Empowering everyone to build reliable and efficient software.
Socket - Block zero-day supply chain attacks
Socket fights vulnerabilities and provides visibility, defense-in-depth, and proactive supply chain protection for JavaScript, Python, and Go dependen...
The Ultimate Guide to Rust Newtypes
Clean up your code, clarify business logic and improve test coverage with Rust's newtype wrappers.
keyv and cacheable npm Package Hijacked in Supply Chain Attack | Wiz Blog
Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages.
iddqd, or the hardest kind of unsafe Rust | Oxide Computer Company
How our Rust collections library defends against adversarial trait implementations.
Download pumping: New npm deception technique for supply chain attacks
Learn how attackers exploit automated bot traffic as part of software supply chain attacks to artificially inflate download counters and mask malicious payloads as legitimate.
Rust traits and dependency injection - Julio Merino (jmmv.dev)
Dependency injection is one of my favorite design patterns to develop highly-testable and modular code. Unfortunately, applying this pattern by taking Rust traits as arguments to public functions has …
Attacking & Auditing Docker Containers Using Open Source tools
Announcing Rust 1.96.1 | Rust Blog
Empowering everyone to build reliable and efficient software.
The Rust Programming Language - The Rust Programming Language
by Steve Klabnik, Carol Nichols, and Chris Krycho, with contributions from the Rust Community
Stop Forwarding Errors, Start Designing Them | FastLabs / Blog
We develop fast Rust crates and release them fast.
The state of the Rust dependency ecosystem
Over the past few days, I analyzed over 200,000 crates from crates.io to uncover patterns in maintenance, developer engagement, security, and overall ec...
Rust Programming Language
A language empowering everyone to build reliable and efficient software.
Place Capability Graphs: A General-Purpose Model of Rust’s Ownership and Borrowing Guarantees
Rust’s novel type system has proved an attractive target for verification and program analysis tools, due to the rich guarantees it provides for controlling aliasing and mutability. However, fully understanding, extracting and exploiting these guarantees is subtle and challenging: existing models for Rust’s type checking either support a smaller idealised language disconnected from real-world Rust code, or come with severe limitations in terms of precise modelling of Rust borrows, composite types storing them, function signatures and loops.