Hacker News Reader

Oh it’s possible and people do it in embedded all the time at great expense, but that safety isn’t assured by using a “safe” language, it comes from the requirements, documentation and verification process. OpenBSD’s kernel was developed with security in mind but not that level of safety.

View on HN

Not really sure what you mean? You have to use `unsafe` in Rust to access arbitrary mutable pointers. How would you do DMA, or write a device driver, without `* mut T`

I’m referring to use of process (sometimes with a partial assist from qualified tools, of which Rust is NOT one) for safety assurance, not the language. As is done in safety and security critical embedded contexts. eg DO-178, Common Criteria, etc.

Reply on news.ycombinator.com