We're happy to announce a new Prossimo initiative—sudo and su! We’re partnering with @tweedegolfbv and @FerrousSystems to reimplement these ubiquitous utilities in memory safe Rust. Thanks to @AWSOpen for your generous support of this critical work.
https://www.memorysafety.org/blog/sudo-and-su/
Prossimo
Moving the Internet's security-sensitive software infrastructure to memory safe code. A project from ISRG. http://memorysafety.org
We're thankful for the support of
AWS, who has just announced their $1 million gift for Prossimo. It was announced today by Phil Estes during Open Source Summit! You can learn more about it in our newest blog post:
Have you heard the news? We're supporting a rewrite of sudo and su in Rust via a joint development effort by @tweedegolfbv and @FerrousSystems -- made possible thanks to @AWSOpen. Read about it here in an article from @TechTimes_News: https://www.techtimes.com/articles/291122/20230504/ferrous-systems-and-tweede-golf-get-rust-rewrite-with-support-from-aws.htm
Prossimo is behind several critical memory safety initiatives -- but have you ever wondered who's behind Prossimo?
Meet ISRG, the Internet security nonprofit that brought you Prossimo and Let's Encrypt. Learn about their work on their webiste, at https://www.abetterinternet.org/.
We are glad to share the memory safety advocacy space with @ConsumerReports, who published their report on the Future of Memory Safety in January.
Read the report here: https://advocacy.consumerreports.org/research/report-future-of-memory-safety/
Moving all the Web's software infrastructure to memory safe code is an ambitious goal. That's why Prossimo focuses on software that is widely used, on a network boundary, performs a critical function, and is written in a languages that aren't memory safe. https://www.memorysafety.org/about/
Our memory safe NTP implementation ntpd-rs has a new home with @tweedegolfbv. Learn about this exciting announcement in this blog post from April: https://www.memorysafety.org/blog/ntp-and-nts-have-arrived/
More coverage of our new sudo and su initiative by @kevinpurdy in @arstechnica!
---
RT @arstechnica
Two core Unix-like utilities, sudo and su, are getting rewrites in Rust https://arstechnica.com/information-technology/2023/05/two-core-unix-like-utilities-sudo-and-su-are-getting-rewrites-in-rust/?utm_brand=arstechnica&utm_source=twitter&utm_social-type=owned&utm_medium=social
https://twitter.com/arstechnica/status/1653085770675101696
Get to know the C API for Rustls that existing C-based projects can use to make their TLS implementation memory safe. Developed by ISRG engineer Jacob Hoffman-Andrews as part of the Prossimo Rustls initiative. https://github.com/rustls/rustls-ffi
Our initiative to support a memory safe DNS resolver is running full steam ahead. Visit our work plan to see what we've accomplished so far and what's next: https://www.memorysafety.org/initiative/dns/dns-work-plan/
Take a look at Miguel Ojeda's Rust for Linux website to learn about the full history of the Prossimo initiative and where it's at now. https://rust-for-linux.com/
Our work includes everything from supporting a memory safe DNS resolver to building a memory safe AV1 decoder. Take a look at our initiatives over on the Prossimo website, at https://www.memorysafety.org/.
We're happy to have helped support this memory safe NTP implementation!
---
RT @tweedegolfbv
*ANNOUNCEMENT* @I_S_R_G and @ProssimoISRG@infosec.exchange have officially made us the new home of "ntpd-rs", the #opensource #memorysafe implementation of the Network Time Protocol.
Thanks to @0xjosh and @ProssimoISRG@infosec.exchange
https://tweedegolf.nl/en/blog/90/memory-safe-network-time-ntp-has-new-home-seeks-early-adopters
https://twitter.com/tweedegolfbv/status/1650881595740389381
Thanks to @michaellarabel for covering our new sudo and su initiative in @phoronix!
---
RT @phoronix
sudo & su Being Rewritten In Rust For Memory Safety
https://www.phoronix.com/news/sudo-su-rewrite-rust
https://twitter.com/phoronix/status/1652340341150826497
Our memory safe NTP Implemntation has a new home with @tweedegolfbv. Visit our blog to learn about this exciting next step: https://www.memorysafety.org/blog/ntp-and-nts-have-arrived/
Memory safety vulnerabilities are just the tip of the iceberg. Languages that aren't memory safe can negatively impact stability, developer productivity, and application performance. Learn how on our website, at:
https://www.memorysafety.org/docs/memory-safety/#what-other-problems-are-associated-with-languages-that-are-not-memory-safe
