Latest Tech News

Stay updated with the latest in technology, AI, cybersecurity, and more

Filtered by: rust Clear Filter

Tracking trust with Rust in the kernel

Tracking trust with Rust in the kernel Ready to give LWN a try? With a subscription to LWN, you can stay current with what is happening in the Linux and free-software community and take advantage of subscriber-only site features. We are pleased to offer you a free trial subscription, no credit card required, so that you can see for yourself. Please, join us! The Linux kernel has to handle many different sources of data that should not be trusted: user space, network connections, and removable

Tracking Trust with Rust in the Kernel

Tracking trust with Rust in the kernel Did you know...? LWN.net is a subscriber-supported publication; we rely on subscribers to keep the entire operation going. Please help out by buying a subscription and keeping LWN on the net. The Linux kernel has to handle many different sources of data that should not be trusted: user space, network connections, and removable storage, to name a few. The kernel has to remain secure even if one of these sends garbled (or malicious) data. Benno Lossin has b

Safe C++ proposal is not being continued

One year ago, the Safe C++ proposal was made. The goal was to add a safe subset/context into C++ that would give strong guarantees (memory safety, type safety, thread safety) similar to what Rust provides, without breaking existing C++ code. It was an extension or superset of C++. The opt-in mechanism was to explicitly mark parts of the code that belong to the safe context. The authors even state: Code in the safe context exhibits the same strong safety guarantees as code written in Rust. The

Mago: A fast PHP toolchain written in Rust

An extremely fast PHP linter, formatter, and static analyzer, written in Rust. Mago is a comprehensive toolchain for PHP that helps developers write better code. Inspired by the Rust ecosystem, Mago brings speed, reliability, and an exceptional developer experience to PHP projects of all sizes. Table of Contents Installation The most common way to install Mago on macOS and Linux is by using our shell script: curl --proto ' =https ' --tlsv1.2 -sSf https://carthage.software/mago.sh | bash Fo

This 'critical' Cursor security flaw could expose your code to malware - how to fix it

Shalitha Ranathunge/iStock/Getty Images Plus via Getty Images Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways A report found hackers can exploit an autorun feature in Cursor. The danger is "significant," but there's an easy fix. Cursor uses AI to assist with code-editing. A new report has uncovered what it describes as "a critical security vulnerability" in Cursor, the popular AI-powered code-editing platform. The report, published Wednesday by software compa

Active phishing campaign targeting crates.io users

We received multiple reports of a phishing campaign targeting crates.io users (from the rustfoundation.dev domain name), mentioning a compromise of our infrastructure and asking users to authenticate to limit damage to their crates. These emails are malicious and come from a domain name not controlled by the Rust Foundation (nor the Rust Project), seemingly with the purpose of stealing your GitHub credentials. We have no evidence of a compromise of the crates.io infrastructure. We are taking s

Hypervisor in 1k Lines

Hypervisor in 1,000 Lines ​ WARNING This book is work in progress. Hey there (maybe again)! In this book, you'll learn how to build a minimal RISC-V hypervisor which can boot Linux-based operating systems. This is a sequel to the online book Operating System in 1,000 Lines. In that book, you have learned how to build a minimal operating system from scratch in C, but this time, we'll start from scratch (again) in your favorite language, Rust! From scratch means we'll start from the bare-metal

A clickable visual guide to the Rust type system

RustCurious .com Elements of Rust – Core Types and Traits A clickable visual guide to the Rust type system. Every type possible in Rust falls into one of the boxes shown. The focus here is on lang_items – types and traits built into the language to support specific syntax. The purpose is to demystify what can be built purely in library code. For example, Vec, String and HashMap do not appear here because those are just structs. Rust's clear delineation of a platform-independent core enables

A complete map of the Rust type system

RustCurious .com Elements of Rust – Core Types and Traits A clickable visual guide to the Rust type system. Every type possible in Rust falls into one of the boxes shown. The focus here is on lang_items – types and traits built into the language to support specific syntax. The purpose is to demystify what can be built purely in library code. For example, Vec, String and HashMap do not appear here because those are just structs. Rust's clear delineation of a platform-independent core enables

VirusTotal finds hidden malware phishing campaign in SVG files

VirusTotal has discovered a phishing campaign hidden in SVG files that create convincing portals impersonating Colombia's judicial system that deliver malware. VirusTotal detected this campaign after it added support for SVGs to its AI Code Insight platform. VirusTotal's AI Code Insight feature analyzes uploaded file samples using machine learning to generate summaries of suspicious or malicious behavior found in the files. After adding support for SVGs, VirusTotal found an SVG file that had

