Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing.

Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing.

Scheduled Pinned Locked Moved Uncategorized
27 Posts 18 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • luxliquida@critter.cafeL luxliquida@critter.cafe

    @maxine Tangential, the Phoronix forums seem to be absolutely flooded with transphobia and other bigotry... I know "don't read the comments" is common sense, but they really need moderators over there 🤦🏻‍♀️

    maxine@hachyderm.ioM This user is from outside of this forum
    maxine@hachyderm.ioM This user is from outside of this forum
    maxine@hachyderm.io
    wrote last edited by
    #18

    @luxliquida I resent using Phoronix as a source here but I didn’t find another quickly, but yes, the community of that site is an absolute cesspit. Has been as long as I remember.

    1 Reply Last reply
    0
    • stf@chaos.socialS stf@chaos.social

      @sundew @maxine most of the utils in coreutils have no remote attack surface and run without suid bit, so neither local privilege escalation is an issue. so the threat model really does not include memory-safety in any important way. thus the whole rewrite coreutils in rust for security is utter bullshit.

      sundew@beige.partyS This user is from outside of this forum
      sundew@beige.partyS This user is from outside of this forum
      sundew@beige.party
      wrote last edited by
      #19

      @stf @maxine

      I think memory safety issues in any program can still be very bad news. One example:
      https://www.csoonline.com/article/549634/vulnerability-in-widely-used-strings-utility-could-spell-trouble-for-malware-analysts.html

      Sure, a safety issue in a webserver is worse than in a utility, but I'd still like all the software I use to be memory-safe.

      Even if you're not doing full-on malware analysis, I'd like to know it's safe to run basic utilities on files downloaded from the internet without having to worry about RCE.

      1 Reply Last reply
      0
      • hipsterelectron@circumstances.runH hipsterelectron@circumstances.run

        @maxine oops that would be 1500% https://circumstances.run/@hipsterelectron/116438776604523528

        hipsterelectron@circumstances.runH This user is from outside of this forum
        hipsterelectron@circumstances.runH This user is from outside of this forum
        hipsterelectron@circumstances.run
        wrote last edited by
        #20

        @maxine also forgot about the c2rust ones https://circumstances.run/@hipsterelectron/116453862836059542

        1 Reply Last reply
        0
        • torb@hachyderm.ioT torb@hachyderm.io

          @txt_file @maxine Could maybe be because Linux is using an older version of the GPL license that corporations like better?

          rustynail@floss.socialR This user is from outside of this forum
          rustynail@floss.socialR This user is from outside of this forum
          rustynail@floss.social
          wrote last edited by
          #21

          @torb @txt_file @maxine android uses Linux just fine and it's getting more and more closed. The way I understood it is it's legal because as far as Linux is concerned, all parts of android outside of the kernel are no different from random proprietary apps you can run on your desktop, which is not even a GPL thing but a special additional clause in the Linux license

          1 Reply Last reply
          0
          • flesh@transfem.socialF flesh@transfem.social

            @bms48@mastodon.social @maxine@hachyderm.io Classifying BSD/MIT as anti-labour in general is debatable. That said, in particular contexts like this, they sure can be.

            kelpana@mastodon.ieK This user is from outside of this forum
            kelpana@mastodon.ieK This user is from outside of this forum
            kelpana@mastodon.ie
            wrote last edited by
            #22

            @flesh @maxine @bms48 Agreed, MIT is appropriate, even necessary in some circumstance - Godot engine would not be possible without MIT licensing. However, projects like this effectively laundering the licence shouldn't be tolerated.

            bms48@mastodon.socialB 1 Reply Last reply
            0
            • maxine@hachyderm.ioM maxine@hachyderm.io

              Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing. The supposed security and performance gains are irrelevant, and while memory safety is important, logic bugs don’t suddenly cease to exist just because it was written in Rust.

