• @rational_lib
    link
    72 days ago

    Imagine if there was a hack so bad that it caused everyone to become unable to develop in C and C++.

    Classic “let’s just make the cure worse than the disease” mindset among security enthusiasts.

    • @[email protected]
      link
      fedilink
      English
      0
      edit-2
      23 hours ago

      Imagine if there was a hack so bad that it caused everyone to become unable to develop in C and C++.

      Well, there is one that will imply you can only develop using anything that you have bootstrapped yourself, using hardware that you have designed and manufactured yourself, using tools that you have designed and manufactured yourself, using tools that you have designed and manufactured yourself …

      … with your own bare hands.

  • @riodoro1
    link
    393 days ago

    The US government has more pressing issues I think.

    Maybe it can shut the fuck up an let me do my job in contrast to its judicial branch.

    • @[email protected]
      link
      fedilink
      43 days ago

      What if I told you the judicial branch is doing its job because it was always evil to begin with?

      • @riodoro1
        link
        43 days ago

        I would say you’re right

  • @Solemarc
    link
    854 days ago

    I don’t get why we’re taking a swing at Linus here. The article only mentions him in relation to the rust for Linux project being slow going. But, it IS going and the US government has only stated that “you need a plan to move to a memory safe language by 2025 or you might be liable if something bad happens as a result of the classics (use after free/double free/buffer overflow/etc.)” but I don’t think Linux would count it’s free software and it does have a plan.

    • @nutsack
      link
      10
      edit-2
      3 days ago

      they don’t swipe him at all. I don’t know why his picture is there

      • @Pilferjinx
        link
        263 days ago

        Did… Did you just diss the All Mighty Father, Emperor of Linux on Lemmy?

        • @Atlas_
          link
          163 days ago

          He did! He did just diss the All Might Father, Emperor of Linux on Lemmy!

            • AbsentBird
              link
              fedilink
              English
              63 days ago

              kill -9 You gotta learn when it’s time for your thread to yield; you shoulda slept; instead you stepped and now your fate is sealed.

        • Captain Aggravated
          link
          fedilink
          English
          -24 days ago

          I do know that Linus is on record with low opinion of C++. I have heard of him compare the cult-like following Rust has with the whole Vim/Emacs tribalism thing.

          • @[email protected]
            link
            fedilink
            234 days ago

            I didn’t understand this. He said the bickering between C and rust devs reminds him of the vim/emacs debate.

          • @[email protected]
            link
            fedilink
            114 days ago

            I have heard of him compare the cult-like following Rust has with the whole Vim/Emacs tribalism thing.

            Heh.

            I do think the worst thing going for Rust, right now, is the Rust community.

            It feels like few specific jackasses from the Java community made the jump to Rust, and no one had the sense to slap them with a newspaper.

              • @[email protected]
                link
                fedilink
                3
                edit-2
                3 days ago

                Can you be more specific?

                Sure.

                I’ve had discussions about my impression that Rust’s build chain can be a bit surly compared to other popular languages.

                I don’t particularly mean it as a criticism - of course Rust’s security enforcement comes with more warnings and errors.

                But the novel part of the interactions, for me, was Rust community members coming at me with ‘well get gud, newbie’.

                These interactions are particularly ironic, given my experiences and specialties. I’m an old school veteran software developer. I have spent over half of my career in dedicated Cybersecurity roles.

                These conversations converted me from a mildly interested Rust proponent into a casual Rust critic.

            • @Valmond
              link
              43 days ago

              Java sucked so much though (and still does).

              • @bradboimler
                link
                English
                03 days ago

                I love programming in Java. It continues to be my language of choice.

                • @Valmond
                  link
                  13 days ago

                  Lets have a flame war like back in the day!

                  :-)

  • @[email protected]
    link
    fedilink
    English
    854 days ago

    If only it were that easy to snap your fingers and magically transform your code base from C to Rust. Spoiler alert: It’s not.

    How utterly disingenuous. That’s not what the CISA recommendation says, at all.

    • @omega_x3
      link
      73 days ago

      The US government hates anything that can perform math too fast.

    • @MajorasMaskForever
      link
      English
      53 days ago

      As someone who learned Ada for a defense job years ago, I’ve been wondering how long it was going to take until I saw others comparing Rust to it, both in the sense of the language “safety” goals and the USG pushing for it.

      While the rust compiler is leagues better than any Ada compiler I ever had the misfortune of dealing with, the day to day pain that Rust incurs will probably always be a thorn in it’s side

  • @morphballganon
    link
    163 days ago

    “Oh, I thought I was coding in Python. Oops!”

    Continues coding in C++

  • @tourist
    link
    294 days ago

    My friend from university sends me his Rust code snippets sometimes. Ngl it looks like a pretty cool language.

    There was also that tldr reimplemention in Rust that is a gatrillion times faster than the original.

    I really want to give it a try but I have executive dysfunction and don’t have any ideas of what I could use it for.

