rust
Rusty HTML Minifying In R with {rextendr}
In my M-F newsletter today I mentioned an awesome Rust-based HTML/JS/CSS minifier library that also include batteries for a few other languages. There was no R port, so I made one using ...
Part 2: Improving crypto code in Rust using LLVM’s optnone
By Henrik Brodin Let’s implement crypto! Welcome to the second part of our posts on the challenges of implementing constant-time Rust code. Part 1 discussed challenges with constant-time implementations in Rust and ...

A WeatherFlow Tempest UDP Broadcast Receiver in Golang, Rust, Swift, and C++
After a Twitter convo about weather stations I picked up a WeatherFlow Tempest. Setup was quick, but the sensor package died within 24 hours. I was going to give up on it ...

‘Trojan Source’ Bug Threatens the Security of All Code
BrianKrebs | | Bidi override, Cambridge University, CVE-2021-42574, CVE-2021-42694, Johns Hopkins Information Security Institute, Latest Warnings, Matthew Green, Nicholas Weaver, Ross Anderson, rust, The Coming Storm, Time to Patch, Trojan Source bug, University of California Berkeley
Virtually all compilers -- programs that transform human-readable source code into computer-executable machine code -- are vulnerable to an insidious attack in which an adversary can introduce targeted vulnerabilities into any software ...

Behavior-Based Detection Can Stop Exotic Malware
To stay a step ahead of cyber defenders, malware authors are using “exotic” programming languages—such as Go (Golang), Rust, Nim and Dlang—to evade detection and impede reverse engineering efforts. Unconventional languages are ...
Security Boulevard
Siderophile: Expose your Crate’s Unsafety
Today we released a tool, siderophile, that helps Rust developers find fuzzing targets in their codebases. Siderophile trawls your crate’s dependencies and attempts to finds every unsafe function, expression, trait method, etc ...

Introducing windows-acl: working with ACLs in Rust
Access Control Lists (ACLs) are an integral part of the Microsoft Windows security model. In addition to controlling access to secured resources, they are also used in sandboxing, event auditing, and specifying ...

Learning Rust: hash map lookup/insert pattern
In Suricata we’re experimenting with implementing app-layer parser in Rust. See Pierre Chifflier’s presentation at the last SuriCon: [pdf]. The first experimental parsers will soon land in master. So coming from a ...