Hacker News new | ask | show | jobs
by lambda_dn 1572 days ago
"Actix was found by third parties abusing unsafe and when they were auditing most libraries found for Rust on the internet. When the unsafe code was audited it was found that on misuse, it can lead to serious vulnerabilities. So they opened a bunch of issues and added a lot of patches and PR’s in GitHub."

Good luck though

4 comments

This is an easy mistake to make, but actix-web isn't actix, it's a web framework that uses actix. And while actix once had a controversial reputation regarding unsafety, the project has reversed its stance in the years since that quote was relevant and now appears to treat soundness violations with seriousness.
This is all true except that Actix Web hasn't used actix since v1.0.
Hey bud, you are being really aggressive and disagreeable in here. At this point, I think everyone is aware that you, personally, would not recommend Rust or Actix. Loud and clear my dude.
They have since fixed those issues in actix 3.0
Evidence of that? Or is the whole software world to believe the words of nextaccountic?
Why don't you provide evidence of extant misused `unsafe` first? Or is the whole software world to believe the words of lambda_dn?
Unless the HN API itself gets compromised, I'm not sure what can go wrong by running your own local HN client really (it only communicates with the official HN API). But happy to be showed otherwise.