News for hackers. Stuff that matters.
Re:Using Rust at a Startup: A Cautionary Tale by tptacek on Tuesday November 22, 2022 @10:54PM (#33714973)
Very little --- I'll go ahead and say, to a first approximation, none --- of that safety has anything to do with software security. The same kinds of bugs that hit Java programs hit Rust programs, with maybe the sole exception of deserialization (which has nothing to do with error handling or type safety).

That matters because that's the kind of "safety" we're talking about when we discuss externalities for end-users --- not servers that need extra monitoring because they might crash.

Re:Using Rust at a Startup: A Cautionary Tale by bryanlarsen on Wednesday November 23, 2022 @06:39AM (#33717954)
Ignoring error codes and left-pad style issues are common sources of security issues.

Java is more left-pad resistant than Typescript, granted.

Re:Using Rust at a Startup: A Cautionary Tale by tptacek on Wednesday November 23, 2022 @10:27AM (#33720341)
No. Rust doesn't do anything interesting to avoid supply-chain attacks.