Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing.

Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing.

Scheduled Pinned Locked Moved Uncategorized
27 Posts 18 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • maxine@hachyderm.ioM maxine@hachyderm.io

    Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing. The supposed security and performance gains are irrelevant, and while memory safety is important, logic bugs don’t suddenly cease to exist just because it was written in Rust.

    Link Preview Image
    Ubuntu Rust Coreutils Audit Revealed 113 Issues, Ubuntu 26.10 Aims For "100% Rust Coreutils"

    Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version

    favicon

    (www.phoronix.com)

    luxliquida@critter.cafeL This user is from outside of this forum
    luxliquida@critter.cafeL This user is from outside of this forum
    luxliquida@critter.cafe
    wrote last edited by
    #17

    @maxine Tangential, the Phoronix forums seem to be absolutely flooded with transphobia and other bigotry... I know "don't read the comments" is common sense, but they really need moderators over there 🤦🏻‍♀️

    maxine@hachyderm.ioM 1 Reply Last reply
    0
    • luxliquida@critter.cafeL luxliquida@critter.cafe

      @maxine Tangential, the Phoronix forums seem to be absolutely flooded with transphobia and other bigotry... I know "don't read the comments" is common sense, but they really need moderators over there 🤦🏻‍♀️

      maxine@hachyderm.ioM This user is from outside of this forum
      maxine@hachyderm.ioM This user is from outside of this forum
      maxine@hachyderm.io
      wrote last edited by
      #18

      @luxliquida I resent using Phoronix as a source here but I didn’t find another quickly, but yes, the community of that site is an absolute cesspit. Has been as long as I remember.

      1 Reply Last reply
      0
      • stf@chaos.socialS stf@chaos.social

        @sundew @maxine most of the utils in coreutils have no remote attack surface and run without suid bit, so neither local privilege escalation is an issue. so the threat model really does not include memory-safety in any important way. thus the whole rewrite coreutils in rust for security is utter bullshit.

        sundew@beige.partyS This user is from outside of this forum
        sundew@beige.partyS This user is from outside of this forum
        sundew@beige.party
        wrote last edited by
        #19

        @stf @maxine

        I think memory safety issues in any program can still be very bad news. One example:
        https://www.csoonline.com/article/549634/vulnerability-in-widely-used-strings-utility-could-spell-trouble-for-malware-analysts.html

        Sure, a safety issue in a webserver is worse than in a utility, but I'd still like all the software I use to be memory-safe.

        Even if you're not doing full-on malware analysis, I'd like to know it's safe to run basic utilities on files downloaded from the internet without having to worry about RCE.

        1 Reply Last reply
        0
        • hipsterelectron@circumstances.runH hipsterelectron@circumstances.run

          @maxine oops that would be 1500% https://circumstances.run/@hipsterelectron/116438776604523528

          hipsterelectron@circumstances.runH This user is from outside of this forum
          hipsterelectron@circumstances.runH This user is from outside of this forum
          hipsterelectron@circumstances.run
          wrote last edited by
          #20

          @maxine also forgot about the c2rust ones https://circumstances.run/@hipsterelectron/116453862836059542

          1 Reply Last reply
          0
          • torb@hachyderm.ioT torb@hachyderm.io

            @txt_file @maxine Could maybe be because Linux is using an older version of the GPL license that corporations like better?

            rustynail@floss.socialR This user is from outside of this forum
            rustynail@floss.socialR This user is from outside of this forum
            rustynail@floss.social
            wrote last edited by
            #21

            @torb @txt_file @maxine android uses Linux just fine and it's getting more and more closed. The way I understood it is it's legal because as far as Linux is concerned, all parts of android outside of the kernel are no different from random proprietary apps you can run on your desktop, which is not even a GPL thing but a special additional clause in the Linux license

            1 Reply Last reply
            0
            • flesh@transfem.socialF flesh@transfem.social

              @bms48@mastodon.social @maxine@hachyderm.io Classifying BSD/MIT as anti-labour in general is debatable. That said, in particular contexts like this, they sure can be.

              kelpana@mastodon.ieK This user is from outside of this forum
              kelpana@mastodon.ieK This user is from outside of this forum
              kelpana@mastodon.ie
              wrote last edited by
              #22

              @flesh @maxine @bms48 Agreed, MIT is appropriate, even necessary in some circumstance - Godot engine would not be possible without MIT licensing. However, projects like this effectively laundering the licence shouldn't be tolerated.

              bms48@mastodon.socialB 1 Reply Last reply
              0
              • maxine@hachyderm.ioM maxine@hachyderm.io

                Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing. The supposed security and performance gains are irrelevant, and while memory safety is important, logic bugs don’t suddenly cease to exist just because it was written in Rust.

