Dirkjan Ochtman

Rustup 1.29.2 has been released. This is a small release which only updates the rustls-webpki and webpki-root-certs dependencies to remove the compromised eMudhra intermediate certificates. See the announcement for details: blog.rust-lang.org/2026/10/20/R...

If you’re using rustls, upgrade to rustls-webpki 0.103.16 and/or webpki-roots or webpki-root-certs 1.0.10.

Hier is te weinig verontwaardiging over dus ik gooi hem er nog een keer in. De vuurwerkbranche wordt gecompenseerd (!) met 80 miljoen die voor spooronderhoud was bedoeld en 20 miljoen uit de klimaatpot. WTF. www.nrc.nl/nieuws/2026/...

1.99 lints are a little rougher than usual, this is just from Hickory DNS: github.com/rust-lang/ru... github.com/rust-lang/ru... github.com/dcchut/async...

A huge milestone: Fearless SIMD 1.0 is published: linebender.org/blog/fearles.... This was a real collaboration, thanks especially to Sergey Davidoff for pushing this over the line, Laurenz Stampfl, Andrew Jakubowicz, valadaptive, Benjamin Saunders, and Daniel McNab.

⚠️ We believe that there is an ongoing campaign targeting owners of popular crates and rust-lang team members that is attempting to compromise devices and accounts in order to use them to publish malware. See our blog post for details: blog.rust-lang.org/2026/09/17/t...

OxiSH does not support compression. We’ll see if someone really needs it, but will definitely keep it disabled by default.

Apparently Digital Ocean canceled their $50/month sponsorship of GNOME and FlatHub the month before giving Omarchy 3 million dollars. social.treehouse.systems/@barthalion/...

More good news: Jess Izen is stepping into an Engineer in Residence role with the Rust Foundation! She's done so much good work for the ecosystem already (see the post!) and I can't think of a better person to wear this hat 🦀 rustfoundation.org/media/welcom...

I wonder whether people will start to update their priors about running “stable” (read old) software. blog.trailofbits.com/2026/08/26/v...

Scaling Memory Safety: AI-Assisted Rewrites of C/C++ Dependencies to Rust bughunters.google.com/blog/scaling...

ohhhh firefox are using jxl-rs and not libjxl for decode now ^-^

Rust blog post: blog.rust-lang.org/2026/08/20/s...

PSA: arrayref 0.3.10 (maintained by droundy, 54M recent downloads) appears to contain malware. rust-lang.zulipchat.com#narrow/chann...

this owns www.inverse.com/input/cultur...

New blog post: How to speed up the Rust compiler in July 2026 nnethercote.github.io/2026/07/31/h...

So when are we going to make AI code get a handle on wildly overwrought commenting. One easy way to spot under-reviewed vibecoding is comments that are oddly verbosely fixated on one particular minor implementation feature (because that’s the most recent thing that was worked on)

On my trusty M1 Max, a tiny test crate with graviola 0.4 as its single dependency runs clean `cargo check` 1.31x faster than with sha2 0.11, and clean `cargo build` 1.11x faster.

🦀 in case you're wondering what the crates.io team has been up to for the past 6 months: blog.rust-lang.org/2026/07/13/c... - Source Code Viewer - Untangling crates.io Accounts from GitHub - Advisories and Suggestions - Cuter Error Pages - Svelte Frontend Migration Completed #rustlang

I suppose asking for new contributors on a popular programming language blog is equivalent to inviting a slop tsunami.

Shitty personal attacks in a blog post are one thing, but when people reply “now I like zig even more” really makes me wonder what went wrong in our communities.

We are pleased to welcome Wild to the RIL: the Rust Foundation's home for projects that power critical infrastructure. Wild is a linker with the goal of being very fast for iterative development & is supported financially by AWS. Read the announcement: rustfoundation.org/media/welcom...

A post by @mara.bsky.social have been stuck in my head for about two months now so I just had to write out my thoughts on what the most central railway station in the Netherlands is: erk.dev/2026/06/21/t...

graviola is amazing and more people should use it.

This new graviola release is amazing! aws-lc-rs v1.17.0: 18 dependencies - 16s release build rustls-graviola v0.3.4: 45 dependencies - 9s release build rustls-graviola v0.4.0: 19 dependencies - 5.5s release build Tested on a 24 vCPU 5950X VM. github.com/ctz/graviola...

We're excited to share that Firefox now uses zlib-rs for gzip (de)compression. This has both performance and safety advantages, but it took a while to get zlib-rs into production. Read why: trifectatech.org/blog/zlib-rs... Thanks to @gabrielesvelto.mas.to.ap.brid.gy and @mozilla.org #rustlang

MFA by emailing or texting a code is both bad security and crappy UX.

I put crates.io/crates/depub together for this a while back. It's crude, but surprisingly effective.

The recording of our talk at @canonicalltd.bsky.social's #UbuntuSummit is available now: www.youtube.com/watch?v=qKmR... Happy to answer questions here!

Ugh, apparently neither @github.com, nor @fastmail.com, nor @slack.engineering support post-quantum TLS key exchanges, making everything sent and received over these connections vulnerable to harvest-now-decrypt-later attacks, maybe as early as 2029.

We're proud to announce the first release of our latest data compression project, Zstandard in Rust! Read why we did this, the current state of the project, and where we're hoping to take it: buff.ly/JoruN7e Thanks to Chainguard, Astral, NLnet Foundation, and @sovereign.tech. #rustlang #opensource

@jbp.io and I will be presenting on our upki project to make TLS certificate verification more secure for non-browser Linux apps.

Why don't Jiff's strftime and strptime routines validate the format string separately from formatting or parsing a datetime? github.com/BurntSushi/j...

A few days ago I tried instant-xml for a project that had to deal with complex xml files. Now I'm switching rusty-s3 over to using it. github.com/paolobarboli...

PSA: rustup might be failing in some GitHub runners on macOS github.com/actions/runn...

jesus christ xcancel.com/jarredsumner...

Early incident report: bugzilla.mozilla.org/show_bug.cgi...

Yes! Also unnameable_types.

At #rustweek I'll have new stickers celebrating a decade of rustls. First commit was ten years ago tomorrow

youtu.be/rgZlzCd0DUU?... I guess this means I'm a tech influencer now? Thanks @frame.work

I'm *very* excited to report that we got initial funding and have hired our first Rust maintainers! RustNL's Rust Maintainers Team starts out with two full time maintainers, one intern, and five part-time maintainers, now stably employed to continue their work on Rust! 🎉 rustnl.org/maintainers/