Hot take: don’t make callback APIs in Rust. Minimize Fn arguments; guard types are almost always a better solution (except in very simple/generic map() combinators).

Second time I heard this pitch this week. The problem is that (well-maintained) dependencies take care of the issues you haven’t thought of yet. There is some cost to having dependencies and making sure the dependency graph doesn’t grow too much takes work, but codegen doesn’t seem a great option.

deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses arxiv.org/abs/2506.15648

Dutch folks: nerdvote.nl!

Please don't write your commit messages or PR descriptions with AI. If you didn't bother writing it I'm not sure I can be bothered reading it.

New Rust RFC: adding a crates.io Security tab github.com/rust-lang/rf...

Hot take: closures (above a certain fairly low complexity level) kinda suck and elaborating them into an explicit struct with an explicit method usually makes code easier to read. (More so in async world.) Instead, work on reducing the need (over guards), like partial borrowing?

This is going to be cool.

RustSec advisories for TARmaggedon are coming soon (probably tomorrow).

WTF. 🤯 Postman's server's are down and you can't even use desktop app with your local APIs! This is exactly why I made yaak.app. It works offline, is open source, has no telemetry, no VC funding, and even syncs with Git! Give it a try and let me know what you think ✨

It's been 14 months since the ML-KEM spec was published. age still isn't PQ because it's waiting for trivial details of the HPKE hybrids to stabilize, but they are blocked on the CFRG. The TLS, SSHM, and LAMPS (X.509) IETF WGs are not waiting for CFRG. I just posted a plea for HPKE to do the same.

We're excited to announce a new initiative to support the Rust Project, our Rust Maintainers Fund! We are setting out to employ 6 full-time maintainers and 6 interns in 2026 to make sure #rustlang is well maintained and bugs and contributions get the attention they need. Read more: rustnl.org/fund

TFW when someone asks you to "resolve compilation errors" in their post-quantum VPN implementation and it's 4k lines of slop.

Any #rust suggestions on how to get build-std to work with sanitizers? github.com/rust-lang/ru...

Igalia is excited to announce a new commission from the Sovereign Tech Fund to advance the Servo web engine. www.igalia.com/2025/10/09/I...

"[Ars Technica] asked Cruz's office to explain why a senator pressuring Wikipedia is appropriate while an FCC chair pressuring ABC is not and will update this article if we get a response." arstechnica.com/tech-policy/...

And then there's the prominent Rust maintainer who doesn't want their default branches renamed to main.

I wrote another blog post for the Prossimo blog about how we improve the unhappy path for rustls users: www.memorysafety.org/blog/rustls-...

GitHub Actions badly needs some competition, it seems to be getting worse all the time. There's been several days in recent weeks where I had to spent more than an hour per day babysitting failing Actions. Or maybe they just don't like Europe enough to have some CET SRE?

Maintaining #Rustls isn’t just code — it’s choices. Dirkjan shared how OSS maintainers balance safety vs. niche flexibility and why API instability or incompatibility can ripple across the ecosystem. Full story at netstack.fm/#episode-7

You know you’re an OSS maintainer when the principal engineer at a large US company messages you on LinkedIn to “ask for your thoughts on the design of” $feature. (The GitHub issues are right there, as is the Discord chat link.) (Of course this large company is not sponsoring your work.)

We have a little blog post about this rustls.dev/blog/2025-09...

LIVE at #rustconf: The Rust Foundation has launched its new "Rust Innovation Lab" with Rustls, a leading TLS library, as the inaugural hosted project! The RIL provides comprehensive support for funded OSS projects, ensuring sustainable & community-led growth. rustfoundation.org/media/rust-f...

Using Python code in your Rust test suite is inevitably tech debt.

Open source is one person opensourcesecurity.io/2025/08-oss-...

I’m currently typing on an extended Apple keyboard but thinking about buying something more ergonomic (as in split etc). I used some of the MS Ergonomic keyboards before but they were sort of loud, required more effort for keypresses and weren’t all that reliable. What should I look at?

