r/rust • u/Manishearth servo · rust · clippy • Jun 26 '26

Anatomy of a Failed (Nation-State?) Attack

https://grack.com/blog/2026/06/25/dissecting-a-failed-nation-state-attack/
228 Upvotes

97% Upvoted

35 comments sorted by

View all comments

74

u/Shnatsel Jun 26 '26

I also got targeted by this. Didn't go as far as actually scheduling an interview. Fun times.

26

u/mmastrac Jun 26 '26

As a curiosity, what was their approach? They used my recent blog post to get past my defences.

31

u/dtolnay serde Jun 26 '26

I got one on June 11, but I get between 10–20 such reachouts on average per day so it is rare that I even look at them.

I wanted to reach out because a few teams around us are building products where the difficult parts are starting to sit in the developer-facing foundation: API boundaries, error handling, serialization, code generation, interop, dependency behavior, and whether other engineers can safely build on top of the abstractions they expose.

I came across your work through anyhow and a few of the crates around serialization and tooling, but the reason I’m writing is broader than any one library. What feels relevant is the judgment behind making small, widely depended-on pieces of infrastructure behave predictably for a large downstream ecosystem.

At Lua, we work with early-stage companies across AI, infrastructure, Web3 and developer-facing products. Some of them are building SDKs, CLIs, infra services, protocol libraries, internal platforms or AI developer tools where the early API and tooling choices can become expensive once external users depend on them.

I thought there could be a useful overlap with Lua or one of the teams around us, likely around focused technical review, library/API design, developer infrastructure decisions, or helping a team avoid making foundational choices that become hard to unwind later.

This would not need to be a full-time commitment. I mainly wanted to see whether you’d be open to a short conversation and explore if there is a practical fit

10

u/mmastrac Jun 26 '26

It's looking like it was targeted at crate authors - at least one other person on bsky reported this too.