Rewriting Rust and Eliminating Vulnerabilities

Rewriting Rust and Eliminating Vulnerabilities

In this episode I'll talk about an engineer's dream to rewrite Rust and why, Linus's response to the Kernel controversy, my own post about choosing between Rust and Go, Google's encouraging post about memory-safety's long-term effect on vulnerabilities, reflection on Rust after a year in production, and more! 00:00 - Intro 03:09 - Rewriting Rust 22:22 - Torvalds weighs in on 'nasty' Rust vs C for Linux debate 27:11 - Rust vs Go - Which Is Right For My Team? 48:08 - Bevy Foundation is now a 501c3 Public Charity 50:14 - Eliminating Memory Safety Vulnerabilities at the Source 55:20 - WebAssembly targets - change in default target-features 58:16 - One year of Rust in production 1:09:00 - Rust LLM Frameworks have a Bright Future Rewriting Rust https://josephg.com/blog/rewriting-rust/ Torvalds weighs in on 'nasty' Rust vs C for Linux debate https://www.theregister.com/2024/09/19/torvalds_talks_rust_in_linux Rust vs Go - Which Is Right For My Team? https://commerce.nearform.com/blog/2024/rust-vs-go-which-is-right-for-my-team Bevy Foundation is now a 501c3 Public Charity https://bevyengine.org/news/bevy-foundation-501c3/ Eliminating Memory Safety Vulnerabilities at the Source https://security.googleblog.com/2024/09/eliminating-memory-safety-vulnerabilities-Android.html?m=1 WebAssembly targets - change in default target-features https://blog.rust-lang.org/2024/09/24/webassembly-targets-change-in-default-target-features.html One year of Rust in production https://yieldcode.blog/post/one-year-of-rust-in-production/ Rust LLM Frameworks have a Bright Future https://www.youtube.com/watch?v=fIFUnYNuYbc Find out more about the show: https://deterministic.dev/rust-review Find me on Fosstodon: https://fosstodon.org/@bkonkle Find me at Nearform Commerce: https://commerce.nearform.com Find me on Discord in the Rust, Go, and Denver Devs communities Find out more about Rust: https://www.rust-lang.org

Nontechnical Nonsense and TRACTOR Pulls

In this week's episode I'll talk about the Rust Linux Kernel developer that stepped down a week ago, what's coming up at RustConf in Montreal, templating in Rust with MiniJinja, Arenas, TRACTORs, other podcasts, and more! 00:00 - Intro 01:58 - Rust Maintainer For Linux Kernel Resigns 14:08 - What's in Store at RustConf 2024 16:57 - MiniJinja - Templating in Rust 22:58 - Why you might not want to build a server in Rust 34:40 - Arenas 39:48 - DARPA's TRACTOR pull 48:32 - Amazing Rust podcasts 51:50 - Outro Rust Maintainer For Linux Kernel Resigns https://www.phoronix.com/news/Rust-Linux-Maintainer-Step-Down Linux subreddit discussion https://www.reddit.com/r/linux/comments/1f3q0l8/one_of_the_rust_linux_kernel_maintainers_steps/ Rust subreddit discussion https://www.reddit.com/r/rust/comments/1f3scn1/one_of_the_rust_linux_kernel_maintainers_steps/ What's in Store at RustConf 2024 https://foundation.rust-lang.org/news/what-s-in-store-at-rustconf-2024/ MiniJinja - Learnings from Building a Template Engine in Rust https://lucumr.pocoo.org/2024/8/27/minijinja/ Why Amazon, Cloudflare and Discord are building servers in Rust but you should probably not https://kerkour.com/rust-is-bad-for-servers Arenas https://donsz.nl/blog/arenas/ Can DARPA’s TRACTOR Pull C to Rust for Memory-Safe Overhaul? https://thenewstack.io/can-darpas-tractor-pull-c-to-rust-for-memory-safe-overhaul/ The amazing Rust podcasts that have emerged https://tim.mcnamara.nz/post/758930152514306048/the-amazing-rust-podcasts-that-have-emerged-in Find out more about the show: https://deterministic.dev/rust-review Find me on Fosstodon: https://fosstodon.org/@bkonkle Find me at Nearform Commerce: https://commerce.nearform.com/ Find me on Discord in the Rust, Go, and Denver Devs communities Find out more about Rust: https://www.rust-lang.org

Rust vs C++ and Fearless Association

In this week's episode I'll talk about the pros & cons of Rust vs C++, what associated types really are and why they are useful, some Rust foundation announcements and upcoming goals, an exploration of "spooky action at a distance" in UnsafeCell, and recent improvements to doctests. 00:00 - Intro 01:32 - Rust vs C++ - A Real-World Perspective 23:56 - Fear Not the Association of Types 40:25 - Rust Announcements 47:12 - Mutex, Atomics and UnsafeCell 01:02:54 - Doctests - How were they improved? Rust vs C++ - A Real-World Perspective https://corrode.dev/blog/cpp-rust-interop/ https://mastodon.social/@mre/112960332845521528 Fear Not the Association of Types https://gavinleroy.com/writings/i-heart-assoc-types.html Announcing Rust 1.80.1 https://blog.rust-lang.org/2024/08/08/Rust-1.80.1.html Project goals for 2024 https://blog.rust-lang.org/2024/08/12/Project-goals.html Linux Kernel Documentation https://lore.kernel.org/linux-doc/20240818141200.386899-1-ojeda@kernel.org/t/#u https://rust.docs.kernel.org/kernel/ Mutex, Atomics and UnsafeCell https://leon.schuermann.io/blog/2024-08-07_rust-mutex-atomics-unsafecell_spooky-action-at-a-distance.html Doctests - How were they improved? https://blog.guillaume-gomez.fr/articles/2024-08-17+Doctests+-+How+were+they+improved%3F Find out more about the show: https://deterministic.dev/rust-review Find me on Fosstodon: https://fosstodon.org/@bkonkle Find me at Nearform Commerce: https://commerce.nearform.com/ Find me on Discord in the Rust, Go, and Denver Devs communities Find out more about Rust: https://www.rust-lang.org

