robot 9001

@robo9k
6 Followers
245 Following
116 Posts
Unfortunately a human.
Software developer, dabbling with Rust in spare time.
Fan of idTech 3, technology, science, sci-fi and cats!
GitHubhttps://github.com/robo9k
LocationEarth, Europe, UTC+1
Show threadrobot 9001Feb 15

@danielsreichenbach external build systems suck, not enough sys convention in Rust?

sys crates themselves allow using e.g. C(++) dependencies and those are often tricky to build in their original form already.

If there is no native Rust implementation of those dependencies, this is certainly better than having nothing?

The configuration of using different implementations is usually via feature flags in the consumers of the sys crate (e.g. `reqwest`), so if anything those could make it easier.

Show threadrobot 9001Feb 15
@pwaring `src/*.rs` and other file locations are defined in the package layout
https://doc.rust-lang.org/cargo/guide/project-layout.html
Some of those paths can be configured differently
Package Layout - The Cargo Book

Show threadrobot 9001Feb 15
@boracle @pwaring `Result` is just one possible return type for `main`, see https://doc.rust-lang.org/std/process/trait.Termination.html
Termination in std::process - Rust

A trait for implementing arbitrary return types in the `main` function.

Show threadrobot 9001Feb 15
@pwaring the "standard library" is an optional dependency, see `no_std`, e.g. for embedded targets
https://docs.rust-embedded.org/book/intro/no-std.html
no_std - The Embedded Rust Book

Show threadrobot 9001Dec 30
@catsalad 2log4j8me
Show threadrobot 9001Dec 29

@YaLTeR it's some boilerplate and requires a build.rs but the code itself is easy?

https://doc.rust-lang.org/cargo/reference/build-script-examples.html#conditional-compilation

Build Script Examples - The Cargo Book

Show threadrobot 9001Dec 1
@corpsmoderne what's the version / source of the `rp235x-hal` crate you are using?
Show threadrobot 9001Nov 26

@mttaggart @eragon thanks for checking those extensions and updating the OP!

I only have passing knowledge of web extensions, but counterintuitively having to recommend a weaker CSP due to ecosystem deficits in the current year gave me pause, so good to have a chat and one less bad news :)

Show threadrobot 9001Nov 26

@mttaggart @eragon if I understand correctly that means the new Entra CSP would then only block password manager extensions that rely on injecting inline scripts

External scripts also seem to be against extension best practices
https://extensionworkshop.com/documentation/develop/build-a-secure-extension/

It feels like this change is only an issue for password manager extensions that currently have fragile implementations to begin with?

Build a secure extension

Learn best practices to build a secure Firefox extension. Protect your users and your add-on by implementing key security and privacy measures.

Firefox Extension Workshop
Show threadrobot 9001Nov 26

@mttaggart @eragon it seems like the CSP spec itself advocates for extensions to be exempt from the page CSP
https://www.w3.org/TR/CSP/#extensions

At the same time this does not seem to be implemented (correctly) in browsers, see e.g
https://bugzilla.mozilla.org/show_bug.cgi?id=1267027

Would be wild if a regular page could tell my user-agent to basically disable e.g. my ad-blocker extension