Backdoor in upstream xz/liblzma leading to SSH server compromise

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by joshhansen on Sunday March 31, 2024 @03:24AM (#39882184)

Rust specifically chose a minimal standard library to not get stuck with the Python "dead batteries" problem. There's a strong culture as well of minimizing a project's dependencies in Rust.

[ Parent | on HN ]

Re:Backdoor in upstream xz/liblzma leading to SSH server com... by account42 on Thursday April 04, 2024 @08:59AM (#39929845)

> Rust specifically chose a minimal standard library to not get stuck with the Python "dead batteries" problem.

So has C++ in the past although there seems to be a push for a more batteries included approach recently.

> There's a strong culture as well of minimizing a project's dependencies in Rust.

This doesn't match what anyone can observe by looking at dependencies of Rust projects.

[ Parent | on HN ]