Rust

5777 readers

6 users here now

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Wormhole

[email protected]

Credits

The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)

founded 1 year ago

MODERATORS

[email protected]

Rust devs push back as Serde project ships precompiled binaries (www.bleepingcomputer.com)

submitted 1 year ago by [email protected] to c/[email protected]

16 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 4 points 1 year ago (1 children)

The proper way to handle this is to contact the maintainer, ask why this change was made, and start a discussion arguing the drawbacks and asking to revert it.

That has already occurred. The maintainer pretty much ignored the question, as far as I can tell.

People usually behave that way when they have an ulterior motive. In this case, I worry that the plan is to slip some malware into that binary…

[–] [email protected] 1 points 1 year ago (1 children)

The maintainer took a very FOSS approach of "this is better and the tools we use don't support better choices, so you're welcome to fix the tools."

[–] [email protected] 4 points 1 year ago

If the binary matched the source code, that argument would hold, but it doesn't, which is sounding alarm bells in my head. Just what is in those 600 kilobytes of machine code?