logoalt Hacker News

groundzeros2015 • today at 4:33 PM • 1 reply • view on HN

If it’s sandboxed why do I need rust?

What counts as a “safety mechanism”?


Replies

dtf • today at 4:46 PM

It's the "rule of two" safety guideline mentioned and linked to in the article:

https://chromium.googlesource.com/chromium/src/+/main/docs/s...

If you use a safe language like Rust, you can afford untrusted input and no sandboxing.

If you use an unsafe language such as C++, you must chose between trusted inputs or sandboxing.

I was curious as to where rfgplk's implementation lay within the Venn diagram.

➕ show 1 reply