Macros are compiled as a binary and executed as part of the build process in rust. So you're running code during the build process that a dependency may have injected a crypto miner into that sends the coin to the author. Or worse, it installs a Trojan horse on your PC while you're compiling. And all that without even running the compiled application. It's just another entry for supply chain attacks.
@@nextlifeonearthit’s been a while and can’t remember the context but makes sense what you are saying. Now, since I can’t remember the talk much or this point if you don’t mind me asking what came to my mind now is, how is compile time any different? Thanks 🙏
@@kanji_nakamoto comptime in zig is not code execution at compile time but, but expression evaluation. So, it's not compiled into a separate binary, it's basicly simply interpreted. No injecting bitcoin miners into that :).
This would be soooo much better if I could hear the questions (or the speakers learn to repeat the question for the benefit of those watching the video).
All the lizzard is great, but why not Ziggy Stardust?
Extra Freaky Points for the from-below Halloween/Dracula lighting on the Weird Linker Guy's face...
😕
I think it is very fitting for an Assembly/Reverse Engineering/Linker guy.
it's calling duck typing or structural typing 20:00
What’s the story about bitcoin and macros in rust?
Macros are compiled as a binary and executed as part of the build process in rust. So you're running code during the build process that a dependency may have injected a crypto miner into that sends the coin to the author. Or worse, it installs a Trojan horse on your PC while you're compiling.
And all that without even running the compiled application. It's just another entry for supply chain attacks.
@@nextlifeonearthit’s been a while and can’t remember the context but makes sense what you are saying. Now, since I can’t remember the talk much or this point if you don’t mind me asking what came to my mind now is, how is compile time any different? Thanks 🙏
@@kanji_nakamoto comptime in zig is not code execution at compile time but, but expression evaluation. So, it's not compiled into a separate binary, it's basicly simply interpreted. No injecting bitcoin miners into that :).
@@maxcross5454 Cheers! Interesting that Rust is used loads in blockchain projects and other sensitive data projects
This would be soooo much better if I could hear the questions (or the speakers learn to repeat the question for the benefit of those watching the video).
i'm so sorry this has happened to you
Is this the polish dude that is supposed to be a beast programmer?