
Herbert "TheBracket" Wolverson
6.3K posts

Herbert "TheBracket" Wolverson
@herberticus
Author of Hands-on Rust. Rust Trainer at Ardan Labs. Consultant with Bracket Productions and iZones. Rust Series Expert at PragProg.


you can outsource your thinking but you cannot outsource your understanding

🦀 A security audit just taught the Rust community something valuable. Canonical audited uutils, the Rust rewrite of GNU coreutils shipping in Ubuntu and found 44 vulnerabilities. Not one CVE was: - Buffer overflow - Use-after-free - Data race - Null pointer dereference For context : GNU coreutils had ALL of these in just the last 3 years. So what kind of bugs did Rust miss? Logic bugs at OS boundaries: → Race conditions between syscalls (TOCTOU) → Path string != filesystem identity → UTF-8 where bytes were needed → Errors swallowed instead of propagated → Diverging from GNU's exact behavior 📖 Full breakdown → corrode.dev/blog/bugs-rust… #Rust #RustLang #Security #SystemsProgramming #OpenSource









New Rust sugar is to me, unintelligible at first glance. After some study, I got it and I see the benefit. But I continue to believe that this language doesn't need more sugar, and I believe it's hard to improve code clarity when packing so much into one line. But it is what it is. Rust didn't get good by listening to me about anything. #if-let-guards-in-matches" target="_blank" rel="nofollow noopener">blog.rust-lang.org/2026/04/16/Rus…


















