Moving the Internet's security-sensitive software infrastructure to memory safe code. A project from ISRG. http://memorysafety.org
We're thankful for the support of
AWS, who has just announced their $1 million gift for Prossimo. It was announced today by Phil Estes during Open Source Summit! You can learn more about it in our newest blog post:
Prossimo is behind several critical memory safety initiatives -- but have you ever wondered who's behind Prossimo?
Meet ISRG, the Internet security nonprofit that brought you Prossimo and Let's Encrypt. Learn about their work on their webiste, at https://www.abetterinternet.org/.
Have you heard the news? We're supporting a rewrite of sudo and su in Rust via a joint development effort by @tweedegolfbv and @FerrousSystems -- made possible thanks to @AWSOpen. Read about it here in an article from @TechTimes_News: https://www.techtimes.com/articles/291122/20230504/ferrous-systems-and-tweede-golf-get-rust-rewrite-with-support-from-aws.htm
We are glad to share the memory safety advocacy space with @ConsumerReports, who published their report on the Future of Memory Safety in January.
Read the report here: https://advocacy.consumerreports.org/research/report-future-of-memory-safety/
Our memory safe NTP implementation ntpd-rs has a new home with @tweedegolfbv. Learn about this exciting announcement in this blog post from April: https://www.memorysafety.org/blog/ntp-and-nts-have-arrived/
More coverage of our new sudo and su initiative by @kevinpurdy in @arstechnica!
---
RT @arstechnica
Two core Unix-like utilities, sudo and su, are getting rewrites in Rust https://arstechnica.com/information-technology/2023/05/two-core-unix-like-utilities-sudo-and-su-are-getting-rewrites-in-rust/?utm_brand=arstechnica&utm_source=twitter&utm_social-type=owned&utm_medium=social
https://twitter.com/arstechnica/status/1653085770675101696
Get to know the C API for Rustls that existing C-based projects can use to make their TLS implementation memory safe. Developed by ISRG engineer Jacob Hoffman-Andrews as part of the Prossimo Rustls initiative. https://github.com/rustls/rustls-ffi
Thanks to @michaellarabel for covering our new sudo and su initiative in @phoronix!
---
RT @phoronix
sudo & su Being Rewritten In Rust For Memory Safety
https://www.phoronix.com/news/sudo-su-rewrite-rust
https://twitter.com/phoronix/status/1652340341150826497
Moving all the Web's software infrastructure to memory safe code is an ambitious goal. That's why Prossimo focuses on software that is widely used, on a network boundary, performs a critical function, and is written in a languages that aren't memory safe. https://www.memorysafety.org/about/
Our initiative to support a memory safe DNS resolver is running full steam ahead. Visit our work plan to see what we've accomplished so far and what's next: https://www.memorysafety.org/initiative/dns/dns-work-plan/
Take a look at Miguel Ojeda's Rust for Linux website to learn about the full history of the Prossimo initiative and where it's at now. https://rust-for-linux.com/
Our memory safe NTP Implemntation has a new home with @tweedegolfbv. Visit our blog to learn about this exciting next step: https://www.memorysafety.org/blog/ntp-and-nts-have-arrived/
We're happy to announce a new Prossimo initiative—sudo and su! We’re partnering with @tweedegolfbv and @FerrousSystems to reimplement these ubiquitous utilities in memory safe Rust. Thanks to @AWSOpen for your generous support of this critical work.
https://www.memorysafety.org/blog/sudo-and-su/
Our work includes everything from supporting a memory safe DNS resolver to building a memory safe AV1 decoder. Take a look at our initiatives over on the Prossimo website, at https://www.memorysafety.org/.
We're happy to have helped support this memory safe NTP implementation!
---
RT @tweedegolfbv
*ANNOUNCEMENT* @I_S_R_G and @ProssimoISRG@infosec.exchange have officially made us the new home of "ntpd-rs", the #opensource #memorysafe implementation of the Network Time Protocol.
Thanks to @0xjosh and @ProssimoISRG@infosec.exchange
https://tweedegolf.nl/en/blog/90/memory-safe-network-time-ntp-has-new-home-seeks-early-adopters
https://twitter.com/tweedegolfbv/status/1650881595740389381
Memory safety vulnerabilities are just the tip of the iceberg. Languages that aren't memory safe can negatively impact stability, developer productivity, and application performance. Learn how on our website, at:
https://www.memorysafety.org/docs/memory-safety/#what-other-problems-are-associated-with-languages-that-are-not-memory-safe