    • @[email protected]
      link
      fedilink
      English
      214 days ago

      The main issue I have with rust is the lack of a rust abi for shared libraries, which makes big dependencies shitty to work with. Another is a lot of the big, nearly ubiquitous libraries don’t have great documentation, what’s getting put up on crates.io is insufficient to quickly get an understanding of the library. It’d also be nice if the error messages coming out of rust analyzer were as verbose as what the compiler will give you. Other than that it’s a really interesting language with a lot of great ideas. The iterator paradigm is really convenient, and the way enums work leads to really expressive code.

      • @[email protected]
        link
        fedilink
        133 days ago

        As someone that have worked in software for 30 years, and deplying complicated software, shared libraries is a misstake. You think you get the benefit of size and easy security upgrades, but due to deployment hell you end up using docker and now your deployment actually added a whole OS in size and you need to do security upgrades for this OS instead of just your application. I use rust for some software now, and I build it with musl, and is struck by how small things get in relation to the regular deployment, and it feels like magic that I no longer get glibc incompatibility issues.

        • @[email protected]
          link
          fedilink
          English
          23 days ago

          Maybe for your use cases that’s OK, but there are many situations where the size and ease of upgrading provided by shared libraries is worthwhile. For example it would suck to need to push a 40+ GB binary to a fleet of systems with a poor or unreliable internet connection. You could try to mitigate this sort of thing by splitting the application up into microservices, but that adds complexity, and isn’t always a viable tradeoff if maximizing compute efficiency is also a concern.

          • @calcopiritus
            link
            1
            edit-2
            2 days ago

            I’m not so sure that dynamic libraries always reduces the size. Specially with libraries that are linked by a single binary.

            With static libraries, you can conditionally compile only the features you’re gonna use. With dynamic libraries, however, the whole library must be compiled.

            EDIT: just to clarify, I’m not saying that static libraries result always in less size. I’m saying that it’s not a black and white issue.

        • @[email protected]
          link
          fedilink
          33 days ago

          due to deployment hell you end up using docker

          Maybe tackle that deployment hell instead of band-aiding it with docker?

          • @[email protected]
            link
            fedilink
            03 days ago

            He is. By using statically linked binaries.

            Technically this is conflating two things: bundling dependencies and static/dynamic linking. But since you have to bundle your dependencies to use static linking, and there’s little point dynamic linking if you bundle your dependencies… most of the time they are synonymous.

            Exceptions are things like plugins, but that’s pretty rare.

      • @[email protected]
        link
        fedilink
        English
        144 days ago

        Documentation is generally considered one of the stronger points of rust libraries. Crates.io is not a documentation site you want https://docs.rs/ for that though it is generally linked to on crates.io. A lot of bigger crates also have their own online books for more in depth stuff. It is not that common to find a larger crate with bad documentation.

        • @[email protected]
          link
          fedilink
          English
          22 days ago

          One specific example I encountered was ndarray. I couldn’t figure out how to make a function take an array and an arrayslice without rewriting the function for both types. This could be because I’m novice with the language, but it didn’t seem obvious. I ended up giving up after trying to dig through the docs for a few hours and went back to C++.

      • @asdfasdfasdf
        link
        4
        edit-2
        4 days ago

        Why not just use the C ABI?

        And what libraries are you referring to? Almost all the ones I’ve used have fantastic docs.

    • @SpaceNoodle
      link
      33 days ago

      Of course its rewrite is nearly infinitely faster than the original JavaScript.

      • @tourist
        link
        42 days ago

        oh

        lol

        didn’t cross my mind that someone would make a CLI program in js

        I mean, I’ve done it, but I am a registered dunce cap owner.

    • @[email protected]
      link
      fedilink
      164 days ago

      Rust is definitely a really cool language (as someone who has played with it just a little) but it’s quite headache inducing, at least for me at the moment.

      • @asdfasdfasdf
        link
        13 days ago

        What’s causing the most headache for you?

        • @[email protected]
          link
          fedilink
          23 days ago

          Mostly the ownership model, trying to remember which functions expect borrowed types or not, etc.

          The error messages in rust are really good, so I can usually make the code work quickly, but I need to properly understand the reason behind the error in order to learn, so that’s when I get headaches

  • @HiddenTower
    link
    134 days ago

    I thought the US Government bought a lot of software in Ada, so I hope they continue with that.

  • @it_depends_man
    link
    Deutsch
    234 days ago

    To address this concern, CISA recommends that developers transition to memory-safe programming languages such as Rust, Java, C#, Go, Python, and Swift.

    If only it were that easy to snap your fingers and magically transform your code base from C to Rust.

    guy_butterfly_meme.jpg is this unbiased journalism?

    • @[email protected]
      link
      fedilink
      13
      edit-2
      4 days ago

      As the article is denoted as a comment, it is not its aim to be unbiased journalism.

      In contrast to usual articles, comments usually elaborate on the opinion of the jounalist.

      • @[email protected]
        link
        fedilink
        74 days ago

        I don’t know why you’re being downvoted. It literally starts with the word OPINION in bold red caps.

        • @[email protected]
          link
          fedilink
          3
          edit-2
          3 days ago

          My mind was making one transfer to much, as the opinion clip in German TV news is called comment. There were no additional downvotes after I added the second sentence for clarification.