Live data from Hacker News

Rust at Scale: An Added Layer of Security for WhatsApp

engineering.fb.com

31–40 of 151 posts

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#31

[flagged]

I agree with everything you say. But wow, does that comment sound like AI. Probably Grok? Not saying you are AI, you might just be a heavy user who picked up the same patterns

If it were an old account I might have given them the benefit of the doubt, but they literally just joined to make this comment. There's so many green accounts popping up which reek of AI now, like I've seen ones where all of their comments are almost exactly the same length.

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#32

Earlier quoted context omitted.

I agree with everything you say. But wow, does that comment sound like AI. Probably Grok? Not saying you are AI, you might just be a heavy user who picked up the same patterns

The "is key - ", is a key giveaway. EDIT to expand the evidence: It's placing unnecessary emphasis on a one off mention in the article (differential fuzzing) and then writes a bunch of bullshit around what it thinks it means (it's wrong, differential fuzzing isn't running them both in parallel during a transition, it's a testing methodology based on inputs/outputs).

TIL I'm an AI

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#33

Earlier quoted context omitted.

I agree with everything you say. But wow, does that comment sound like AI. Probably Grok? Not saying you are AI, you might just be a heavy user who picked up the same patterns

The "is key - ", is a key giveaway. EDIT to expand the evidence: It's placing unnecessary emphasis on a one off mention in the article (differential fuzzing) and then writes a bunch of bullshit around what it thinks it means (it's wrong, differential fuzzing isn't running them both in parallel during a transition, it's a testing methodology based on inputs/outputs).

I think it's a giveaway that it's human! A hyphen is incorrect punctuation.

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#34

[flagged]

That's right, Signal (https://kerkour.com/signal-app-rust), Proton (https://kerkour.com/proton-apps-rust), Matrix, Wire and many more are using a share, cross-platform Rust core and a platform-dependent UI layer.

But it's not only the security-critical paths, but also most of the business logic (see the 2 posts above).

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#35
Just like Google’s Rust-in-Android blogs this reads like a PR piece (and in the case of facebook also recruitment piece) with some technical words sprinkled in for effect. The overall communication quality is that of a random startup’s “look what we did” posts.

The interesting aspects, such as how they protect against supply-chain attacks from the dependency-happy rust toolchain or how they integrated the C++ code with the Rust code on so many platforms - a top challenge as they said - remain a mystery.

Would also be interesting to hear how much AI-driven development they used for this project. My hope’s that AI gets really good at Rust so one doesn’t have to directly interact with the unergonomic syntax.

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#36
post #33

Earlier quoted context omitted.

The "is key - ", is a key giveaway. EDIT to expand the evidence: It's placing unnecessary emphasis on a one off mention in the article (differential fuzzing) and then writes a bunch of bullshit around what it thinks it means (it's wrong, differential fuzzing isn't running them both in parallel during a transition, it's a testing methodology based on inputs/outputs).

I think it's a giveaway that it's human! A hyphen is incorrect punctuation.

According to British style guides an en-dash would be correct in that usage, and the difference between an en-dash (–) and a hyphen (-) is pretty small. Seems perfectly defensible to me unless you are publishing a book or academic journal

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#37
post #17
post #12

> Two major hurdles were the initial binary size increase due to bringing in the Rust standard library [...]. They don't say what they did about it, do they? Did they just accept it?

Probably yes. It's ~300KB per binary, and it's a one-time cost. It can be avoided entirely by disabling the standard library, but that's inconvenient, and usually done only when writing for embedded devices. Usually the problem isn't the size directly, but duplication of Rust dependencies in mixed C++/Rust codebases. If you end up with a sandwich of build systems (when you have library dependencies like C++ => Rust =…

The size is not fixed. It changes based on how much of the standard library you use. Dynamically linking the standard library is also a valid option in many cases.

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#38
The 160k → 90k LOC reduction is nice, but the parallel rollout is the more interesting part. Running Rust alongside the C++ version and using differential fuzzing to check equivalence is a lot more realistic than “rewrite and pray.” You get incremental validation with the old system as a fallback. Curious how long they ran both before cutting over.

Binary size is a real concern on the client side. On servers the Rust stdlib overhead usually doesn’t matter, but when you’re shipping to billions of mobile devices, every KB counts. Good to see they invested in build tooling instead of just accepting the bloat.

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#39
post #35

Just like Google’s Rust-in-Android blogs this reads like a PR piece (and in the case of facebook also recruitment piece) with some technical words sprinkled in for effect. The overall communication quality is that of a random startup’s “look what we did” posts. The interesting aspects, such as how they protect against supply-chain attacks from the dependency-happy rust toolchain or how they integrated the C++ code wi…

The point of articles like this is to help build credibility for rust adoption. Rust is still not very widely adopted industry wide, and a lot of smaller players only use established technologies that bigger firms have shown works well. Rust is not inevitable, and articles like this are necessary for its future industry adoption.

Re: Rust at Scale: An Added Layer of Security for WhatsApp

#40

[flagged]

I agree with everything you say. But wow, does that comment sound like AI. Probably Grok? Not saying you are AI, you might just be a heavy user who picked up the same patterns

It's a brand new account that reads 100% like a ChatGPT response where the author just swapped out the em dashes for hyphens when posting, knowing it's a common "indicator" people look for.

It's more surprising to me that it seems to have already fooled a bunch of people looking at their replies to you.

Post reply on HN