Mastodawn

android's data for rust adoption shows that rust code has ~5000 times fewer memory safety vulnerabilities per MLOC. that's a lot more than i expected, actually! https://security.googleblog.com/2025/11/rust-in-android-move-fast-fix-things.html

(you might say that you're better than google's devs, but are you *five thousand times* better? i'd be skeptical.)

Rust in Android: move fast and fix things

Posted by Jeff Vander Stoep, Android Last year, we wrote about why a memory safety strategy that focuses on vulnerability prevention in ...

Google Online Security Blog

Show thread

Jonathan Hartley Nov 15

@whitequark I know nothing about nothing here, and don't have a horse in this race, but one doesn't need to be 5,000 times better to generate 5,000 times fewer errors. I could imagine scenarios where one was just the merest "I know to check for this one common thing" scintilla better.

Show thread

✧✦Catherine✦✧

@tartley yes, for sure; you'd have to actually look into the details of errors to know how much better one truly needs to be (and even that whether this is even something one can really measure is very questionable)