Live data from Hacker News

“Why was Rust chosen for Libra?” in congressional hearing [video]

c-span.org

11–20 of 80 posts

Re: “Why was Rust chosen for Libra?” in congressional hearing [video]

#13
This is a good question to ask, especially about the nightly builds from upstream. There have been NPM exploits targeted at crypto currency developers (e.g. the event-stream breach), so it seems FB would be placing a lot of trust in the Rust developers. This is not to say Rust maintainers are dishonest, but all it takes is one person who's authentication credentials gets comprised.

Re: “Why was Rust chosen for Libra?” in congressional hearing [video]

#14

I don't think I've ever heard of a Congressman going to GitHub, poking around in some open source code, and then asking very cogent and relevant questions about it. This video is incredible if only because of that.

Yeah that's the most interesting part of this video. Good to know at least 1 person in Congress knows what "code" is and what "GitHub" is, and even more good that they're knowledgeable enough to know what Rust is, that different languages exist and may have different features and stability, and what nightly builds are. Since overseeing software and data security regulations is part of their job.

Re: “Why was Rust chosen for Libra?” in congressional hearing [video]

#15

I don't think I've ever heard of a Congressman going to GitHub, poking around in some open source code, and then asking very cogent and relevant questions about it. This video is incredible if only because of that.

Congresspeople often come from backgrounds other than law. It could have also been his aides helping with this.

Re: “Why was Rust chosen for Libra?” in congressional hearing [video]

#16

This is a good question to ask, especially about the nightly builds from upstream. There have been NPM exploits targeted at crypto currency developers (e.g. the event-stream breach), so it seems FB would be placing a lot of trust in the Rust developers. This is not to say Rust maintainers are dishonest, but all it takes is one person who's authentication credentials gets comprised.

Also, it's not just an issue of an intentionally backdoored compiler. The nightly could have some experimental optimization enabled, and if there's a bug in the optimization, it could introduce a vulnerability into the compiled Libra binaries.

Re: “Why was Rust chosen for Libra?” in congressional hearing [video]

#17

I don't think I've ever heard of a Congressman going to GitHub, poking around in some open source code, and then asking very cogent and relevant questions about it. This video is incredible if only because of that.

Probably an intern on his staff did the research.

Re: “Why was Rust chosen for Libra?” in congressional hearing [video]

#20
post #17

I don't think I've ever heard of a Congressman going to GitHub, poking around in some open source code, and then asking very cogent and relevant questions about it. This video is incredible if only because of that.

Probably an intern on his staff did the research.

>Riggleman was in the Air Force for eleven years, serving as an intelligence officer. He then worked as a contractor for the National Security Agency.

He may just be familiar with programming.

Post reply on HN