Post B5zHOk0n8ZDKvAkKXY by zeenix@toot.cat
 (DIR) More posts by zeenix@toot.cat
 (DIR) Post #B5zHOjPDOH9l2dAJyC by zeenix@toot.cat
       0 likes, 0 repeats
       
       @swick I only know one **very** specific fs API "issue" that Lennart keeps talking about and that one:1. Is not an issue for a vast majority of software and hence why nobody thinks about it. 2. Can be easily prevented by using a crate specifically designed for it.3. IIRC hard to abstract in a cross-platform manner.Are there other issues like that that exist "because of std"?
       
 (DIR) Post #B5zHOjojrNZaJn6hkm by pid_eins@mastodon.social
       0 likes, 0 repeats
       
       @zeenix sorry, but you are basically saying that using rust for system level software where security boundaries exist is not really an issue because it isn't the intended audience for rust, and just too specific. I am pretty sure you are pretty alone in that view of the world though...FS access is a commodity, it just has to be there, hast to work, and be as secure as possible by default because it's highly security relevant, and a primary security boundary itself. Just accept that please.
       
 (DIR) Post #B5zHOk0n8ZDKvAkKXY by zeenix@toot.cat
       0 likes, 0 repeats
       
       @pid_eins statistics Lennart, where are they? Every statistics I've seen over the decades listing CVEs is always dominated by issues stemming from use of memory unsafe languages.You focusing on one specific issue that's not even part of the language itself and trivial to avoid, isn't very convincing on its own.
       
 (DIR) Post #B5zHOkHo7IpDlwhv3w by AdrianVovk@fosstodon.org
       0 likes, 1 repeats
       
       @zeenix @pid_eins I think there are valid things to criticize Rust for, and std's filesystem APIs is one of those things. Rust also eliminates a massive category of vulnerabilities and significantly improves security posture. Both can be true at once.Pretending that it's not a problem isn't going to help push projects like systemd towards a direction where we start using Rust. In fact, probably the opposite.