News for hackers. Stuff that matters.

A comment on Malicious Rust crate Arrayref runs a build-time payload. Parent comment

[dead]
Re:Malicious Rust crate Arrayref runs a build-time payload by ux266478 on Thursday August 20, 2026 @10:38AM (#49375249)
Rust as a language is mostly alright in my opinion. The problems I have with it are similar to the problems I have with C++, and it makes up for them in other really compelling ways.

Where it loses me is Cargo and everything surrounding it. I'm essentially forced into an extreme where I just never use anything in the Rust ecosystem, or I have to deal with insane dependency graphs that have the density and microstate complexity of a neutron star.

[ Parent | on HN ]
Re:Malicious Rust crate Arrayref runs a build-time payload by andsoitis on Thursday August 20, 2026 @10:54AM (#49375493)
> Rust as a language is mostly alright in my opinion.

> Where it loses me is Cargo and everything surrounding it.

High praise!

[ Parent | on HN ]
Re:Malicious Rust crate Arrayref runs a build-time payload by josephg on Thursday August 20, 2026 @10:28AM (#49375087)
> Rust is very much a schlong-measuring contest

What? Its just a programming language. Go dependency free if you want. Or vendor everything. Nobody is forcing you to pull in 3rd party dependencies.

[ Parent | on HN ]
[dead]
Re:Malicious Rust crate Arrayref runs a build-time payload by bayindirh on Thursday August 20, 2026 @10:41AM (#49375293)
As a person who doesn't like Rust very much, no, it doesn't suck. Some of its features make some folks very excited for very right reasons, and evokes "Silver Bullet Syndrome" in others for all the wrong reasons.

People weaponizing Rust rewrites with permissive licenses is another problem, but it's not about the programming language itself.

[ Parent | on HN ]
Re:Malicious Rust crate Arrayref runs a build-time payload by silverlinex on Saturday August 22, 2026 @10:59AM (#49400456)
No. It actually does suck.

See how opinions work?

[ Parent | on HN ]