I don't care, I just like to watch the fire. If watching the fire makes it burn harder, wouldn't that be fun?
PlexSheep
joined 1 year ago
That's not a necessity through. You might still suck but in a way they don't like.
Idk arc but brave is just a downstream of chromium with a little less Bs. We all know the discussion.
Analyzing without running might lead to bad situations, in which code behaves differently on runtime vs what the compiler / rust-analyzer might expect.
Imagine a malicious dependency. You add the thing with cargo, and the rust analyzer picks it up. The malicious code was carefully crafted to stay undetected, especially in static code analysis. The rust analyzer would think that the code does different things than it actually will. Could potentially lead to problematic behavior, idk.
Not sure how realistic that scenario is, or how exploitable.
I don't think this is a problem with proc macros or package managers. This is just a regular supply chain attack, no?
The way I understand it, sandboxing would be detrimental to code performance. Imagine coding a messaging system with a serve struct, only for serde code to be much slower due to sandboxing. For release version it could be suggested to disable sandboxingy but then we would have gained practically nothing.
In security terms, being prepared for incidents is most often better than trying to prevent them. I think this applies here too, and cargo helps here. It can automatically update your packages, which can be used to patch attacks like this out.
If you think I'm wrong, please don't hesitate to tell me!
Why would they need to be?
It's not so Bad if you don't develope plugins. And vimscript is still there
I just read it, sounds pretty cool to me. I shifted to the right on the curve I guess.
Hyper Text Markup formally known as Twitter?
Asking for a friend, where do you get a 10TB VPS and how much does it cost?
Hello fellow good street design enjoyer
I prefer local password managers. Synchronisation is achieved with a syncing service of our choice.