#memory safety — blogs.social

Privacy Guides @news.privacyguides.org.ap.brid.gy

May 17

Dirty Frag Sequel Continues the Streak of Linux Kernel Privilege Escalation Vulnerabilities

Fragnesia, the latest local privilege escalation vulnerability in the same family as Dirty Frag, emerges as an “unintended side effect of one of the patches addressing the original Dirty Frag vulnerabilities” according to the original creator of Dirty Frag, Hyunwood Kim.

Read more →

NERDS.xyz – Real Tech News for Real Nerds [Unofficial] @nerds.xyz.web.brid.gy

May 3

Google reveals Pixel 10 modem firmware now uses Rust to reduce baseband security risks

Google says Pixel 10 modem firmware includes a Rust DNS parser designed to reduce memory safety vulnerabilities in the baseband.

Rust Internals [Unofficial] @internals.rust-lang.org.web.brid.gy

Apr 30

Private unsafe fields are a poorly motivated feature

Sorry for the essay I couldn't figure out a way to condense it without losing info.

TLDR: unsafe is useful because it is rare, and making it less rare by applying it to general invariants/preconditions doesn't actually help ensure correctness.

Vorpal:

There is a lot of Rust code at this point. I get 6.7 million results for unwrap and 18.2k results for unwrap_unchecked (filtered on…