appsec.fyi

A somewhat curated list of links to various topics in application security.

Rust

LinkExcerptWord Count
clap-rs/clapDual-licensed under Apache 2.0 or MIT. Create your command-line parser, with all of the bells and whistles, declaratively or procedurally.32
rwf2/RocketRocket is an async web framework for Rust with a focus on usability, security, extensibility, and speed. Visiting localhost:8000/hello/John/58, for example, will trigger the hello route resulting in the string Hello, 58 year old named John! being sent to the browser.451
Async/AwaitIn this post, we explore cooperative multitasking and the async/await feature of Rust. We take a detailed look at how async/await works in Rust, including the design of the Future trait, the state machine transformation, and pinning.16530
Why Rust mutexes look like they doComments are not a concurrency strategy. One of the common complaints I hear from systems programmers who try Rust is about mutexes, and specifically about the Rust Mutex API. The complaints usually go something like this:4488
Rust Software Security: A Current State AssessmentSible, J., and Svoboda, D., 2022: Rust Software Security: A Current State Assessment. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed September 17, 2024, https://doi.org/10.58012/0px4-9n81. Sible, J., & Svoboda, D. (2022, December 12).3060