Rust's backtraces moving to be native Rust: https://github.com/rust-lang/rust/pull/74682/commits/06d565c967bfb7c6ff52a991bbe47b4a2a25de3e
This prevents malformed DWARF info leading to security issues, an avenue for vulnerabilities I'd not considered before. https://twitter.com/Brittain_Ben/status/1288193388588740615
miniblog.
Related Posts
I'm intrigued to see that Google has quantified that new code is generally buggier and less secure than code that has existed in your codebase for longer:
As Android moves away from C/C++ to a larger proportion of Java and Rust, its security vulnerabilities are measurably decreasing!
Super impressed that the UK government does regular scanning for vulnerabilities for servers based in the UK: https://www.ncsc.gov.uk/information/ncsc-scanning-information
Preventative and good for the overall ecosystem.
