KillTheMule

joined 1 year ago

crates.io Postmortem: User Uploaded Malware in c/[email protected]

[–] [email protected] 2 points 1 year ago (1 children)

I’m sure everyone’s thought about it already but hasn’t done enough so far.

Note though that the rust foundation has established a security initiative (see e.g. here), which does include the supply chain via crates.io.

permalink
fedilink
source
context

5 Strong Opinions On Everyday Rust in c/[email protected]

[–] [email protected] 1 points 1 year ago (3 children)

2 was good, thanks. 4 needs a tad more thought imho, returning an impl T does have its place, because it makes changing the return type of the function a non-breaking change.

permalink
fedilink
source