Andrew Gallant
@burntsushi.net
2.1K followers 35 following 320 posts
I love to code. https://burntsushi.net
Posts Media Videos Starter Packs
Reposted by Andrew Gallant
rust-lang.org
The crates.​io team was notified of two malicious crates (with similar names as legitimate crates) which were actively searching file contents for Etherum private keys, Solana private keys, and arbitrary byte arrays for exfiltration.

See the blog post for details: blog.rust-lang.org/2025/09/24/c...
crates.io: Malicious crates faster_log and async_println | Rust Blog
Empowering everyone to build reliable and efficient software.
blog.rust-lang.org
Reposted by Andrew Gallant
mara.bsky.social
Happy 10 year anniversary to this tweet! Has memory safety in C++ been solved yet?

x.com/CppCon/statu...
A tweet from @CppCon from 22 september 2015: "Herb Sutter says we are close to solving memory safety in C++ without runtime overhead. #CppCon"
burntsushi.net
Found what appears to be my oldest game save on a physical memory card. From about 18 years ago!

This is from The Simpsons: Hit and Run. On a GameCube memory card.

I do probably have some N64 memory cards lying around... Hmmm.
A picture showing some game saves (from up to 18 years ago) of Simpsons Hit and Run.
Reposted by Andrew Gallant
rust-lang.org
We received reports of a phishing campaign targeting crates​.io users. Do not click on links asking to authenticate to protect your account. More information: blog.rust-lang.org/2025/09/12/c...
crates.io phishing campaign | Rust Blog
Empowering everyone to build reliable and efficient software.
blog.rust-lang.org
burntsushi.net
Yeah I am annoyed by that. I had to click to see the full address.
burntsushi.net
FYI, I got an obvious phishing attempt in my inbox from `[email protected]` that was masquerading as a security breach notification. It made it past gmail's spam filters.

The link goes to the `github.rustfoundation.dev` domain.
burntsushi.net
I would definitely question the 99% number there. And yeah, people will disagree about whether a loud failure is better or worse than a silent logic failure in any given scenario.
burntsushi.net
Yeah you certainly aren't the only one to hit it. It's a tough problem. Like, I could just make it so you can't do arithmetic on a `Timestamp` with a `Span`, but that also feels like a bit of a bummer.
burntsushi.net
What did it stop you from doing?
burntsushi.net
Right, in this case, Jiff is preventing you from doing calendar arithmetic on a type that cannot support. Because the only way to do calendar arithmetic correctly is with a time zone.
burntsushi.net
Jiff is *heavily* inspired by Temporal.
Reposted by Andrew Gallant
crmarsh.com
Today, we're announcing our first hosted infrastructure product: pyx, a Python-native package registry.

We think of pyx as an optimized backend for uv: it’s a package registry, but it also solves problems that go beyond the scope of a traditional "package registry".
burntsushi.net
You can do `echo '!/.github/' >> .rgignore` in your repo root and that will forcefully whitelist the directory.
burntsushi.net
Here are a few more.

He was a great cat. I'd always tell the vet (on his many, many, many visits over the years) that while he was a squirmer, he didn't have a mean claw in his paws.
burntsushi.net
Plato, Aug 2010 - July 7, 2025. You never did quite learn how to poop like a normal cat, but I loved you anyway. I'll miss you buddy.
burntsushi.net
Feel free to open a question if you want more help.
burntsushi.net
Yes. You can do that. You can literally match arbitrary bytes. There are examples right in the `bytes` module: docs.rs/regex/latest...
regex::bytes - Rust
Search for regex matches in `&[u8]` haystacks.
docs.rs
burntsushi.net
The regex crate can already match non-UTF-8 patterns.

bsky isn't really the best place to ask technical questions like this. Can you open a question on the regex repo instead? github.com/rust-lang/re...

Please include more details. Like an example of what you want to work but doesn't today.
rust-lang regex · Discussions
Explore the GitHub Discussions forum for rust-lang regex. Discuss code, ask questions & collaborate with the developer community.
github.com
Reposted by Andrew Gallant
errs.io
Howdy all. I'm unfortunately not going to be with my employer for much longer due to team relocation. If anyone has any info on roles that would allow me to continue my Rust compiler work (in New York City), they'd be greatly appreciated.
Reposted by Andrew Gallant
crmarsh.com
The uv build backend is now stable, and considered ready for production use.

An alternative to setuptools, hatchling, etc. for pure Python projects, with a focus on good defaults, user-friendly error messages, and performance.

When used with uv, it's 10-35x faster.
burntsushi.net
"Jiff's main datetime type, integrates the timezone without a generic. This lets us get rid of DatePatternContext entirely, replacing it with just a Zoned to represent the current time."

Vindication!!! Haha
Reposted by Andrew Gallant
burntsushi.net
It wouldn't be intended for others to use. It will just be for my own personal use. (Kinda like my dotfiles repo. It's open source, but totally bespoke.)
burntsushi.net
The only thing I'll be switching to is my own SSG. I've learned my lesson.