Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't get what you're saying here.

- Without Rust you program to protect users assets without guaranteed memory safety.

- With Rust you program to protect users assets, with the addition of guaranteed memory safety.

Sounds like a win win to me.



Indeed it is a good thing. What I'm just a little bit weary of is equating that sort of improvement with increasing overall security. We went there already with Java and this hasn't stopped Java from being an attack vector.

The way this sort of reasoning affects the behavior of engineers and the products they put out in front of users.


I get that you don't want developers to learn the bad habit of believing that Rust means they no longer need to pay any attention to security themselves, but that doesn't negate the fact that Rust does indeed increase some aspects of your program's security as compared to C.

The security provided by Rust shouldn't be overestimated, but I think it's unfair to underestimate the benefits of the memory safety as well.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: