Post #2675686

2026-05-08 23:28 UTC

@pinkforest@hachyderm.io full disclosure, i have a vibe coded rust project, but it's something for myself, that has no security implication, and is not exposed to the internet, if it was, it would be a very different ball game, if i was a company building a product, i would think a lot harder about these things, and not trust the decisions it take (i can see enough mistakes that are not security related, just by using the app). And yeah, rust helps, but safety requires system thinking.

Replies (1)

@pinkforest@hachyderm.io 2026-05-08 23:35

@tshirtman@mas.to I hate the word safe / unsafe in Rust as I think it's misleading what it actually does IMO it should be indicative of memory guarantees than just bagging it as "safety" which would indicate other kinds of safety like using I/O resources etc. It was a good start but I think people need to understand fundamentals more. Token machines only slop what superficial disconnected words (bias on marketed / visible context) it finds off the internet but not the fundamental applied knowledge you gain over the decades through experience that is not necessarily spelled out in stackoverflow only to be scraped later. Maybe one day we can have proof & verification at a level we can trust shit more but it's not there given proofs (and verification) are as good as one writes them meaning they can fail too.

Open ##2675687