News for hackers. Stuff that matters.
Re:Secure Rust Guidelines by jeroenhd on Tuesday May 17, 2022 @03:48AM (#31407238)
Took me a while to realise this is a project by the French National Cybersecurity Agency (ANSSI), not just some random github repos from someone with Important Opinions on how to use a programming language.

All of this advice makes a lot of sense but a lot of recommendations cannot easily be checked for or enforced. It would be nice to be able to quickly put Clippy into "ANSSI mode" to check and enforce all of these requirements.

Re:Secure Rust Guidelines by Aissen on Tuesday May 17, 2022 @05:08AM (#31407773)
On the other hand, if it could be easily checked, the document would be: "Enable ANSSI clippy mode" and not multiple pages.
Re:Secure Rust Guidelines by jeroenhd on Tuesday May 17, 2022 @05:25AM (#31407915)
Explaining why something is bad is still necessary if you rely on automated code review. Clippy does this, with specific codes for specific (potential) problems that the linter catches. You can learn a lot about patterns in Rust by just reading through the bad patterns and read their suggested alternatives.
Re:Secure Rust Guidelines by Aissen on Tuesday May 17, 2022 @05:47AM (#31408095)
I fully agree, but then it would be integrated with Clippy or in a wiki with a page per code (like shellcheck).

The document in this post is helpful because it does the first step of explaining the rationals, that can then eventually be automated (and then/copy pasted in the explanations).

Re:Secure Rust Guidelines by noodledoodletwo on Tuesday May 17, 2022 @07:44AM (#31409025)
I agree with you all. Bake it into clippy or make a different clippy aka seclippy. Also, I appreciate the docs so I understand why with examples. Also make a attribute that blocks some of these things
Re:Secure Rust Guidelines by MrJohz on Tuesday May 17, 2022 @08:42AM (#31409675)
> seclippy

According to a quick search, I propose "trombine" as the French version of clippy.

Re:Secure Rust Guidelines by rpigab on Tuesday May 17, 2022 @09:34AM (#31410336)
Don't you mean trombone? Or is there a hidden pun?
Re:Secure Rust Guidelines by MrJohz on Tuesday May 17, 2022 @04:39PM (#31416014)
According to French Wikipedia, one of the names for Clippy in French is Trombine. Given the other user mentioned that it means "face", and given trombone is, I believe, a paper clip (my French education unfortunately did not get this far), I suspect it's used as a kind of cute pun thing.

Kind of like how "Clippy" is obviously derived from the word "paperclip", but has slightly cuter and more friendly connotations. (Except for those experienced with Clippy, who may have other connotations at this point...)

Re:Secure Rust Guidelines by manicpolymath on Tuesday May 17, 2022 @02:28PM (#31414617)
I detect a pun. _trombine_ is, according to Wiktionary anyway, a colloquial French word for _face_.