Reminder that github.com/djc/pyrtls is a thing that exists (and I would be willing to invest more if people wanted to start using it).

Too bad… www.theargumentmag.com/p/giving-peo...

And for people who like this, check out Secretive to authenticate the use of your SSH keys with TouchID: github.com/maxgoedjen/s...

@raviqqe.bsky.social do you still want to maintain the array-queue crate? github.com/raviqqe/arra... looks like a somewhat serious issue, and we're considering publishing an advisory about it. github.com/rustsec/advi...

We have our usual monthly update for Linebender: linebender.org/blog/tmil-19/ A lot of good progress, especially on the renderer, and fearless_simd is coming along well. Also some personal news: I'm leaving Google and taking a new role at Canva, moving to Australia in January.

once again, #rustlang is the most admired programming language on the stack overflow survey: survey.stackoverflow.co/2025/technol...

The matches-index (July 2025): sifting through top (recently) downloaded crates from crates.io to find small crates that might make sense for core/alloc/std inclusion. internals.rust-lang.org/t/matches-in...

My friends. This is not a good idea: www.wired.com/story/silico... - take it from every single wisdom tradition in the history of the world. You can love your work, but your work cannot love you back. Have more respect for yourself and your peers. Work hard. Do good work.

PQC in rustls state in a skeet: ML-KEM is enabled (and prioritized) by default. Initial (and, for now, unstable) support for ML-DSA support is available via the rustls-post-quantum provider (github.com/rustls/rustl...).

PSA: if you use VS Code and are questioning what unholy mess of machine-generated code is now enabled by default, thereby messing up your typing/navigation: disable "Next Editing Suggestions" in your settings.

I’ve been maintaining the Rust flamegraph implementation for three years, releasing about every 3 months on average. Consider sponsoring my work if it’s been valuable to you(r team).

sudo-rs is headed to Ubuntu 25.10! Congrats to the @trifectatech.bsky.social team! www.memorysafety.org/blog/sudo-rs...

One of the best explanations of how (and why) you want to make small commits yet: matklad.github.io/2025/07/07/i...

Pretty excited about the release of instant-acme 0.8, with lots of work from @cpu.xkeyscore.club (who joined as a maintainer) on ARI, profiles, integration testing and a much improved API. github.com/djc/instant-...

Nerd-sniped by bagder into looking at how rustls-ffi stacks up against OpenSSL on memory allocations/peak heap usage when plugged in as a curl vTLS backend. Headlines: * with rustls-ffi 0.15.0: 2,176 allocations. peak heap of 394kB. * with openssl 3.4.1: 308,132 allocations (!). peak heap of 2.1MB

It is time!

Graviola: fast, high-assurance cryptography for Rust by Joe Birr Pixton at RustWeek 2025! www.youtube.com/watch?v=n6gA... ‪@jbp.io‬ #rustlang #RustWeek

So excited to hear about ersc.io #jj-vcs

Hello! I'm Daniel/@cpu I <3 open source and split my time between working for @geomys.org on Go cryptography, and hacking on various other bits of applied cryptography (notably github.com/rustls/rustls & friends). I'm new to Bluesky. Let's see how it goes?

Today's the day. So help me and Fareed: was the most successful company founded in 2020 co-located the majority of the time?

We noticed a CPU bug on Raptor Lake because the bounds checking in our Rust zlib implementation was hitting "impossible" bounds checks: github.com/trifectatech... The Oodle devs noticed similar issues in their decompressors and managed to root cause it: fgiesen.wordpress.com/2025/05/21/o...

Modularity is underestimated.

On my way back home after RustWeek 2025. So, so proud that we hosted the Rust Project All-Hands, the 10 years of Rust celebration, and the biggest Rust conference yet. See you all next year! Thanks to my co-organizers Jana, Laura, @tertsdiepraam.bsky.social and @mara.bsky.social ❤️ #rustlang #rust