zlacker

[return to "“Rust is safe” is not some kind of absolute guarantee of code safety"]
1. kweing+O7[view] [source] 2022-10-02 15:10:51
>>rvz+(OP)
Classic Linus.

From the closing paragraph, I feel like he’s under the impression that Rust-advocating contributors are putting Rust’s interests (e.g. “legitimizing it” by getting it in the kernel) above the kernel itself.

◧◩
2. sidlls+2a[view] [source] 2022-10-02 15:24:45
>>kweing+O7
They probably are, in many cases. Rust’s community, in aggregate, have developed a reputation (earned, in my opinion). It’s too bad that the community don’t follow the leaders’ example in this regard. There are some quality, level-headed Rust advocates. They appear to be the minority.
◧◩◪
3. mustac+1e[view] [source] 2022-10-02 15:46:54
>>sidlls+2a
At least they don't go around slandering programming language communities.

If we're going to be serious about who is being toxic, it's definitely Linus in this thread. Guy makes first mistake (by a very broad interpretation of "mistake". Perhaps "misunderstanding"?). Linus goes nuclear. And while his reasoning is sound, his argumentation cycles between threats, bad-faith arguments, and just plain old yelling.

What some people don't understand is that the Linux kernel isn't 'led' in any meaningful sense. But I suppose some projects don't need actual leadership? I once was recommended a Metallica documentary, because "It's amusing to see what emotionally stunted 40-50 year olds who have never had anyone tell them 'No' since 18 will do." That's the Linus vibe -- somehow we've limped along to here. Seriously, read the rust/rust-lang issues/RFCs. Those people sound like grownups contrasted to this.

◧◩◪◨
4. h2odra+Ag[view] [source] 2022-10-02 16:02:02
>>mustac+1e
Threats? Slander? Do you feel that you're "speaking for a community" here?
◧◩◪◨⬒
5. mustac+6k[view] [source] 2022-10-02 16:21:27
>>h2odra+Ag
Heck no! And I can't imagine anyone thinking I was?

The threat is pretty clear? "If Rust people don't get this, we will have to part ways." This is an ultimatum? It's crazy girlfriend/boyfriend material? It's ridiculous after one contributor tries something that Linus thinks won't work in the kernel. Ridiculous. Just say no.

The slander as well? "Rust’s community, in aggregate, have developed a reputation." And you know what? The C/C++/Zig/Nim/Haskell/Clojure communities have developed a reputation too, but, gosh, I don't talk about it because I know labeling groups isn't helpful/is completely non-technical.

◧◩◪◨⬒⬓
6. topspi+pR[view] [source] 2022-10-02 19:35:36
>>mustac+6k
> "If Rust people don't get this, we will have to part ways."

What are you quoting? I don't see this anywhere in the thread.

The nearest I see is:

    If you cannot get over the fact that the kernel may have other
    requirements that trump any language standards, we really can't work
    together.
A reasonable, politely delivered, statement directed to an individual as opposed to Rust. It was in response to this rather cringy bit of lecturing:

    No one is talking about absolute safety guarantees. I am talking about
    specific ones that Rust makes: these are well-documented and formally
    defined.
Rust has no formal language specification yet. It's still "an area of research," to paraphrase what is said when the question is asked. No defined memory model either; from the current Rust reference:

    Rust does not yet have a defined memory model. Various academics
    and industry professionals are working on various proposals, but
    for now, this is an under-defined place in the language.
One could argue (not me; I'm far too pragmatic for such things) that Linus is being exceptionally generous in entertaining Rust in its current state.
◧◩◪◨⬒⬓⬔
7. mustac+wT[view] [source] 2022-10-02 19:50:18
>>topspi+pR
FWIW, I actually mostly agree with Linus.

I was paraphrasing. I didn't want to write a page length comment, and won't here, but there were a few more instances of similar ultimatums (like "Or, you know, if you can't deal with the rules that the kernel requires, then just don't do kernel programming.") And all are similarly ridiculous/dickish. Really no need for such dramatic convulsions, Linus, where Wedson was simply trying to explain the API expectations of the Rust language.

Re: the rest, I think you are conflating Rust's UB guarantees with a specified memory model.

◧◩◪◨⬒⬓⬔⧯
8. topspi+VV[view] [source] 2022-10-02 20:05:43
>>mustac+wT
> I was paraphrasing.

You put it in quotes and didn't mention any paraphrasing. Linus didn't write it.

> Rust's UB guarantees

Can you point out the normative document that provides these guarantees? Rust doesn't have one as far as I know.

◧◩◪◨⬒⬓⬔⧯▣
9. mustac+FW[view] [source] 2022-10-02 20:11:19
>>topspi+VV
> You put it in quotes and didn't mention any paraphrasing. Linus didn't write it.

I think it's a fair characterization of what was said. Feel free, as everyone is, to read the entire thread again. I'm not a journalist. You have the primary source at your finger tips!

> Can you point out the normative document that provides these guarantees?

You're looking at the Rust reference right? https://doc.rust-lang.org/reference/behavior-considered-unde...

[go to top]