tweedegolf

tweedegolf, 28 days ago to security

David hacked our clocks, and we laughed. And then we cried. Hacking NTP is far too easy.

Want to know how easy? David wrote you a how-to.

https://tweedegolf.nl/en/blog/121/hacking-time

#internetinfrastructure #security

tweedegolf, 28 days ago to random

@folkertdev presents nea at Software You Can Love this Thursday in Milan. Nea is a web server that never allocates; after initialization, memory use is constant, regardless of traffic.

More on this: https://sycl.it/speakers/folkert-de-vries/

Tune into the live stream, Thursday 16 May, 3pm CEST: https://sycl.it/

tweedegolf, 1 month ago to rust

Comprehensive piece by @SIDN underscores: "Rust makes software for critical infrastructure more secure".

Highlights @tweedegolf's work on time synchronization software, and the DNS work of our friends at @nlnetlabs

https://www.sidn.nl/en/news-and-blogs/rust-makes-dns-and-time-software-more-secure

#rustlang

tweedegolf, 1 month ago to rust

Henk Oordt will talk about 'Oxidizing Education' at RustNL 2024!

"For Rust to take off, we have a cycle to break: companies need Rust developers to start doing Rust, and devs need Rust jobs to start learning Rust. To break the cycle, we can oxidize education: enable universities to start teaching Rust. This talk is about how we can do just that."

Tuesday 7 May, in Delft, the Netherlands.

Schedule, info, and tickets here: https://2024.rustnl.org/speakers/#henk

@rustnl
#rustnl2024 #rust #rustlang

tweedegolf, 1 month ago to rust

Save the planet, code in Rust! We did some experiments and it turns out Rust is energy-efficient.

Read the new blog by Maximilian and Marlon to find out what we tested, how we tested it, and how our findings compare to scientific research.

https://tweedegolf.nl/en/blog/120/green-rust

#rust #rustlang

tweedegolf, 2 months ago to random

When less is better: "One of the greatest challenges we faced when developing software that can be widely adopted: Rust crate dependencies." - @joshaas, Head of @ISRG

Read Ruben's blog to find out how we dealt with this in sudo-rs.

The outcome: only 3 dependencies.

https://tweedegolf.nl/en/blog/119/sudo-rs-depencencies-when-less-is-better

Thanks to @ProssimoISRG and @ferrous for the continued partnership in this endeavor to make our digital infrastructure safer.

@sovtechfund
@openssf

tweedegolf, 3 months ago to random

The Network Time Protocol is a crucial building block of the internet. To harden our digital infrastructure, we are working on an open-source, memory-safe implementation of NTP.

Watch Folkert explain our ntpd-rs project; What is it? Why are we building it in Rust? Is it coming to Debian and Fedora?

Video: https://tweedegolf.nl/en/blog/108/ntpd-rs-folkert-explains-the-project-video

Find the project on GitHub: https://github.com/pendulum-project/ntpd-rs

tweedegolf, 3 months ago to random

Rust 101 is now teach-rs!

Read about the evolution and name change in creator Henk's blog: https://tweedegolf.nl/en/blog/117/teach-rs-rust-101-evolved

tweedegolf, 3 months ago to random

Tweede golf uses Rust in production to ensure the safety and security of critical infrastructure software.

We've selected three takeaways from Folkert's explanation in this podcast:

https://tweedegolf.nl/en/blog/116/rust-in-production-at-tweede-golf-podcast

Thanks again to @mre for this opportunity!

tweedegolf, 4 months ago to random

Can hardware vendors benefit from offering Rust support? Embedded Lead @diondokter says yes. Read why in his blog.

https://tweedegolf.nl/en/blog/113/rust-for-hardware-vendors

tweedegolf, 4 months ago to random

"Ntpd-rs has metrics for the system/clock state, the sources it receives time from, and the server functionality."

Read Ruben's blog to find out why these metrics are useful, what other things you can measure, or to play around with these metrics yourself!

https://tweedegolf.nl/en/blog/111/introducing-ntpdrs-metrics

tweedegolf, 4 months ago to random

We have implemented the draft spec of NTPv5 in ntpd-rs (our NTP in Rust project). But why do that, if NTPv5 hasn't been stabilized yet? Well, reasons!

Read about it in Tamme's blog: https://tweedegolf.nl/en/blog/112/implementing-ntpv5-in-ntpdrs

tweedegolf, 5 months ago to random

Cargo-minify is a command-line tool to delete unused code automatically. Created for use in our Rust implementation of sudo, it is also available as a stand-alone open-source tool for everyone.

