rust

The Tokio async runtime's task-abort semantics contained a subtle but serious correctness bug: before the 1.8.1 fixes, calling JoinHandle::abort could cause a task's future to be dropped on the wrong thread, which in turn could violate Rust's thread-safety assumptions for non‑Send task-local...

The Rust ecosystem’s widely used protobuf crate contains a denial‑of‑service flaw: CVE‑2025‑53605 affects versions before 3.7.2 and permits uncontrolled recursion in protobuf::coded_input_stream::CodedInputStream::skip_group when processing unknown fields from untrusted input. The maintainers...

Microsoft’s new LiteBox project is more than another sandbox — it’s a deliberate attempt to rethink where the operating system boundary lives and to push much of the trusted code into a small, auditable library runtime so applications see only the interfaces they absolutely need. (github.com)...

Microsoft’s engineers have quietly opened a new front in OS-level security with LiteBox, a Rust‑based “library OS” designed to shrink the exposed surface between running code and the host system so dramatically that entire classes of kernel‑exposed attack vectors become far harder to exploit...

Microsoft’s latest public dust-up over an apparent plan to “rewrite Windows in Rust” began as a LinkedIn hiring post from Distinguished Engineer Galen Hunt and quickly became a global conversation about AI-assisted code migration, memory safety, and how platform vendors modernize decades‑old...

Microsoft’s blunt new engineering ambition — to use AI and algorithmic tooling to remove C and C++ from major system codebases and replace them with memory‑safe Rust — has vaulted a quiet, multi‑year shift into the headlines and forced an overdue reckoning about how operating systems will be...

A Microsoft engineer’s LinkedIn post that set off a flurry of headlines — claiming a goal to “eliminate every line of C and C++ from Microsoft by 2030” — has been clarified as a research project rather than an official company edict, but the episode crystallizes a real and accelerating shift...

Microsoft’s terse clarification ended a brief but intense wave of headlines: a viral LinkedIn hiring post by a senior Microsoft engineer drew interpretations that the company planned an immediate, AI-driven rewrite of Windows in Rust — a reading Microsoft and the post’s author explicitly denied...

Microsoft’s most publicized systems‑engineering recruitment post this month crystallized an audacious vision: build AI‑and‑algorithmic tooling that can translate huge amounts of legacy C and C++ into Rust at industrial scale — and aim to “eliminate every line of C and C++ from Microsoft by...

Microsoft’s rapid attempt to frame a long‑term research push as a near‑term operational plan detonated into one of the week’s biggest Windows controversies: a LinkedIn hiring post by Distinguished Engineer Galen Hunt — which invoked the striking slogan “1 engineer, 1 month, 1 million lines of...

Cloudflare’s move to run LLM inference at the edge — powered by a Rust engine called Infire and integrated with its global Workers AI platform — is more than a technical curiosity: it is a deliberate attempt to rewire the cost economics of AI inference by shifting how and where GPUs, CPUs, and...

Microsoft’s stated plan to remove “every line of C and C++” from its codebase by 2030 — and to do so by combining algorithmic source analysis with AI-driven translation into Rust — marks one of the most ambitious language-migration bets ever announced by a major platform company. The...

Microsoft’s public clarifications this week laid to rest the most sensational headlines: a LinkedIn hiring post from Distinguished Engineer Galen Hunt set off a firestorm by declaring a goal to “eliminate every line of C and C++ from Microsoft by 2030” and citing a provocative productivity north...

Microsoft engineering leadership has publicly framed an audacious, company-wide program to remove every line of C and C++ from Microsoft’s codebase by 2030 and replace it with Rust, driven by a purpose-built combination of algorithmic program analysis and AI agents that can rewrite and verify...

Microsoft’s engineering gamble — to use AI to rewrite millions of lines of legacy C and C++ into Rust by 2030 — landed squarely in the spotlight this winter after a months‑long string of Windows 11 malfunctions and a formal Microsoft support advisory that traced the outages to XAML registration...

Microsoft engineers have quietly moved a strategy conversation about language choice into an explicit, time‑boxed program: to eliminate C and C++ from Microsoft’s core codebase by 2030 by using algorithmic program analysis combined with AI agents to translate and re‑engineer legacy systems into...

Microsoft’s own engineers have announced an audacious, company-wide plan: use AI and large-scale automated tooling to translate Microsoft’s C and C++ codebases to Rust — with an explicit target of eliminating “every line of C and C++ from Microsoft by 2030.” Background Microsoft’s shift toward...

The Rust shlex crate has a security blind spot: versions prior to 1.2.1 allowed the characters { and the non‑breaking space (0xA0) to appear unquoted in quoted arguments, which can turn a single intended argument into multiple tokens when that output is passed to a shell — a condition that can...

GitHub has quietly launched one of the most consequential infrastructure reorganizations in its post‑acquisition history: a full-scale migration of its production estate onto Microsoft Azure that GitHub engineers and Microsoft leaders describe as necessary to scale AI services like Copilot and...

Rust’s orange crab may be cute, but the language it represents is reshaping engineering decisions at the deepest levels of modern software: from browsers and kernels to cloud services and consumer devices. At RustConf 2025 the community celebrated a decade since Rust’s 1.0 release while also...