Engadget Podcast: The curious calm before the iPhone 17 storm

We're just days away from Apple's September 9th iPhone 17 event, and the hype seems practically nonexistent. Did the many (many) leaks splash cold water on an enthusiasm, or are we just tired of annual iPhone events? In this episode, Deputy Editor Nathan Ingraham joins Devindra to discuss why even the rumored iPhone Air isn't really tingling our gadget geek senses. Also, we dive into the final repercussions of the US. v. Google antitrust trial: Turns out Google doesn’t have to sell Chrome, or gi

Alphabet adds $230 billion in value after avoiding breakup in antitrust case

Alphabet shares rose 9.14% on Wednesday as investors viewed the result of Google's antitrust case as broadly favorable to the tech giant. Wednesday's gain added $234 billion to the company's market cap. Apple closed 3.81% higher, adding $130 billion to its cap. The U.S. Department of Justice had proposed a sort of breakup of Google, which included divesting its Chrome browser, in an antitrust case that began in September 2023. While Google was found to hold an illegal monopoly in its core mar

Alphabet stock pops 9% after Google avoids breakup in antitrust case

Alphabet shares rose 9% on Wednesday as investors viewed the result of Google's antitrust case as broadly favorable to the tech giant. The U.S. Department of Justice had proposed a sort of break-up of Google, which included divesting its Chrome browser, in an antitrust case that began in September 2023. While Google was found to hold an illegal monopoly in its core market of internet search last year, U.S. District Judge Amit Mehta ruled against the most severe consequences that were proposed

Alphabet stock pops 8% after Google avoids breakup in antitrust case

Alphabet shares rose 8% on Wednesday as investors viewed the result of Google's antitrust case as broadly favorable to the tech giant. The U.S. Department of Justice had proposed a sort of break-up of Google, which included divesting its Chrome browser, in an antitrust case that began in September 2023. While Google was found to hold an illegal monopoly in its core market of internet search last year, U.S. District Judge Amit Mehta ruled against the most severe consequences that were proposed

Alphabet stock pops 6% in premarket trading after Google avoids break-up in antitrust case

The Google logo is seen outside a building housing Google offices in Beijing on February 4, 2025. China on February 4 said it would probe US tech giant Google over violations of anti-monopoly laws after Washington slapped 10 percent levies on Chinese goods. Alphabet shares rose 6% in premarket trading on Wednesday as investors viewed the result of Google's antitrust case as broadly favorable to the tech giant. The U.S. Department of Justice (DOJ) had proposed a sort of break-up of Google, whic

Google stock jumps 8% after search giant avoids worst-case penalties in antitrust case

Google CEO Sundar Pichai during the press conference after his meeting with Polish PM Donald Tusk at Google for Startups Campus In Warsaw in Warsaw, Poland on February 13, 2025. Images) Alphabet shares popped 8% in extended trading as investors celebrated what they viewed as minimal consequences from a historic defeat last year in the landmark antitrust case. Last year, Google was found to hold an illegal monopoly in its core market of internet search. U.S. District Judge Amit Mehta ruled aga

Google can keep its Chrome browser but will be barred from exclusive contracts

Google CEO Sundar Pichai during the press conference after his meeting with Polish PM Donald Tusk at Google for Startups Campus In Warsaw in Warsaw, Poland on February 13, 2025. Images) Alphabet shares popped 8% in extended trading as investors celebrated what they viewed as minimal consequences from a historic defeat last year in the landmark antitrust case. Last year, Google was found to hold an illegal monopoly in its core market of internet search. U.S. District Judge Amit Mehta ruled aga

US v. Google: all the news from the search antitrust showdown

On August 5th, 2024, Judge Amit Mehta ruled in the case of United States of America v. Google, saying, “...the court reaches the following conclusion: Google is a monopolist, and it has acted as one to maintain its monopoly. It has violated Section 2 of the Sherman Act.” Nearly a year later, the judge has followed that up with a ruling on remedies for Google’s search monopoly. While lawyers for the Department of Justice had argued that Google should be broken up and forced to split off products

The repercussions of a typo in C++ & Rust

The repercussions of missing an Ampersand in C++ & Rust Copying vs Passing by reference TL;DR There’s a funny typo that causes someone to copy data instead of “referencing” in C++. Rust is nice because it provides defaults that protect you from some of these “dumb” mistakes. In this example, I’ll go over how the “move by default” can prevent us from introducing this subtle behavior. Motivation I originally hesitated to write this because I thought the topic was too “obvious”, but I did it a

Writing a Hypervisor in 1k Lines

I've wrote a tutorial on building a hypervisor from scratch in 1,000 lines of code (website). Few chapters are still in progress, but it's already good enough to get you started. More specifically, type-1 hypervisor on 64-bit RISC-V with the hypervisor extension (on QEMU). The book is for developers who have finished Operating System in 1,000 Lines and want to learn more about how hypervisors work. Rust C is the best language for writing and learning from scratch, however, the most common fe

