Leebra rust
login register

Supply chain attack on arrayref

2 months ago by cm0002 to c/rust

save

share

report

Empowering everyone to build reliable and efficient software.
treadful 5 points 2 months ago

ugh

Guess it was just a matter of time.

save

path: 0 25396537, hotness: undefined, score: 5, children: 0
chickenf622 4 points 2 months ago

Reminder to have minimum ages for update releases to help avoid these exact kinds of attacks. I do like 3 days which is probably overkill.

save

path: 0 25396981, hotness: undefined, score: 4, children: 3
naonintendois 2 points 2 months ago

How do you set that up?

save

path: 0 25396981 25398015, hotness: undefined, score: 2, children: 2
chickenf622 5 points 2 months ago

I'm not a rust user but it looks like the feature is in their unstable branch https://doc.rust-lang.org/.... Also looks like someone made a crate to do that called cargo-cooldown. These supply chain attacks have been more frequent only recently so a lot of ecosystems are still working on implementing this kind of feature.

save

path: 0 25396981 25398015 25398178, hotness: undefined, score: 5, children: 0
blazebra 1 point 2 months ago

Configure your updater and use exact or semi-exact versions.

save

path: 0 25396981 25398015 25398563, hotness: undefined, score: 1, children: 0
rust
rust

@programming.dev

login for more options
8325
1422
336

Welcome to the Rust community! This is a place to discuss about the Rust programming language.

Wormhole

!performance@programming.dev

Credits
  • The icon is a modified version of the official rust logo (changing the colors to a gradient and black background)

go to feed...