What do you think are the primary challenges for Open Source the coming years?
Security? CRA? Financing? Maintainer burnout? Recruiting young developers? Adapting to a country-former-ally going nuts? AI slop? AI bot overload? Something else?
(I'd like some more food for thoughts for an upcoming talk)
Let me introduce you to my new friend #curl 8.11.0
One vulnerability fixed, five changes, 266 bugfixes.
axum 0.7 is finally out 🚀 #rustlang
Comes with hyper 1.0 support, axum's own Body type, and fewer generics.
Improved Multithreading in wgpu - Arcanization Lands on Trunk
https://gfx-rs.github.io/2023/11/24/arcanization.html
Discussions: https://discu.eu/q/https://gfx-rs.github.io/2023/11/24/arcanization.html
We disclosed this #hackerone report against #curl when someone asked Bard to find a vulnerability, and it hallucinated together something:
## Summary: Curl CVE-2023-38545 vulnerability code changes are disclosed on the internet ## Steps To Reproduce: To replicate the issue, I have searched in the Bard about this vulnerability. It disclosed what this vulnerability is about, code changes made for this fix, who made these changes, commit details etc even though this information is not released yet on the internet. In addition to it,...
Today we got what must be the most alarming first line in a newly file sec issue to #curl:
"To replicate the issue, I have searched in the Bard about this vulnerability"
... followed by a complete AI hallucination where Bard has dreamed up a new issue by combining snippets from several past flaws. Creative, but hardly productive.
Closed as bogus.
daniel:// stenberg://
davidpdrsn
Rust Weekly 🦀
Ben Sandofsky