People lose their minds over 5 lines in an unsafe block but sleep soundly seeing tens of thousands of lines of unsafe C powering their car.
I wonder if there are legal implications though if there was a crash and it provides evidence that the maker actually knew it was unsafe.
It's more scary that there's a bunch of unsafe code out there that's not marked as such.
Yeah, unsafe isn't the best keyword but alternatives like manually_verified are a bit too long.
I think it's supposed to be a bit scary, so you pay extra close attention.
Perhaps it's a bit different if you're not a native English speaker, since the emotional aspects of the word are missing. To us, it's just a foreign-language keyword, like "if" or "for".
The compiler can't enforce manual verification, so that would be potentially misleading in a bad way.
I don’t think there’s any automotive manufacturer crazy enough to use Rust in safety-critical components. They have to have air-tight documentation and Rust is neither certified nor a proven solution in this space.
Unsafe rust can be safe. Its just that the compiler cannot verify if it is.
Same as writing any C/C++ code.