Rust Secure Code WG (@rustsecurecode) profile picture

Rust Secure Code WG

@rustsecurecode

Official Twitter for the Rust Secure Code Working Group: making it easy to write secure code in Rust

github.com/rust-secure-code/wg
Joined October 2018
  • Tweets19
  • Following8
  • Followers972
2Media
Photo by Rust Secure Code WG (@rustsecurecode)Photo by Rust Secure Code WG (@rustsecurecode)
Introducing the Rust Safety Dance, a project by the Secure Code WG to audit and potentially eliminate usages of unsafe from core ecosystem (and other) crates: github.com/rust-secure-code/…
Image from Rust Secure Code WG (@rustsecurecode)
3
38
6
113
Rust Secure Code WG retweeted
RustSec (@RustSec) profile picture
RustSec@RustSec8 Sep 2020
Introducing `auditable`: audit compiled @rustlang binaries against security advisories in the @RUSTSEC database: reddit.com/r/rust/comments/i…
2
11
16
Rust Secure Code WG retweeted
Rust Language (@rustlang) profile picture
Rust Language
@rustlang14 Jul 2020
The Rust team was notified of a vulnerability affecting crates.io API tokens generation and storage, and out of aboundance of precaution we revoked all existing tokens. Learn more on the advisory: blog.rust-lang.org/2020/07/1…
7
100
9
250
Rust Secure Code WG retweeted
const @oli@hachyderm.io (@oli_obk) profile picture
const @[email protected]@oli_obk24 Feb 2020
.@ANSSI_FR .@rustsecurecode Why am I learning about github.com/ANSSI-FR/rust-gui… just today? This is super cool
GitHub - ANSSI-FR/rust-guide: Recommendations for secure applications development with Rust

GitHub - ANSSI-FR/rust-guide: Recommendations for secure applications development with Rust

Recommendations for secure applications development with Rust - ANSSI-FR/rust-guide

github.com
1
3
10
Rust Secure Code WG retweeted
JP Aumasson (@veorq) profile picture
JP Aumasson
@veorq29 Jan 2020
cargo tools that may or may not be useful when auditing code: audit, clippy, geiger, outdated others?
4
3
12
cargo-geiger has a new home in the @RustSecureCode WG: github.com/rust-secure-code/…
GitHub - geiger-rs/cargo-geiger: Detects usage of unsafe Rust in a Rust crate and its dependencies.

GitHub - geiger-rs/cargo-geiger: Detects usage of unsafe Rust in a Rust crate and its dependencies.

Detects usage of unsafe Rust in a Rust crate and its dependencies. - geiger-rs/cargo-geiger

github.com
6
14
Rust Secure Code WG retweeted
RustSec (@RustSec) profile picture
RustSec@RustSec23 Jan 2020
`cargo audit fix` can now (sometimes) fix your vulnerable dependency requirements automatically!
Tony "Abolish ICE" Arcieri 🦀🌹 (@bascule) profile pictureTony "Abolish ICE" Arcieri 🦀🌹@bascule23 Jan 2020
cargo-audit v0.11: Introducing the `fix` feature, yanked crate detection, and more /cc @rustlang blog.rust-lang.org/inside-ru…
3
9
Keeping @rustlang projects secure with cargo-audit 0.9: dependency trees, core advisories, unmaintained crates - Inside Rust blog blog.rust-lang.org/inside-ru…
10
26
Interested in making it easy to reproduce builds of @rustlang apps/libraries or build-time sandboxing for Cargo? We're kicking off a couple of new crates and looking for interested contributors! - cargo-repro: github.com/rust-secure-code/… - cargo-sandbox: github.com/rust-secure-code/…
GitHub - rust-secure-code/cargo-repro: Build and verify byte-for-byte reproducible Rust packages...

GitHub - rust-secure-code/cargo-repro: Build and verify byte-for-byte reproducible Rust packages...

