Throughout your posts, I notice a recurrent theme of false equivalence between "rust" and "memory safety".
Rust is merely a tool; a language that makes memory safety easier. It is not required for memory safety, nor does it, by itself, guarantee memory safety.
This is particularly true in supervisor mode, with hardware other than the CPU itself within reach.
> Throughout your posts, I notice a recurrent theme of false equivalence between "rust" and "memory safety".
I'm glad you were able to reason through it.
> Rust is merely a tool; a language that makes memory safety easier.
I suppose, if I overstated the effect Rust might have on memory safety, you risk understating it here.
> It is not required for memory safety, nor does it, by itself, guarantee memory safety.
No, but it does an incredible job?
This reminds me of a post, on this site, I saw which said something to the effect of "ZFS is only great because it is the only filesystem in its domain" which is ridiculous on it's face, but I think even more ridiculous as you dig a little deeper.
When someone who keeps shooting themselves in the foot says, "That safety doesn't prevent all the ways you can kill yourself". Sometimes you want to scream to that fool who manages to continue to avoid using the safety: "What more do you want?"
> This is particularly true in supervisor mode, with hardware other than the CPU itself within reach.
Of course, I'd agree to some extent, but I think your framing is again perhaps overly narrow. Rust is a really good tool. It's such a good tool I hear they are trying to write drivers with it in the Linux kernel.
>It's such a good tool I hear they are trying to write drivers with it in the Linux kernel.
And it's going to be a nightmare, because Linux famously makes changes every now and again which require maintainers monkeying all over code they do not know well to change references to functions and structures.
This is hard enough with just C, it is untenable with Rust.
Let's be honest. Linux isn't even that good. Is it worth the pain? The rust devs could get much more work done and without conflict if they worked on their own system, such as Maestro[0] (unix-like, AGPL but MIT if you go back just a few non-code commits) or Redox[1] (microkernel and multiserver proper, MIT).
Rust is merely a tool; a language that makes memory safety easier. It is not required for memory safety, nor does it, by itself, guarantee memory safety.
This is particularly true in supervisor mode, with hardware other than the CPU itself within reach.