Top
Best
New

Posted by formerly_proven 13 hours ago

11 year old unsoundness bugs found in Rust borrow checker(github.com)
642 points | 361 commentspage 4
rurban 10 hours ago|
And a fork fixed it before upstream rust :)
Groxx 8 hours ago|
...yes? that's usually the case in open source software.
sreekanth850 6 hours ago||
Was this done by LLM? this is a doubt. because recently we are seeing many such bug reports.
beanjuiceII 11 hours ago||
wonder what happened to this https://raphlinus.github.io/rust/2020/01/18/soundness-pledge...
jeremyjh 11 hours ago||
I think it has no relevance here at all. Actix was unsound because of prolific use of unsafe. That was a poor design decision but a conscious one. TFA is just a bug.

Having ideals does not mean there are never bugs.

ModernMech 11 hours ago||
What do you mean?
cheney_2004 9 hours ago|
I think one social issue I’m seeing is that the Rust community bashes other languages for safety but then glosses over or even completely ignores their own safety risks (see supply chain). I would rather see Rust focus on its actual features without bashing others and maybe start moving away from claiming the gold metal on security. Being less toxic is always a good thing for long term health.
gchamonlive 9 hours ago||
It's important to separate the community ethos and the rust core dev team policies, because I'd be surprised if the official stance of the rust team would be condescending to other technologies.
the__alchemist 6 hours ago|||
Rust is my favorite language in most domains I program in; I've learned to ignore the online rust OSS community due to a mix of preferring heavy abstractions (then shaming your code if you don't use them), and rude behavior.

This is fine, for the reasons you state: I can use the language and tools while ignoring the jerks.

SV_BubbleTime 9 hours ago|||
Have you met humans?

I’d be shocked if people working on and passionate about thing didn’t shit on other thing. That’s natural and even good in moderation. It’s up to a leader to keep it under control.

mcherm 9 hours ago|||
Yes. In fact, I have met quite a few humans who make a point NOT to go bashing the work of others. (Of course, I have also met quite a few who do spend their time bashing others.)
tehjoker 7 hours ago|||
The more you understand about your own system the more humility one would think you would have. This is like the dumb guy to jedi meme. It's the people in the middle that shit on other peoples' work because they have something to gain by looking comparatively smarter.
slopinthebag 5 hours ago|||
the only thing more exhausting than rust evangelism is people who drop in on any rust related thread and start whining about unrelated things just because it's rust.
ModernMech 9 hours ago|||
Can you give an example of this toxic bashing from rust contributors or are you talking about just random HN posters when you say “rust community”?

Moreover, I wouldn’t say they’re completely ignoring supply chain risks, as there have been discussions about this as early as 2021 [1] and there are ongoing efforts to address this [2]

[1] https://internals.rust-lang.org/t/about-supply-chain-attacks...

[2] https://kerkour.com/fixing-rust-supply-chain-security

lifeisloving 9 hours ago|||
Yeah Ive actually never seen any Rust team members be toxic. Keep in mind there is a micro niche of tech influencers who try to politicize rust because they associate it with liberalism or something like that and paint Rust community as an opposing force to some status quo they think exists or should exist. Those notions have taken on a life of their own.

People who say this just dont know what they're talking about and are repeating youtubers and X takes.

bcjdjsndon 8 hours ago|||
[flagged]
dabinat 6 hours ago|||
> Even the basic logic is flawed.... That coders can't be trusted to handle pointers, but somehow can be trusted to write "safe" unsafe rust.

Who said anything about trust? The purpose of unsafe blocks is that you have specific, limited areas of your code that can be audited for safety. With C your entire codebase needs to be audited.

Also, other languages “trusting” people to use pointers correctly has gone pretty badly.

cmrdporcupine 6 hours ago|||
The only fanaticism I'm seeing here is you going through the entire thread and picking fights and calling people who use and advocate a language names.

"fans" "fanatics" "cult"

I'm not sure what the point of this way of talking is. Rust is a tool. Many advocate for it because we've worked for a long time in ... other tools. Which had avoidable problems. I had a two decade career with C++ before Rust finally became mainstream enough to get paid to work in. Going back here and there is usually... unpleasant.

jjgreen 9 hours ago|||
Dream on
zamalek 8 hours ago||
> being less toxic

There's a difference between people you disagree with and toxic behavior. Can you give examples of toxic behavior?