Quoted post unavailable.
As a Rust outsider, I really can't agree with someone saying Rust community is toxic!
Memory safety for the world’s largest software project
41–50 of 62 posts
Re: Memory safety for the world’s largest software project
#42One critical example of such infrastructure is the Linux kernel, used in most servers in the world as well as in billions of devices. ...billions of devices which the manufacturer does not want you to own, to be fair, and for which full ownership requires breaking through the security features that initiatives like this are trying to strengthen. You might think that's a political/social issue and this is merely a tec…
This is quite an unusual argument against memory safety. Wouldn't it be better to just not buy devices that don't allow root access?
Re: Memory safety for the world’s largest software project
#43Question regarding licensing: [1] states that a source file can be "one of the compatible GPL variants and alternatively under a permissive license like BSD, MIT etc."
Looking at a rust source file inside the dev tree 'Rust-for-Linux' [2], it is licensed as "Apache-2.0 OR MIT". However, Apache-2.0 appears to be incompatible with GPL-2.0 [3]. How come that the licensing in such a way is possible with the Linux licensing rules?
[1] https://github.com/torvalds/linux/blob/master/Documentation/... [2] https://github.com/Rust-for-Linux/linux/blob/rust/rust/alloc... [3] https://opensource.stackexchange.com/questions/1357/can-i-li...
Edit: Another quote from [1]: "[...], though individual source files can have a different license which is required to be compatible with the GPL-2.0:"
Re: Memory safety for the world’s largest software project
#44Earlier quoted context omitted.
> breaking through the security features that initiatives like this are trying to strengthen Could you elaborate why Kernel memory safety via Rust impedes “full ownership”?
Memory safety means fewer bugs means harder to root your Android device and use the hardware you paid for in ways you want? Just guessing. It’s high time we had competitive open-source options in the smartphone space.
Devices like Google Pixel support installing your own rooted Android together with actually adding a new signature to boot loader so you get a fully secure device - it's how projects like CalyxOS can guarantee privacy.
There's absolutely no need to defend security holes in an OS when you have options for proper secure installation of rooted OS available.
You just need to put money where your wishes are and not buy locked down OEM devices.
Re: Memory safety for the world’s largest software project
#45I’m so excited for this project. I feel like this is going to bring in a new generation of programmers to kernel development.
When GCC support [0] lands it's going to be a complete game-changer. [0] https://github.com/rust-lang/rustc_codegen_gcc
I think the GCC Front-End For Rust [1] is going to have an even larger impact going forward.
Re: Memory safety for the world’s largest software project
#46One critical example of such infrastructure is the Linux kernel, used in most servers in the world as well as in billions of devices. ...billions of devices which the manufacturer does not want you to own, to be fair, and for which full ownership requires breaking through the security features that initiatives like this are trying to strengthen. You might think that's a political/social issue and this is merely a tec…
Ultimately this has to be addressed politically. Technical contortions cannot forever make up for what are essentially broken societies and malfunctioning political systems.
Re: Memory safety for the world’s largest software project
#47Question regarding licensing: [1] states that a source file can be "one of the compatible GPL variants and alternatively under a permissive license like BSD, MIT etc." Looking at a rust source file inside the dev tree 'Rust-for-Linux' [2], it is licensed as "Apache-2.0 OR MIT". However, Apache-2.0 appears to be incompatible with GPL-2.0 [3]. How come that the licensing in such a way is possible with the Linux licensi…
With alternatives like that, you choose what applies, so if it's licensed as "MIT or literally-anything-else", it's still valid. Now why they chose to add Apache2, that is interesting.
A guess: if contributions to the project also need to be mit-or-asl2, then maybe that would force the patent grant clause to apply for contributions? (even if it doesn't change anything for the users)
Re: Memory safety for the world’s largest software project
#48Can we talk about “world’s largest”? This seems extremely unlikely by any measure.
[deleted]
Re: Memory safety for the world’s largest software project
#49Earlier quoted context omitted.
Memory safety means fewer bugs means harder to root your Android device and use the hardware you paid for in ways you want? Just guessing. It’s high time we had competitive open-source options in the smartphone space.
Devices like Google Pixel support installing your own rooted Android together with actually adding a new signature to boot loader so you get a fully secure device - it's how projects like CalyxOS can guarantee privacy. There's absolutely no need to defend security holes in an OS when you have options for proper secure installation of rooted OS available. You just need to put money where your wishes are and not buy lo…
That is good to know, thank you!
Re: Memory safety for the world’s largest software project
#50One critical example of such infrastructure is the Linux kernel, used in most servers in the world as well as in billions of devices. ...billions of devices which the manufacturer does not want you to own, to be fair, and for which full ownership requires breaking through the security features that initiatives like this are trying to strengthen. You might think that's a political/social issue and this is merely a tec…
The solution to that problem is through law, not inferior technical solutions.