Proton offers a new lifeline for when the unexpected happens

TL;DR Proton has rolled out a new feature called Emergency Access. This feature allows paid users to pick five trusted contacts who can gain access to their account in case anything happens. Users can allow their trusted contacts to access their account immediately or after a custom set period of time. We all have crucial information stored in the various apps we use. For instance, you could have an important message sitting in your inbox, logins in your password manager, or financial informa

I love Nothing’s Android phones, but it’s getting harder to trust them

Ryan Haines / Android Authority Since the launch of the Nothing Phone 1 in 2022, Nothing has marketed itself as “not like the other phone brands.” From product design to offbeat videos showing CEO Carl Pei reacting to reviews, the company has constantly tried to demonstrate how it stands apart from other smartphone makers. However, Nothing has recently been involved in a photo-fakery scandal. Between this latest controversy and previous ones, it’s clear that Nothing isn’t really different from

Why zero trust is never 'done' and is an ever-evolving process

Picture this scenario: Six months after celebrating their "zero trust transformation," a financial services firm gets hit with a devastating breach. Attackers waltzed through a supply chain vulnerability in a third-party API, bypassing all those carefully configured identity controls . The firm ticked every checkbox and met every requirement - yet here they are, scrambling to contain customer data exposure. But wasn’t zero trust supposed to protect them? The truth is zero trust isn’t a project

Show HN: Regolith – Regex library that prevents ReDoS CVEs in TypeScript

Regolith A server-side TypeScript and JavaScript library immune to Regular Expression Denial of Service (ReDoS) attacks by using Rust and linear Regex under the hood. Regolith has a linear worst case time complexity, compared to the default RegExp found in TypeScript and JavaScript, which has an exponential worst case. Motivation: I wanted a Regex library for TypeScript and JavaScript where I didn't have to worry about ReDoS attacks. Important Regolith is still early in development! We need h

Four big enterprise lessons from Walmart’s AI security: agentic risks, identity reboot, velocity with governance, and AI vs. AI defense

Want smarter insights in your inbox? Sign up for our weekly newsletters to get only what matters to enterprise AI, data, and security leaders. Subscribe Now VentureBeat recently sat down (virtually) with Jerry R. Geisler III, Executive Vice President and Chief Information Security Officer at Walmart Inc., to gain insights into the cybersecurity challenges the world’s largest retailer faces as AI becomes increasingly autonomous. We talked about securing agentic AI systems, modernizing identity

Closing the Nix gap: From environments to packaged applications for rust

Closing the Nix Gap: From Environments to Packaged Applications for Rust Should I use crate2nix, cargo2nix, or naersk for packaging my Rust application? — (@jvmncs) January 21, 2025 This tweet shows a common problem in Nix: "Should I use crate2nix, cargo2nix, or naersk for packaging my Rust application?" devenv solved this for development environments differently: instead of making developers package everything with Nix, we provide tools through a simple languages.rust.enable . You get cargo

Closing the Nix Gap: From Environments to Packaged Applications for Rust

Closing the Nix Gap: From Environments to Packaged Applications for Rust Should I use crate2nix, cargo2nix, or naersk for packaging my Rust application? — (@jvmncs) January 21, 2025 This tweet shows a common problem in Nix: "Should I use crate2nix, cargo2nix, or naersk for packaging my Rust application?" devenv solved this for development environments differently: instead of making developers package everything with Nix, we provide tools through a simple languages.rust.enable . You get cargo

Inside Walmart’s AI security stack: How a startup mentality is hardening enterprise-scale defense

Want smarter insights in your inbox? Sign up for our weekly newsletters to get only what matters to enterprise AI, data, and security leaders. Subscribe Now VentureBeat recently sat down (virtually) with Jerry R. Geisler III, Executive Vice President and Chief Information Security Officer at Walmart Inc., to gain insights into the cybersecurity challenges the world’s largest retailer faces as AI becomes increasingly autonomous. We talked about securing agentic AI systems, modernizing identity

The Core of Rust

NOTE: this is not a rust tutorial. Every year it was an incredible challenge to fit teaching Rust into lectures since you basically need all the concepts right from the start to understand a lot of programs. I never knew how to order things. The flip side was that usually when you understand all the basic components in play lots of it just fits together. i.e. there's some point where the interwovenness turns from a barrier into something incredibly valuable and helpful. —Jana Dönszelmann Visio

Rust in 2025: Targeting foundational software

Rust turns 10 this year. It’s a good time to take a look at where we are and where I think we need to be going. This post is the first in a series I’m calling “Rust in 2025”. This first post describes my general vision for how Rust fits into the computing landscape. The remaining posts will outline major focus areas that I think are needed to make this vision come to pass. Oh, and fair warning, I’m expecting some controversy along the way—at least I hope so, since otherwise I’m just repeating th