• assaultpotato@sh.itjust.works
    link
    fedilink
    arrow-up
    74
    arrow-down
    4
    ·
    21 hours ago

    ITT: a bunch of people who didn’t read anything other than “AI” and got mad.

    He thinks Rust is one of the few realistic ways to slash the class of bugs that come from C’s traditional error-handling and resource-management pitfalls.

    Idk why everyone’s upset about this. It’s not wrong. The headline sucks, but the statement “Rust makes it harder to introduce bugs that an LLM will later find” seems pretty objectively true.

    • BrianTheeBiscuiteer@lemmy.world
      link
      fedilink
      arrow-up
      9
      arrow-down
      1
      ·
      19 hours ago

      Technically yes, it would make it harder, but a house with unpickable locks isn’t impervious to entry. In my personal experience memory exploits aren’t the primary methods hackers use to gain access or run custom code. I think layers of protection are more effective at stopping actual damage from being done. Run custom code, but you’re still an unprivileged user. Elevate your access but you’re still in a sandbox. Break out of the sandbox but you breach memory allocation and the environment is destroyed and rebuilt. And all the while you should be tripping alerts.

      • davidgro@lemmy.world
        link
        fedilink
        arrow-up
        18
        ·
        19 hours ago

        The article actually covers that kind of defensive work a bit (although it’s all kernel internals):

        “…if Rust disappeared tomorrow, we have cleaned up the C code in the kernel so much and taken in the ideas. We thank you, you’ve made Linux better with it just by existing.”

        He described new C “guards” and scoped locks inspired by Rust …

        And

        Beyond language features, Kroah-Hartman tied Rust directly to a broader push around untrusted data and the idea that “all input is evil.”
        … He described ongoing work on an “untrusted” type wrapper and a validate method in Rust that forces explicit validation at the point where data crosses from untrusted to trusted.

    • ISO@lemmy.zip
      link
      fedilink
      arrow-up
      8
      ·
      20 hours ago

      Anyone who’s actually relevant is already aware of the technical details. Anyone with a non-gossipy interest in the topic has already watched the talk (which is available), or will watch it before opening their mouth.

      What remains is the internet gantry, which is irrelevant.

      • davidgro@lemmy.world
        link
        fedilink
        arrow-up
        7
        ·
        18 hours ago

        I have a non-gossipy interest, but prefer reading about things to watching, so articles like this are nice, I otherwise wouldn’t have known about it.

        • ISO@lemmy.zip
          link
          fedilink
          arrow-up
          3
          ·
          14 hours ago

          That’s a scenario where looking up the slides is the right course of actions, or at worst, seeking informed coverage (e.g. from some LWN reporters, but not all).

          It is not uncommon for info provided by tech journalists from sites like OP, or even worse, “e-celeb” baiters, to actually have negative worth.

          (Disclaimer: I didn’t specifically read OP, for the reason stated above.)