                Link Preview Image
                Ubuntu Rust Coreutils Audit Revealed 113 Issues, Ubuntu 26.10 Aims For "100% Rust Coreutils"

                Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version

                favicon

                (www.phoronix.com)

                flixxie@troet.cafeF This user is from outside of this forum
                flixxie@troet.cafeF This user is from outside of this forum
                flixxie@troet.cafe
                wrote last edited by
                #23

                @maxine can you explain to a license noob what copyleft licensing means?

                lx@mas.toL 1 Reply Last reply
                0
                • kelpana@mastodon.ieK kelpana@mastodon.ie

                  @flesh @maxine @bms48 Agreed, MIT is appropriate, even necessary in some circumstance - Godot engine would not be possible without MIT licensing. However, projects like this effectively laundering the licence shouldn't be tolerated.

                  bms48@mastodon.socialB This user is from outside of this forum
                  bms48@mastodon.socialB This user is from outside of this forum
                  bms48@mastodon.social
                  wrote last edited by
                  #24

                  @kelpana @flesh @maxine I can't quite understand the correlation between "rewrite in Rust" and "adopt permissive licensing", nor do I imply causation from it, as some mention. But the stated arguments in defence of these actions seem specious at best. "If it ain't broke, don't fix it" goes the old wisdom, but they insist on footgunning themselves, citing "oh because it's memory-safe". I don't run conspiracy theory either way, I just mentally read it in the Homer Simpson voice. DOH!

                  1 Reply Last reply
                  0
                  • maxine@hachyderm.ioM maxine@hachyderm.io

                    Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing. The supposed security and performance gains are irrelevant, and while memory safety is important, logic bugs don’t suddenly cease to exist just because it was written in Rust.

                    Link Preview Image
                    Ubuntu Rust Coreutils Audit Revealed 113 Issues, Ubuntu 26.10 Aims For "100% Rust Coreutils"

                    Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version

                    favicon

                    (www.phoronix.com)

                    ranidspace@wetdry.worldR This user is from outside of this forum
                    ranidspace@wetdry.worldR This user is from outside of this forum
                    ranidspace@wetdry.world
                    wrote last edited by
                    #25

                    @maxine a good thing to note is that while Rust is licensed permissively, you can license rust programs with whatever you want, including copyleft licenses.

                    This isn't a rust rewrite problem, this is a general rewrite problem

                    1 Reply Last reply
                    0
                    • maxine@hachyderm.ioM maxine@hachyderm.io

                      Consider the following: rust rewrites of projects like coreutils exist purely to remove copyleft licensing. The supposed security and performance gains are irrelevant, and while memory safety is important, logic bugs don’t suddenly cease to exist just because it was written in Rust.

                      Link Preview Image
                      Ubuntu Rust Coreutils Audit Revealed 113 Issues, Ubuntu 26.10 Aims For "100% Rust Coreutils"

                      Ahead of tomorrow's Ubuntu 26.04 LTS release, Canonical published a blog post today outlining the state of Rust Coreutils for its premiere in this long-term support (LTS) version

                      favicon

                      (www.phoronix.com)

                      nicr9@techhub.socialN This user is from outside of this forum
                      nicr9@techhub.socialN This user is from outside of this forum
                      nicr9@techhub.social
                      wrote last edited by
                      #26

                      @maxine From the rust coreutils repo:

                      > Goals
                      > uutils coreutils aims to be a drop-in replacement for the GNU utils. **Differences with GNU are treated as bugs.**

                      I guess I should file a licence change PR? 😏

                      Link Preview Image
                      GitHub - uutils/coreutils: Cross-platform Rust rewrite of the GNU coreutils

                      Cross-platform Rust rewrite of the GNU coreutils. Contribute to uutils/coreutils development by creating an account on GitHub.

                      favicon

                      GitHub (github.com)

                      1 Reply Last reply
                      0
                      • flixxie@troet.cafeF flixxie@troet.cafe

                        @maxine can you explain to a license noob what copyleft licensing means?

                        lx@mas.toL This user is from outside of this forum
                        lx@mas.toL This user is from outside of this forum
                        lx@mas.to
                        wrote last edited by
                        #27

                        @flixxie @maxine Copyleft means people can create modified versions of the software but must pass on that right to recipients. In contrast to BSD where the maker of a modified version can choose to keep it proprietary.

                        1 Reply Last reply
                        0
                        • System shared this topic
                        Reply
                        • Reply as topic
                        Log in to reply
                        • Oldest to Newest
                        • Newest to Oldest
                        • Most Votes


                        • Login

                        • Login or register to search.
                        • First post
                          Last post
                        0
                        • Categories
                        • Recent
                        • Tags
                        • Popular
                        • World
                        • Users
                        • Groups