6 ms·
"Actix was found by third parties abusing unsafe and when they were auditing most libraries found for Rust on the internet. When the unsafe code was audited it
by lambda_dn 5y ago
"Actix was found by third parties abusing unsafe and when they were auditing most libraries found for Rust on the internet. When the unsafe code was audited it was found that on misuse, it can lead to serious vulnerabilities. So they opened a bunch of issues and added a lot of patches and PR’s in GitHub."
Good luck though
- gilrain 5y agoHey bud, you are being really aggressive and disagreeable in here. At this point, I think everyone is aware that you, personally, would not recommend Rust or Actix. Loud and clear my dude.
- lambda_dn 5y ago
- nextaccountic 5y agoThey have since fixed those issues in actix 3.0
- lambda_dn 5y agoEvidence of that? Or is the whole software world to believe the words of nextaccountic?
- rackjack 5y agoWhy don't you provide evidence of extant misused `unsafe` first? Or is the whole software world to believe the words of lambda_dn?
- maccam94 5y agohttps://www.reddit.com/r/rust/comments/iqq8k9/announcing_actixweb_v30 https://www.reddit.com/r/rust/comments/iqq8k9/announcing_act... https://www.reddit.com/r/rust/comments/t1bim5/announcing_actix_web_v40/hyfb8wh https://www.reddit.com/r/rust/comments/t1bim5/announcing_act...
- kibwen 5y agoThis is an easy mistake to make, but actix-web isn't actix, it's a web framework that uses actix. And while actix once had a controversial reputation regarding unsafety, the project has reversed its stance in the years since that quote was relevant and now appears to treat soundness violations with seriousness.
- robjtede 5y agoThis is all true except that Actix Web hasn't used actix since v1.0.
- capableweb 5y agoUnless the HN API itself gets compromised, I'm not sure what can go wrong by running your own local HN client really (it only communicates with the official HN API). But happy to be showed otherwise.