News for hackers. Stuff that matters.
Re:So You Want to Rust the Linux Kernel? by b20000 on Monday October 11, 2021 @06:38PM (#28833884)
read the kernel docs and follow best practices. the code is reviewed by thousands of developers, so chances are what makes in into the kernel tree is pretty good. i don’t need rust. thanks!
Re:So You Want to Rust the Linux Kernel? by pizza234 on Friday October 15, 2021 @04:58AM (#28875753)
First, I've generalized to memory-safe languages, not necessarily Rust.

Second, this is exactly the overconfidence that I find troubling. Vulnerabilities caused by memory unsafety are real, pervasive, and inevitable.

A few resources you should look at:

- the official reports/post by Mozilla and Microsoft about the percentage of vulnerabilities caused by memory unsafety

- the mailing lists with the Linux kernel issues (I don't imply any severity; just the amount)

There are many summarized posts for the lazier, and I'm talking about high profile authors (or authors writing on behalf of high profile companies). Here's a semi-random one:

https://msrc-blog.microsoft.com/2019/07/18/we-need-a-safer-s...

Re:So You Want to Rust the Linux Kernel? by b20000 on Friday October 15, 2021 @09:38AM (#28877545)
not everyone using linux making a device cares about vulnerabilities. there is no root password on my device and it is not networked.
Re:So You Want to Rust the Linux Kernel? by mlindner on Thursday October 14, 2021 @06:16PM (#28870922)
Anecdotes from kernel maintainers is that memory unsafe code gets pas reviewers all the time. There was even that ethically questionable study that tried and succeed in getting vulnerabilities inserted into the kernel.