There are a lot of reasons you might want to download all the crates ever uploaded to crates.io , Rust's package registry: code analysis across the whole public ecosystem, hosting a mirror for your company, or countless other ideas and projects. The team behind crates.io receives a lot of support request asking what's the best and least impactful way to do this, so here is a little guide…
This blog post is a slightly edited version of the live transcript of the talk I gave at RustFest 2019 in Barcelona on November 10th, 2019. As it's a transcript some parts of it are a bit repetitive or badly worded, but I hope the message behind the talk will be conveyed by this post anyway. The original transcript was provided by the RustFest organizers, and it's released under the…
It's starting to become a tradition to see a bunch of posts around the new year on what the community wants to see from Rust. For the second year in a row, the Rust core team asked for feedback for the 2019 roadmap and this is what I'd like: "rustfix all the things" and a better infrastructure. Add rustfix support to most of the warnings One of the features of Rust 2018 I don't see…
Gandi is a French domain name registrar I use for all my domains, which also supports the volunteers behind some FLOSS projects. On Tuesday 27 september 2016 I found a flaw in their login form which allowed to completly bypass two factor authentication (2FA), after you inserted the right handle and password. It all starts with a broken phone The day before I found this vulnerability, my phone fell…