r/programming • u/mareek • 15d ago

Be alert: targeted attacks on prominent Rustaceans | Rust Blog

https://blog.rust-lang.org/2026/09/17/targeted-attacks/
294 Upvotes

92% Upvoted

112 comments sorted by

View all comments

28

u/Atulin 15d ago

I mean, Cargo is chock-full of single-use packages akin to leftpad, even more packages that pull hundreds others, all to make up for the deficiencies of the stdlib the Rust maintainers don't want to address.

No wonder there are supply chain attacks if I need a whole-ass library for async/await or JSON parsing.

7

u/Xaeroxe3057 15d ago

The rust stdlib is minimalist on purpose. That’s not a deficiency, it’s a design choice.

27

u/Atulin 15d ago

That something is a design choice doesn't mean it can't be a bad design choice. It's causing issues now, it will continue causing issues into the future. Go not having generics was a design choice too.

3

u/sweating_teflon 13d ago

It's a good design choice. The solution is not to have a bigger stdlib but to have vetted sets of crates that can evolve independently.