News for hackers. Stuff that matters.
Re:Rustaceans at the border by PoignardAzur on Friday April 15, 2022 @04:27AM (#31037791)
There's currently talks about sandboxing proc macros, install scripts and build scripts.

It would be nowhere near enough to make it safe to download untrusted dependencies, but it would at least stop the most trivial forms of attack.

Sandboxed dependencies with user-specified capabilities are a very, very long way away, if they ever happen.

There are no comments on this comment yet.