Earlier quoted context omitted.
It is fascinating how despite the thousands and thousands of high profile memory related RCE vulnerabilities, how this community doesn't seem to like pointing the fact that C is an unsafe language.
Rust is only “safe” because by default you’re not allowed to do certain things. If you applied those same limitations to C it would be just as if not more safe. And the things you’re not allowed to do in “safe” Rust is required in various applications that C excels at, meaning that for Rust to do the same it has to be “unsafe”.
MotorOS: a Rust-first operating system for x64 VMs
21–30 of 125 posts
Re: MotorOS: a Rust-first operating system for x64 VMs
#22[flagged]
Re: MotorOS: a Rust-first operating system for x64 VMs
#23Earlier quoted context omitted.
It is fascinating how despite the thousands and thousands of high profile memory related RCE vulnerabilities, how this community doesn't seem to like pointing the fact that C is an unsafe language.
Rust is only “safe” because by default you’re not allowed to do certain things. If you applied those same limitations to C it would be just as if not more safe. And the things you’re not allowed to do in “safe” Rust is required in various applications that C excels at, meaning that for Rust to do the same it has to be “unsafe”.
Re: MotorOS: a Rust-first operating system for x64 VMs
#24[flagged]
Linux is a monolithic UNIX-like OS, with all the implications of an accidental design that dates to the late 60s/early 70s.
For starters, it has huge (Linux has MLoCs) TCB. And it is very trusted (undeservedly so) code, as it runs with supervisor privileges.
One bug in these MLoCs is all it takes.
There are far better system architectures out there.
Re: MotorOS: a Rust-first operating system for x64 VMs
#25Earlier quoted context omitted.
It is fascinating how despite the thousands and thousands of high profile memory related RCE vulnerabilities, how this community doesn't seem to like pointing the fact that C is an unsafe language.
Keep in mind the other important difference for this project which is a microkernel design with most operations running in isolated user space processes/libraries. That also helps limit the ability to exploit vulnerabilities in one place to take over other parts of the system.
A safety-friendly language can help, but the system architecture is most important.
Re: MotorOS: a Rust-first operating system for x64 VMs
#26Earlier quoted context omitted.
[flagged]
It is fascinating how despite the thousands and thousands of high profile memory related RCE vulnerabilities, how this community doesn't seem to like pointing the fact that C is an unsafe language.
The implication there is that Rust is safe.
Reality is, it is not.
Rust provides some tools C does not, which can help in writing safe programs. That is about it.
In exchange, it is a relatively young language with all it implies. For instance, there are not yet any successful OSs written in Rust.
Kudos to the authors for actually writing code to change this, instead of evangelizing Rust on HN.
Re: MotorOS: a Rust-first operating system for x64 VMs
#27Re: MotorOS: a Rust-first operating system for x64 VMs
#28Earlier quoted context omitted.
I think it’s a shock when compared with the insecurity of Windows also forgetting that that was the reality on the ground in the 90s and that Windows also had a larger share. Windows has since hardened their security model and could be a more secure out of the box experience than Linux (eg shipping with TPM and FDE set up correctly). But yeah, there’s plenty of things you’d do differently if you wanted to properly se…
I think you are confusing Linux the Kernel with Linux-based operating systems. The original quote from the README was referencing the kernel and made no comparison to Windows or the NT kernel.
The design choices you’d make to build a secure OS (kernel and user space) looks very different. The microkernel design is a more secure design but techniques to make it work fast took a very long time to develop (+ computer HW also got fast enough that the overhead is no longer as big of a deal + we have multithreading everywhere that microkernel can sometimes exploit more naturally).
Re: MotorOS: a Rust-first operating system for x64 VMs
#29Earlier quoted context omitted.
It is fascinating how despite the thousands and thousands of high profile memory related RCE vulnerabilities, how this community doesn't seem to like pointing the fact that C is an unsafe language.
>pointing the fact that C is an unsafe language. The implication there is that Rust is safe. Reality is, it is not. Rust provides some tools C does not, which can help in writing safe programs. That is about it. In exchange, it is a relatively young language with all it implies. For instance, there are not yet any successful OSs written in Rust. Kudos to the authors for actually writing code to change this, instead o…
The rate at which new successful OS's come about is extremely low. Despite that, at least one OS in rust is being successfully deployed commercially today ('hubris', thanks to oxide computing), there are numerous reasonably advanced 'amateur' OS projects in rust (redox os being a reasonably polished example), and rust has begun finding it's way into the two most popular existing OSes (both the linux and windows kernels - I believe the windows kernel is farther along here).
By any reasonable metric, rust has been wildly successful in the OS writing space. No doubt, in large part thanks to evangelizing by people who said "this is a reasonable thing to do".