Rust devs push back as Serde project ships precompiled binaries

3 years ago by ruffsl to c/security

Serde, a popular Rust (de)serialization project, has decided to ship its serde_derive macro as a precompiled binary. This has generated a fair amount of concern among some developers who highlight the future legal and technical issues this may pose, along with a potential for supply chain attacks.
ruffsl 3 points 3 years ago path: 0 2576278, hotness: undefined, score: 3, children: 0
security
security

@programming.dev

login for more options
2202
173
91

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

go to feed...