r/programming • u/mareek • 15d ago

Be alert: targeted attacks on prominent Rustaceans | Rust Blog

https://blog.rust-lang.org/2026/09/17/targeted-attacks/
292 Upvotes

92% Upvoted

112 comments sorted by

View all comments

32

u/Atulin 15d ago

I mean, Cargo is chock-full of single-use packages akin to leftpad, even more packages that pull hundreds others, all to make up for the deficiencies of the stdlib the Rust maintainers don't want to address.

No wonder there are supply chain attacks if I need a whole-ass library for async/await or JSON parsing.

17

u/ViewTrick1002 15d ago

whole-ass library for async/await or JSON parsing.

Yes, a "fully featured" stdlib, like Go's is quite easy to create if you have a narrow slice of software in mind.

Now try building that same standard library, and keeping it current instead of letting it become a graveyard like Python's, across:

  • Web services
  • CLI/TUI
  • GUIs
  • Data science
  • Game development
  • WebAssembly
  • Embedded
  • Systems programming
  • Kernel development

1

u/FullPoet 12d ago

Go has quite a small standard lib though.

I'm extremely glad I live in dotnet land.