Viewing profile — Manishearth

I recently used a pretty well-tuned LLM to find ~500 safety bugs across the Rust ecosystem. Most of them are minor, and even major safety issues in Rust usually mean "it's possible…

Yeah. I do use this trick. Some "root" passwords are ones I do not put in my password manager out of "what if my pwd manager gets compromised" paranoia, but that makes me more vuln…

.... we're talking about serialization here. "convert to a raw string" is sort of the name of the game. It's a string in a well specified string format. That's typically what you w…

Yeah, and it's even better if you have a GC where you can control when the collection phase happens. E.g. in a game you can force collection to run between frames, potentially even…

Worth highlighting: library-level GC would not be convenient enough to use pervasively in Rust anyway . library-level GC does not replace Rust's "point". It's useful to have when y…

Diplomat has a wasm backend so it would even be really easy to produce a WASM ffi target with idiomatic JS and TS bindings. Also, Diplomat supports traits and callbacks so you coul…

They're also explicitly tracking new code by language, and talking about memory safety vulnerabilities per year, and they also link to [1] which talks about how most memory safety …

I always say that if the strongest complaint people have about your language is syntax; you've already succeeded.

I don't understand your question. GATs allow traits to abstract over associated types that are themselves to some degree abstract. In this case, it's necessary to do the relevant t…

(the person who posted the article here isn't the author (me)) The bugs in part 1 all around using higher ranked trait bounds. I'd disagree with the characterization that they're "…

> Total BS too. Maybe in India. This has been the case at both my current and previous (American tech) jobs. And it's pretty racist to assume that a person is working or has worked…

I think most of these companies have had a pretty large investment, they're just not really open about it in many cases. So yeah, it's a pretty visible signal, but the investments …

The wgpu crate is being developed by Firefox engineers for Firefox. As lastontheboat said we had a student integrate it into Servo this year.

The Linux Foundation is basically a catch-all foundation for smaller open source projects, this is not "Linux owns a browser engine". The "Linux" there is more of an indicator of i…

Many of us are looking for (or have found) dayjobs, but it's possible some folks may be open to contracting work on servo/etc. But nobody is being paid to work on servo right now.

We spent a significant amount of effort in the last year and a half working on a redesigned modular/parallel layout subsystem. The VR focus was because it was a good way to get ser…

Servo was never tightly integrated with a sizeable browser project. It shared some components with Firefox, but the only time Servo itself was inside an actual browser release was …

So this is the core problem with all of the general relativity materials that model it as a rubber sheet causing curvature in spacetime. They always model it with focus on _spatial…

No, not quite, the signature will be `fn foo () -> &'a u8` (there is no way to elide this) However, Rust lifetimes are stretchy-squeezy, and a free lifetime is basically the same a…

I agree, as someone who works on rustc I think it's a significant endeavor to maintain a substantial fork of either Rust or LLVM. (Rust does maintain a fork of LLVM, but it's just …

The text was changed due to feedback provided elsewhere in this HN page. The blog post was drafted by the core and foundation team, however we did get sign-off from Mozilla on it. …

I want to clarify: The Rust project has been largely "outside" of the Mozilla incubator for quite a while already; with most of the governance being non-Mozilla individuals. The ma…