent | on HN ]