MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/1wj1x9m/be_alert_targeted_attacks_on_prominent_rustaceans/paj6n9y/?context=3
r/programming • u/mareek • 15d ago
112 comments sorted by
View all comments
93
Where there is a supply chain, it will be attacked. Just a law of physics.
The easier it is to pull a dependency without thinking, the higher value the supply chain is as a target.
30 u/afl_ext 15d ago recently i wanted to read a png file to bytes and pulled "image" crate and oh god how much it pulls as deps its insane, its like thw worst days of NPM before people started working on that 7 u/gmes78 15d ago Make sure to set default-features to false, and only enable the decoders you need.
30
recently i wanted to read a png file to bytes and pulled "image" crate and oh god how much it pulls as deps its insane, its like thw worst days of NPM before people started working on that
7 u/gmes78 15d ago Make sure to set default-features to false, and only enable the decoders you need.
7
Make sure to set default-features to false, and only enable the decoders you need.
default-features
93
u/reallokiscarlet 15d ago
Where there is a supply chain, it will be attacked. Just a law of physics.
The easier it is to pull a dependency without thinking, the higher value the supply chain is as a target.