Build and verify byte-for-byte reproducible Rust packages using a Cargo-based workflow - rust-secure-code/cargo-repro

github.com
1
5
20
Request for @rustlang CVE post-mortems when critical advisories occur in the standard library internals.rust-lang.org/t/re…
Request for CVE post-mortems

Request for CVE post-mortems

The last two CVEs announcement boil down to: CVE was introduced here, fixed there, these are the affected versions. This reads like the CVE was fixed, but were we to make the exact same errors for a...

internals.rust-lang.org
5
1
22
List of security-related @rustlang projects github.com/rust-secure-code/…
GitHub - rust-secure-code/projects: Contains a list of security related Rust projects.

GitHub - rust-secure-code/projects: Contains a list of security related Rust projects.

Contains a list of security related Rust projects. - rust-secure-code/projects

github.com
1
1
1
12
After much ado, we have a real logo!
3
12
Or vote via Twitter! nitter.gq/joshlf_/status/1105216…
Josh Liebow-Feeser (@joshlf_) profile pictureJosh Liebow-Feeser@joshlf_11 Mar 2019
Give us your opinion! Which should be the logo for the @rustlang Secure Code Working Group? Vote here or on GitHub: github.com/rust-secure-code/… Option A: bit.ly/2CeAqBt Option B: bit.ly/2HeYAjm @rustsecurecode #rust #rustlang
80%A
20%B
46 votes • Final results
1
Vote for the @rustsecurecode working group's logo! See the linked GitHub issue to vote /cc @rustlang github.com/rust-secure-code/…
Image from Rust Secure Code WG (@rustsecurecode)
Image from Rust Secure Code WG (@rustsecurecode)
5
12
30
Rust Secure Code WG retweeted
Josh Liebow-Feeser (@joshlf_) profile picture
Josh Liebow-Feeser@joshlf_29 Jan 2019
Final call for logos for the @rustlang Secure Code Working Group! 24h left! github.com/rust-secure-code/…
Logo · Issue #1 · rust-secure-code/wg

Logo · Issue #1 · rust-secure-code/wg

We need a logo!

github.com
10
12
Reviving the Underhanded @Rustlang contest #rust2019 github.com/rust-community/te…
Revive the Underhanded Rust contest · Issue #256 · rust-community/team

Revive the Underhanded Rust contest · Issue #256 · rust-community/team

The Secure Code WG has expressed interest in doing another underhanded Rust contest. The last one was not repeated due to personal constraints, not because it worked badly. It had 2 issues: Lack of...

github.com
3
9
Check out the Rust Secure Code WG's #Rust2019 blog post! We're trying to make it easy to write secure code in Rust medium.com/@shnatsel/securit…
Security as Rust 2019 goal

Security as Rust 2019 goal

The goals and 2019 roadmap of Rust Secure Code Working Group

shnatsel.medium.com
2
21
4
48
Rust Secure Code WG retweeted
RustSec (@RustSec) profile picture
RustSec@RustSec18 Jan 2019
A proposal for a minimum viable integration between @rustsec and @rustlang's cargo utility: internals.rust-lang.org/t/pr… #rust2019
Pre-RFC: Reviving "Security advisories in crates.io" (RFC PR #1752)

Pre-RFC: Reviving "Security advisories in crates.io" (RFC PR #1752)

Ok, so, after thinking about this for awhile, I have a new proposal. How about the thing @alexcrichton suggested 3 years ago that the core team keeps telling us we should consider? 😜 If a crate is...

internals.rust-lang.org
8
22
Introducing the Rust Secure Code Working Group! Check out our GitHub at github.com/rust-secure-code/… or find us on the "secure-code-wg" channel on the rust-lang Zulip! rust-lang.zulipchat.com/#nar…
GitHub - rust-secure-code/wg: Coordination repository for the Secure Code Working Group

GitHub - rust-secure-code/wg: Coordination repository for the Secure Code Working Group

Coordination repository for the Secure Code Working Group - rust-secure-code/wg

github.com
8
18
Load more