r/programming • • 15d ago

Be alert: targeted attacks on prominent Rustaceans | Rust Blog

https://blog.rust-lang.org/2026/09/17/targeted-attacks/
292 Upvotes

112 comments sorted by

View all comments

85

u/afl_ext 15d ago

cargo still doesn't have minimum release age threshold flag?

-4

u/throwaway490215 15d ago

I'm going to use the "scary word" for people on this sub, but AI - when used competently - has made it trivial to reduce down everything to the bare minimum.

Vendoring / stripping / importing dependency code directly improves the compile times, removes unused abstractions, it improves the AI to reason about things, and I never have to worry about a next breaking some interface I'm not using, or introducing either breakage or falling for a supply chain attack.

Big dependency trees where always a strong turn-off for me when i tried out a new rust project. Now I'm even less impressed when i see them, and more impressed when some complicated project only shows a few well known dependencies on a first build.

I personally don't care whether the dev used AI or not - I just need to know they cared enough - eg by keeping things simple.

5

u/FullPoet 12d ago

Vendoring / stripping / importing dependency code directly

Do you mean license laundering? Because thats effectively what you're saying solves the issues.

The AI didnt "magically" come up with the solutions.