Comment by stouset

17 hours ago

I’m a huge proponent of Rust and generally lean a lot closer to the RIIR mentality than most, but this effort seems to be such a waste of effort and resources.

There have been a dozen CVEs reported against all of coreutils in the past twenty years. The most recent audit of uutils-coreutils turned up forty-four CVEs.

By all appearances they’re replacing battle-tested and fundamental tooling which hasn’t been a problem with extremely amateurish Rust. The threading highlighted in the linked post above seems pretty egregious.

6 comments

stouset

Reply
pantalaimon  1 hour ago

I think this is more about the licence, the Rust rewrite just makes it easier to swallow/gain contributors.

egorfine  17 hours ago

Same here. Love Rust. Hate rust rewrites.

  • pjmlp  2 hours ago

    Can vouch for the sentiment, hence why regardless of the ranting, I am quite supportive of whatever helps to improve C and C++ security story.

    Also for Rust based rewrites, they could start by bootstraping Rust compiler itself, dependent on C++ to start it.

    They don't do it, because even though LLVM and GCC are written in C++, a pure Rust compiler would not scale to the same level of contributions, and existing capabilities.