Skip to content
Hallway
0:00 / 0:00

#rust#memorysafety#microsoft

R-Evolution: A Story of Rust Adoption - Ryan Levick

Rust Programming Language

70K subscribers • 45 videos on Hallway • Conference channel

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • A classic. People kept recommending it from 2019 to 2024.
  • Presented by Ryan Levick, Developer at Microsoft

Intermediate. Assumes working knowledge.

16K views6 years ago1 recommendation

Programming languagesSystems programmingRustPerformance and optimizationConcurrency and parallelism

Ryan Levick discusses the journey and reasons behind adopting Rust for systems programming at Microsoft.

From the Berlin Rust's October "Rust and Tell" Meetup (meetup.com/Rust-Berlin/) "Rust and Tell“ is a monthly event to share ideas, and learn about new things in and about Rust. Meet fellow Rustaceans, share your learnings, get motivated and inspired. We’re open to any and all kinds of talks about any subjects that you think will be interesting to an audience interested in Rust. Whether you're an experienced Rust developer or just getting started, we strongly encourage you to share your learnings. Ryan Levick: twitter.com/ryan_levick Hosted at Prisma: prisma.io 🎥 Filmed by iStream: istream.pl/

Why it's here

1 person recommends this

What people say. Highly recommended as evidence that even large companies like Microsoft cannot solve memory safety issues through training alone.

Moments people linked to

u/asmx85in r/programming • Recommends

On “The Chromium project finds that around 70% of our serious security bugs are memory safety problems. Our next major project is to prevent such bugs at source.”

…enough engineer or weren't disciplined enough. In other words, some people think that the problem isn't with the programming language itself, only that some people don't know how to use it well. Even Microsoft has realized that "just" using smart_pointers and static code analysis is not enough to significantly reduce the security related bugs. link to this video…
27View on Reddit

u/asmx85in r/programming • Recommends

On “The Tor Project announces Arti, a Tor implementation written in Rust from scratch”

The good old "we need better programmers" trope. Yes you CAN write safe code in C but the thing is, you probably won't ever always. It does not matter how fancy your education or lifetime experience is you will fuck up eventually. The difference between C and Rust is in C you "can" write safe code in Rust you "must" write safe code (unless you don't :P ). I get it, people want to hold on to their guru status and want to be looked up from the "peasants" but that needs to stop. Static analyzer just aren't cutting it either, we can see the results of bugs that lead to CVE's and its just not helping in the way people are hoping it would. I get it – you just don't want to have "a kid" fres…
26View on Reddit

u/asmx85in r/programming • Recommends

On “Mark Russinovich (Azure CTO): "it's time to halt starting any new projects in C/C++ and use Rust"”

> and I did not have a single use after free, memory leak or out of bounds access that i know of. ftfy > I firmly believe most memory bugs in C++ are just people writing C Yeah its those stupid programmers! We just need to have smarter programmers, problem solved! link to this video Unfortunately that is something we know does not fix the problem. It is naive to think if Microsoft and Google are unable to train their people enough to make this go away significantly. And if those cannot – you cannot either. And using modern C++ and static analyzers does help but the it just does not show up on the charts Microsoft presented. Sorry to say, but your beliefs are proven wrong by industry giants.
25View on Reddit

u/asmx85in r/programming • Recommends

On “Secure by Design: Google’s Perspective on Memory Safety”

…ke care of the rest. We need to stop perpetuating these gatekeeping efforts and need to acknowledge that the industry has a problem and blaming "stupid" programmers is NOT helping. Fortunately big companies have already acknowledged that and start to make things better. Rust in Windows, Chrome, Android, Linux kernel, ... is a start to build on. link to this video (talk of a Microsoft employee a few years ago)…
19View on Reddit

u/asmx85in r/programming • Recommends

On “A “backwards” introduction to Rust, starting with C-like unsafe code”

…security problems are due to that problem? https://msrc-blog.microsoft.com/2019/07/18/we-need-a-safer-systems-programming-language/ > Can you provide evidence that Microsoft is one of the companies that does extensive training, code reviewing, and tooling? https://www.microsoft.com/en-us/learning/browse-all-certifications.aspx?jobrole=developer link to this video > Can you provide evidence that vulnerabilities are still piling up? https://www.cvedetails.com/browse-by-date.php > Can you provide evidence that the same is true with google, apple, ...? https://www.cvedetails.com/vulnerability-list/vendor_id-1224/Google.html https://www.cvedetails.com/vulnerability-list/vendor_id-49/Apple.html > Can…
13View on Reddit

u/asmx85in r/programming • Recommends

On “A “backwards” introduction to Rust, starting with C-like unsafe code”

…for security vulnerabilities in your software by "just" using Rust, sounds like exactly what businesses are appeal to. Saving millions of $ by not having those bugs. Please take a few minutes of your time to hear out a Developer at Microsoft that is talking about it. You don't need to watch the hole thing, i already skipped to the relevant part. link to this video and here link to this video…
3View on Reddit