              Link Preview Image
              Ubuntu Rust Coreutils Audit Revealed 113 Issues, Ubuntu 26.10 Aims For "100% Rust Coreutils"

              Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version

              favicon

              (www.phoronix.com)

              flixxie@troet.cafeF This user is from outside of this forum
              flixxie@troet.cafeF This user is from outside of this forum
              flixxie@troet.cafe
              wrote last edited by
              #23

              @maxine can you explain to a license noob what copyleft licensing means?

              lx@mas.toL 1 Reply Last reply
              0
              • kelpana@mastodon.ieK kelpana@mastodon.ie

                @flesh @maxine @bms48 Agreed, MIT is appropriate, even necessary in some circumstance - Godot engine would not be possible without MIT licensing. However, projects like this effectively laundering the licence shouldn't be tolerated.

                bms48@mastodon.socialB This user is from outside of this forum
                bms48@mastodon.socialB This user is from outside of this forum
                bms48@mastodon.social
                wrote last edited by
                #24

                @kelpana @flesh @maxine I can't quite understand the correlation between "rewrite in Rust" and "adopt permissive licensing", nor do I imply causation from it, as some mention. But the stated arguments in defence of these actions seem specious at best. "If it ain't broke, don't fix it" goes the old wisdom, but they insist on footgunning themselves, citing "oh because it's memory-safe". I don't run conspiracy theory either way, I just mentally read it in the Homer Simpson voice. DOH!

                1 Reply Last reply
                0
                • maxine@hachyderm.ioM maxine@hachyderm.io

                  Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing. The supposed security and performance gains are irrelevant, and while memory safety is important, logic bugs don’t suddenly cease to exist just because it was written in Rust.

                  Link Preview Image
                  Ubuntu Rust Coreutils Audit Revealed 113 Issues, Ubuntu 26.10 Aims For "100% Rust Coreutils"

                  Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version

                  favicon

                  (www.phoronix.com)

                  ranidspace@wetdry.worldR This user is from outside of this forum
                  ranidspace@wetdry.worldR This user is from outside of this forum
                  ranidspace@wetdry.world
                  wrote last edited by
                  #25

                  @maxine a good thing to note is that while Rust is licensed permissively, you can license rust programs with whatever you want, including copyleft licenses.

                  This isn't a rust rewrite problem, this is a general rewrite problem

                  1 Reply Last reply
                  0
                  • maxine@hachyderm.ioM maxine@hachyderm.io

                    Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing. The supposed security and performance gains are irrelevant, and while memory safety is important, logic bugs don’t suddenly cease to exist just because it was written in Rust.

                    Link Preview Image
                    Ubuntu Rust Coreutils Audit Revealed 113 Issues, Ubuntu 26.10 Aims For "100% Rust Coreutils"

                    Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version

                    favicon

                    (www.phoronix.com)

                    nicr9@techhub.socialN This user is from outside of this forum
                    nicr9@techhub.socialN This user is from outside of this forum
                    nicr9@techhub.social
                    wrote last edited by
                    #26

                    @maxine From the rust coreutils repo:

                    > Goals
                    > uutils coreutils aims to be a drop-in replacement for the GNU utils. **Differences with GNU are treated as bugs.**

                    I guess I should file a licence change PR? 😏

                    Link Preview Image
                    GitHub - uutils/coreutils: Cross-platform Rust rewrite of the GNU coreutils

                    Cross-platform Rust rewrite of the GNU coreutils. Contribute to uutils/coreutils development by creating an account on GitHub.

                    favicon

                    GitHub (github.com)

                    1 Reply Last reply
                    0
                    • flixxie@troet.cafeF flixxie@troet.cafe

                      @maxine can you explain to a license noob what copyleft licensing means?

                      lx@mas.toL This user is from outside of this forum
                      lx@mas.toL This user is from outside of this forum
                      lx@mas.to
                      wrote last edited by
                      #27

                      @flixxie @maxine Copyleft means people can create modified versions of the software but must pass on that right to recipients. In contrast to BSD where the maker of a modified version can choose to keep it proprietary.

                      1 Reply Last reply
                      0
                      • System shared this topic
                      Reply
                      • Reply as topic
                      Log in to reply
                      • Oldest to Newest
                      • Newest to Oldest
                      • Most Votes


                      • Login

                      • Login or register to search.
                      • First post
                        Last post
                      0
                      • Categories
                      • Recent
                      • Tags
                      • Popular
                      • World
                      • Users
                      • Groups