✨ DG OPINION ON SAFETY FOR ISO C++

From the paper: 👀

🪲 "We believe we should not force safety on everyone, especially
those who don’t need or want it."

🦀 "Rust, originally from Mozilla, built on top of C++ became the poster child of a safe browser language"

🦀"Newer languages have less vulnerabilities because they have not
been through the test of time. Today, even RUST has had vulnerabilities discovered recently
[Rust2][Rust3][Rust4] and time will expose more vulnerabilities and weaknesses for general use."

Source:
https://www.reddit.com/r/rust/comments/10gi09w/dg_opinion_on_safety_for_iso_c/

#rust #rustlang #rusties #rustaceans #cpp #cplusplus #programming #infosec #rustacean

🦀 +🐍

#Granian: Rust HTTP server for Python applications

👉 Supports ASGI/3,RSGI and WSGI

👉 HTTP 1 & 2 protocols

👉Avoid the usual Gunicorn + uvicorn + http-tools dependency composition on unix systems

https://github.com/emmett-framework/granian

#rustlang #python #rusties #rustaceans #rust

✨ Introducing sqlite-xsv: The Fastest CSV Parser for SQLite

👉 New SQLite extension for querying CSVs,TSVs,and other-SVs,written in Rust

👉 Querying gzip'ed & zstd compressed files directly

https://github.com/asg017/sqlite-xsv

https://observablehq.com/@asg017/introducing-sqlite-xsv

#rustlang #rust #rustaceans #rusties

🦀 🪲 Watch out for DoS Vulnerability when using Rust’s popular Hyper package

👉 Forgetting to set proper limits on HTTP requests

👉 Up to developers that rely on Hyper to implement size check in their own code

https://jfrog.com/blog/watch-out-for-dos-when-using-rusts-popular-hyper-package/

#infosec #AppSec #rustlang #rustaceans #rusties #rust

🦀 Supporting the Use of Rust in the Chromium Project

👉 a simpler (no IPC) and safer

👉 Less complex C++ overall, no memory safety bugs

👉 Speed up development (less code to write)

https://security.googleblog.com/2023/01/supporting-use-of-rust-in-chromium.html

#rust #rustlang #rustaceans #rusties #rustacean

🦀 Security issue #Rust

👉 Cargo didn't perform SSH host key verification when cloning indexes and dependencies via SSH

👉 An attacker could exploit this to perform man-in-the-middle attacks

👉 Cargo before 1.66.1 vulnerable

https://blog.rust-lang.org/2023/01/10/cve-2022-46176.html

#rustlang #rustaceans #rusties #rustacean #infosec

🦀 Did you know you can run Rust code one by one just like Python with an interactive REPL?

cargo install evcxr_repl

https://crates.io/crates/evcxr_repl

#rust #rustlang #rustaceans #rustacean #rusties #python

🦀 Rust: Memory Safe Languages in Android 13 ( post by @jeffvanderstoep)

👉 To date, there have been zero memory safety vulnerabilities discovered in Android’s Rust code

👉 In Android 13, about 21% of all new native code is in Rust

👉 Migrated VM firmware in the Android Virtualization Framework to Rust

https://security.googleblog.com/2022/12/memory-safe-languages-in-android-13.html

#infosec #androidsecurity #memorysafety #exploits #rust #rustlang #rustaceans #rusties