News for hackers. Stuff that matters.
Re:Announcing Actix Web v4.0 by lambda_dn on Friday February 25, 2022 @05:04PM (#30472908)
"Actix was found by third parties abusing unsafe and when they were auditing most libraries found for Rust on the internet. When the unsafe code was audited it was found that on misuse, it can lead to serious vulnerabilities. So they opened a bunch of issues and added a lot of patches and PR’s in GitHub."

Good luck though

Re:Announcing Actix Web v4.0 by kibwen on Friday February 25, 2022 @05:29PM (#30473135)
This is an easy mistake to make, but actix-web isn't actix, it's a web framework that uses actix. And while actix once had a controversial reputation regarding unsafety, the project has reversed its stance in the years since that quote was relevant and now appears to treat soundness violations with seriousness.
Re:Announcing Actix Web v4.0 by robjtede on Friday February 25, 2022 @07:11PM (#30473989)
This is all true except that Actix Web hasn't used actix since v1.0.
Re:Announcing Actix Web v4.0 by gilrain on Friday February 25, 2022 @05:21PM (#30473063)
Hey bud, you are being really aggressive and disagreeable in here. At this point, I think everyone is aware that you, personally, would not recommend Rust or Actix. Loud and clear my dude.
Re:Announcing Actix Web v4.0 by nextaccountic on Friday February 25, 2022 @05:25PM (#30473102)
They have since fixed those issues in actix 3.0
Re:Announcing Actix Web v4.0 by lambda_dn on Friday February 25, 2022 @05:30PM (#30473142)
Evidence of that? Or is the whole software world to believe the words of nextaccountic?
Re:Announcing Actix Web v4.0 by rackjack on Friday February 25, 2022 @05:33PM (#30473178)
Why don't you provide evidence of extant misused `unsafe` first? Or is the whole software world to believe the words of lambda_dn?
Re:Announcing Actix Web v4.0 by capableweb on Friday February 25, 2022 @08:23PM (#30474458)
Unless the HN API itself gets compromised, I'm not sure what can go wrong by running your own local HN client really (it only communicates with the official HN API). But happy to be showed otherwise.