Async Challenges and RISCy Bootloaders

Welcome back to the Rust Review, your weekly source for news, articles, discussions, and interviews centered on the Rust programming language! Brandon Konkle filters down the frenzied firehose of activity around Rust and related topics to bring you a focused stream of highlights and opinions. Join the Rust revolution! 00:12 - Intro 01:03 - Async Rust Challenges in Iroh 18:22 - Secure RISC-V Bootloader 32:10 - Efficient Logging 39:48 - Mastering Dependency Injection 52:34 - Phantom Menace 59:55 - Announcing SeaORM 1.0 1:02:45 - Tauri 2.0 Release Candidate Async Rust Challenges in Iroh https://iroh.computer/blog/async-rust-challenges-in-iroh Developing a cryptographically secure bootloader for RISC-V in Rust https://www.codethink.co.uk/articles/2024/secure_bootloader/ Efficient Logging https://antoniosbarotsis.github.io/posts/efficient-logging/ Mastering Dependency Injection in Rust - Crafting a Custom Container https://chesedo.me/blog/manual-dependency-injection-rust/ Phantom Menace - memory leak that wasn't there https://flakm.com/posts/phantom_leak/ Announcing SeaORM 1.0 https://www.sea-ql.org/blog/2024-08-04-sea-orm-1.0/ Tauri 2.0 Release Candidate https://v2.tauri.app/blog/tauri-2-0-0-release-candidate/ Find out more about the show: https://deterministic.dev/rust-review Find me on Fosstodon: https://fosstodon.org/@bkonkle Find me at Nearform Commerce: https://commerce.nearform.com/ Find me on Discord in the Rust, Go, and Denver Devs communities Find out more about Rust: https://www.rust-lang.org

Pinning Pointers, Crowdstrike is Out of Bounds

At long last, the Rust Review is back! Your weekly source for news, articles, discussions, and interviews centered on the Rust programming language! Brandon Konkle filters down the frenzied firehose of activity around Rust and related topics to bring you a focused stream of highlights and opinions. Join the Rust revolution! 00:00 - Intro 01:27 - Without Boats: Pin & Pinned Places 25:52 - Crowdstrike: Preliminary Post-Incident Report 45:04 - Tracel AI: CubeCL 51:58 - Rust Foundation: Q2 56:35 - Veetaha @elastio: Named Function Arguments 1:01:52 - Matthias Endler: Don’t use Preludes and Globs 1:06:02 - Outro Without Boats: Pin & Pinned Places https://without.boats/blog/pin/ [https://without.boats/blog/pin/] Without Boats: Pinned Places https://without.boats/blog/pinned-places/ [https://without.boats/blog/pinned-places/] Crowdstrike: Preliminary Post-Incident Report https://www.crowdstrike.com/blog/falcon-content-update-preliminary-post-incident-report/ [https://www.crowdstrike.com/blog/falcon-content-update-preliminary-post-incident-report/] Microsoft: Crash Dump Analysis https://www.microsoft.com/en-us/security/blog/2024/07/27/windows-security-best-practices-for-integrating-and-managing-security-tools/ [https://www.microsoft.com/en-us/security/blog/2024/07/27/windows-security-best-practices-for-integrating-and-managing-security-tools/] Tracel AI: CubeCL https://github.com/tracel-ai/cubecl [https://github.com/tracel-ai/cubecl] Rust Foundation: Q2 http://foundation.rust-lang.org/news/q2-2024-recap-from-rebecca-rumbul [http://foundation.rust-lang.org/news/q2-2024-recap-from-rebecca-rumbul] Veetaha @elastio: Named Function Arguments https://elastio.github.io/bon/blog/how-to-do-named-function-arguments-in-rust [https://elastio.github.io/bon/blog/how-to-do-named-function-arguments-in-rust] Matthias Endler: Don’t use Preludes and Globs https://corrode.dev/blog/dont-use-preludes-and-globs/ [https://corrode.dev/blog/dont-use-preludes-and-globs/] Find out more about the show: https://deterministic.dev/rust-review [https://deterministic.dev/rust-review] Find me on Fosstodon: https://fosstodon.org/@bkonkle [https://fosstodon.org/@bkonkle] Find me at Nearform Commerce: https://commerce.nearform.com/ [https://commerce.nearform.com/] Find me on Discord in the Rust, Go, and Denver Devs communities Find out more about Rust: https://www.rust-lang.org [https://www.rust-lang.org]