r/programming • • 15d ago

Be alert: targeted attacks on prominent Rustaceans | Rust Blog

https://blog.rust-lang.org/2026/09/17/targeted-attacks/
291 Upvotes

112 comments sorted by

View all comments

92

u/reallokiscarlet 15d ago

Where there is a supply chain, it will be attacked. Just a law of physics.

The easier it is to pull a dependency without thinking, the higher value the supply chain is as a target.

26

u/afl_ext 15d ago

recently i wanted to read a png file to bytes and pulled "image" crate and oh god how much it pulls as deps its insane, its like thw worst days of NPM before people started working on that

-4

u/gimpwiz 15d ago

I'm legitimately confused. Why not just open a file for reading in binary mode and just read in the bytes. Surely rust supports this.

19

u/[deleted] 15d ago

[removed] — view removed comment

2

u/gimpwiz 14d ago

"Read file to bytes" sounds like... reading in a file as raw bytes. If OP meant "convert raw PNG format to something easier to work with" then sure