![#![feature(🦄)] #![allow(🌈)]](https://pbs.twimg.com/profile_images/1098978439900598273/sZbKaIiP_normal.jpg)
OK, we've gotten some good suggestions. What do people think?
Hey everyone! @joshlf_ is kicking off a working group, and it needs a name! It’s focused on secure code. The mission is to make it easy to write secure code in Rust. We've heard "Secure Code WG" and "Ecosystem Security WG." Any other ideas?
-
-
-
Safety means something else. Multiple something elses. Whatever you do, not that.
-
Ecosystem security sounds like you're going to audit crates in a wider context, which is not the stated mission either. Potentially another WG, though!
End of conversation
New conversation -
-
-
RustAssured WG
-
I approve. – Founder of https://github.com/rust-clique
End of conversation
New conversation -
-
-
"Secure Coding WG": https://en.wikipedia.org/wiki/Secure_coding …
- 1 more reply
New conversation -
-
-
Rust proof
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
TRust WG
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Black Mesa WG. Making it easy to contain any unforeseen consequences.
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Rust Hardening WG
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
I'm
on "Ecosystem Security"Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Trusting Rust
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
What is meant by “secure code”? Are we talking correctness and exploitability? Or are we talking cryptographically signed and secured from alterations? It almost seems like you’re talking about Leslie Lamport style proofs of correctness.
-
"Secure Code" means free from vulnerabilities (which is a subset of correctness). Not necessarily proven in a formal sense, although we obviously wouldn't mind that.
-
A TLA+-like algorithm specifier & model checker layer would be very helpful to removing incorrect (aka insecure) code.
-
Absolutely. If you check out our announcement post (https://internals.rust-lang.org/t/proposal-security-working-group/8282/134?u=joshlf …), you'll see that we mention static analysis. It's not our first priority because there's lower-hanging fruit, but it's definitely something we're interested in.
End of conversation
New conversation -
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
-
-
Thanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.