Read about it in Rick's blog: https://tweedegolf.nl/en/blog/110/an-unusual-tool-for-unused-code

Or find Cargo-minify on GitHub: https://github.com/tweedegolf/cargo-minify

tweedegolf, 6 months ago to random

If you're interested in 'oxidizing' your teaching or putting Rust in the computer science courses you teach, check out the Rust 101 repo: https://github.com/tweedegolf/101-rs

Feel free to contact us if you´d like to chat with a teacher who has experience teaching the course!

(3/3)

tweedegolf, 6 months ago to random

Rust-Edu is "a group of academics and community members wanting to make progress and provide focus and support for Rust Education". Read more here: https://rust-edu.org/

In particular, we are grateful to Bart Massey for his insights and continued support for Rust 101.

(2/3)

tweedegolf, 7 months ago to random

One of the hot topics in software security is memory safety. This article covers two questions: What is it? And why do we think it is worth investing in?

Read it here: https://tweedegolf.nl/en/blog/105/why-we-sponsor-memory-safety-event-tectonics

Hugo and Folkert are attending Tectonics by @ProssimoISRG tomorrow!

tweedegolf, 7 months ago to random

Building critical components in Rust, i.e. sudo and NTP, made us think twice about our software supply chain. How do you deal with dependencies when packaging your software for operating systems?

Read Marc's blog here: https://tweedegolf.nl/en/blog/104/dealing-with-dependencies-in-rust

Ntpd-rs on GitHub: https://github.com/pendulum-project/ntpd-rs
Sudo-rs on GitHub: https://github.com/memorysafety/sudo-rs

tweedegolf, 7 months ago to random

We're proud to announce that 5 October 2023 marked 𝘁𝗵𝗲 𝗳𝗶𝗿𝘀𝘁 𝘀𝘁𝗮𝗯𝗹𝗲 𝗿𝗲𝗹𝗲𝗮𝘀𝗲 𝗼𝗳 𝗻𝘁𝗽𝗱-𝗿𝘀! Ntpd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols, with a focus on security and stability.

Read the details of this 1.0.0 release here: https://tweedegolf.nl/en/blog/102/first-stable-release-of-ntpdrs

tweedegolf, 8 months ago to rust

EuroRust is almost there! Say hi to @erikjee, Marlon, Folkert and Tamme if you are also attending @eurorust

Read more about this #rust #conference here:
https://eurorust.eu/

tweedegolf, 9 months ago to rust

Marlon regularly raises the bar for full-stack development, so obviously he made us a pixel-rendered planner with a Rust backend 'for fun'. With built-in confetti 🎉 and a snake game 🐍︎.

Read more here: https://tweedegolf.nl/en/blog/100/pixel-rendered-planner

#rust #rustlang

tweedegolf, 9 months ago to random

We're extremely proud that today marks the release of sudo-rs! This open-source Rust implementation of sudo offers a modern, memory-safe alternative to the original and iconic Linux feature.

Read more here: https://www.memorysafety.org/blog/sudo-first-stable-release/

The work isn't done yet; Our joint team will continue to improve and maintain sudo-rs. Check it out, or even try it out, here: https://github.com/memorysafety/sudo-rs

Thanks to @ProssimoISRG and @ferroussystems for the opportunity to collaborate.

tweedegolf, 9 months ago to random

To fine-tune our Rust-driven NTP service (called ntpd-rs), we are looking for early adopters to tell us what works, what doesn't, and what's missing.

If you run NTP, and would like to help, we'd love to be in direct contact with you. Don't hesitate to contact us via pendulum@tweedegolf.com or GitHub Discussions: https://github.com/pendulum-project/ntpd-rs

tweedegolf, 9 months ago to rust

Rust 101 is an open-source, modular uni course that can be used by educators to introduce their students to Rust. Use it whole, or any part of it you need!

Creator Henk taught the full course in Bratislava. Read about it here: https://tweedegolf.nl/en/blog/99/rust-101-first-run-at-stu-bratislava

Find the project on GitHub: https://github.com/tweedegolf/101-rs

#rust #opensource

tweedegolf, 10 months ago to rust

Rust 101 is a #university course that introduces #rustlang to computer science students, and is available for anyone who wants to teach Rust. Don't hesitate to contact us if you'd like some help setting up the course for your students!

https://github.com/tweedegolf/101-rs

#computerscience #education #opensource

tweedegolf, 10 months ago to rust

"In 2023, I’m even more thrilled about Rust’s future in embedded." Henk, our embedded developer and creator of the uni course Rust 101, explains why Rust is a great fit for embedded software - now and in the future.

https://tweedegolf.nl/en/blog/96/why-rust-is-a-great-fit-for-embedded-software-2023-update

#rust #embedded