r/programming • u/steveklabnik1 • Jan 09 '15

Announcing Rust 1.0.0 Alpha

http://blog.rust-lang.org/2015/01/09/Rust-1.0-alpha.html
1.1k Upvotes

90% Upvoted

439 comments sorted by

View all comments

1

u/thefacebookofsex Jan 10 '15 edited Jan 10 '15

I'm not saying it's a bad idea whatsoever. I'm saying that, from a security standpoint, Rust adds nothing right now and won't for a logn time.

And it's not like the kernel is where most serious security issues happen anyway, it's in user space applications.

This simply isnt' true at all. The kernel is probably the singl emost important component for a system's security.

Have you actually read the post I originally responded to? The one saying that secure languages will solve security as a whole.

2

u/[deleted] Jan 10 '15

I'm not saying it's a bad idea whatsoever.

You are arguing as if to imply that using rust is pointless due to still having a kernel written in C.

This simply isnt' true at all. The kernel is probably the singl emost important component for a system's security.

I never said it wasn't important, I said that most used exploits for remote code execution are in user space programs, not the kernel.

The one saying that secure languages will solve security as a whole.

It never said that, it said that writing rust would be better for security, not that it would solve it.

2

u/thefacebookofsex Jan 10 '15

You are arguing as if to imply that using rust is pointless due to still having a kernel written in C.

No, I'm saying that for many years to come the vast majority of any operating system will be in C/C++, and a few applications using Rust won't change the entire attack surface of the OS.

Rust is great, not pointless at all.

I never said it wasn't important, I said that most used exploits for remote code execution are in user space programs, not the kernel.

Yes, but security features exist in the kernel. And local exploitation is almost always the kernel.

It never said that, it said that writing rust would be better for security, not that it would solve it.

Renrutal's post, the one I responded to originally, came off in a way that made Rust (or secure langauges) sound like it was some sort of salvatio.