- Joined
- Oct 19, 2023
you should really work on your point making strategies because they are almost indistinguishable from your baitYou should really work on your bait detection strategies.
and yet rust projects also use stuff like fuzzers, because rust can't protect against a myriad other errors like hangs and some retard hitting > instead of < in an edge case of an edge caseThe things you need to do just to get what rust gives you by default is insane. Just use a gorillion third party tools to make up for what the compiler should be doing.
good software development practices will always be more good at preventing bugs than any compiler you can think of
i bet if you subjected the average rust program (and its hundreds of libraries, since we really need that "high developer velocity") to sqlite standards you would find hundreds of nasty bugs (and even some vulnerabilities) before you could say "muh borrow checker"
one of these is in some internal interface that probably wouldn't be that exploitable, and the other one is the single other bug of such nature i can find on sqlite's cve page, and is actually kind of bad. you got meSqlite3 is the prime example of good software development practices with C so posing a challenge to find buffer overflows in it is clearly in bad faith, even so, let me direct your attention to two memory safety bugs in sqlite3 that rust would have prevented, from just this year.
https://nvd.nist.gov/vuln/detail/CVE-2025-3277 https://nvd.nist.gov/vuln/detail/CVE-2025-29088 The average C program is nowhere near as robust as sqlite3 is, very few C projects even reach that level, but even when they do, they still have the same flaws that just happen to manifest everywhere C is used.
but this just proves that it's not completely impossible to write a very large c program that does all sorts of string and buffer handling without having a new cve every month
and i will not even talk about all the stuff that c++ has so you can easily write memory-safe programs. wow this
Box<T>
shit is such a neat feature, if only c++ had this...anyway, if rust was such a perfect replacement for c, i'd think stuff like sqlite3 and openbsd, these projects full of very security-minded individuals, would be a lot more enthusiastic about it. since they aren't, it's the job of rust supporters such as yourself to figure out why (and it's not solely gay political forces at work here, i know for a fact that most c programmers would absolutely love a better c (and to these people, rust is not a better c))