security

3 posts

• Bugs Rust Won't Catch: Lessons from the uutils/coreutils CVE Audit

  2026-04-29 · 496 words · 3 min read

  A professional audit of the Rust reimplementation of GNU coreutils uncovered 44 CVEs — none caught by the borrow checker, Clippy, or cargo-audit. Here's what to watch for.

• Enter MXC: What Process Containers Even Are

  2026-10-13 · 1641 words · 9 min read

  Part one of a field report on Microsoft's MXC: what process containers actually are (AppContainer identities, declarative policy, learn-versus-enforce), explained from the underserved platform, doubts included.

• Hacker News Rust Digest — April 27, 2026

  2026-04-27 · 340 words · 2 min read

  A roundup of the top Rust discussions on Hacker News: a stdlib security audit with 189 findings, async promises vs reality, language complexity concerns, panic-free annotations, and more.