Posts
4826Following
321Followers
488OpenPGP: 3AB05486C7752FE1
0
0
0
2
0
0
1
0
0
Jarkko Sakkinen
jarkko@calbaker No.
It has static and run-time checks for memory safety, which is not the same as being memory safe. Just like Go, Java, Python and what not have measures for memory safety but instead of borrow checker they use a garbage collector.
Rust is less safe than any of those languages because the result is an ELF binary, which is roughly a twist of what C++ source generates with fancy checks. Same attack techniques, like ROP (return-oriented programming) gadgets still apply as for any possible ELF binary ever compiled.
3
0
1
Jarkko Sakkinen
jarkkoOr actually I do care in the sense that it is a huge turn back. It is misguided advertisement by definition because a competing app might not have this artificial feature. Some casual users might even think that an app is somehow better because it has the imaginary performance improvement thanks to Rust.
#rustlang
7
4
13
Jarkko Sakkinen
jarkkoNot my vote so no further comments. I just imagine that I did not read this 🤷
#democracy
0
0
0
repeated
LWN.net is now @LWN@lwn.net
LWN@fosstodon.org[$] Inheritable credentials for directory file descriptors https://lwn.net/Articles/971825/ #LWN
0
2
0
Despite the misleading name, apparently rust-vmm/vm-memory can do memory mapped I/O on a wider scope. I.e. it could be used in a project having nothing to do with virtualization. In Enarx the situation is two-folded:
- SGX needs device memory maps
- KVM based confidential computing needs whatever the name of “the thing” providing private memory areas is ATM through KVM shenanigans ;-) Have to check.
0
0
0
repeated
Erik Uden 🍑
ErikUden@mastodon.deWhatsApp Spam has been increasingly annoying recently, how can someone be calling me on WhatsApp that ISN'T a WhatsApp user?
2
1
2
repeated
Jarkko Sakkinen
jarkko
0
0
1
Jarkko Sakkinen
jarkkoEDIT: i do put a lot of pics of cool hardware tho...
0
0
1
Jarkko Sakkinen
jarkkoI’m wondering why in #OpenSUSE #Tumbleweed zypper si -d needs the source package as -d should tell to get only build dependencies, and not the source package.
1
0
0
Jarkko Sakkinen
jarkkohttps://lore.kernel.org/linux-integrity/D0X00LTUCCC8.X8LKLJHZZRGP@kernel.org/#t
Those are my only remaining remarks for v8.
The idea is that HMAC pipe is used for communication derived from null seed (which changes each power cycle). If the integrity is compromised access to the TPM device will be denied.
I still need to figure out the negative testing. This series has been already tested when machine works as expected and the bus is not compromised.
Combined with TPM2 sealed hard drive encryption should be quite reasonable way to secure a system (of course nothing never is perfect).
1
6
7
Jarkko Sakkinen
jarkkoI.e. there is man page generation instructions here: https://www.kernel.org/doc/html/latest/doc-guide/kernel-doc.html
1
0
0