Macros are compiled as a binary and executed as part of the build process in rust. So you're running code during the build process that a dependency may have injected a crypto miner into that sends the coin to the author. Or worse, it installs a Trojan horse on your PC while you're compiling. And all that without even running the compiled application. It's just another entry for supply chain attacks.
@@nextlifeonearthit’s been a while and can’t remember the context but makes sense what you are saying. Now, since I can’t remember the talk much or this point if you don’t mind me asking what came to my mind now is, how is compile time any different? Thanks 🙏
@@kanji_nakamoto comptime in zig is not code execution at compile time but, but expression evaluation. So, it's not compiled into a separate binary, it's basicly simply interpreted. No injecting bitcoin miners into that :).
This would be soooo much better if I could hear the questions (or the speakers learn to repeat the question for the benefit of those watching the video).
Extra Freaky Points for the from-below Halloween/Dracula lighting on the Weird Linker Guy's face...
😕
I think it is very fitting for an Assembly/Reverse Engineering/Linker guy.
i'm so sorry this has happened to you
All the lizzard is great, but why not Ziggy Stardust?
Is this the polish dude that is supposed to be a beast programmer?
What’s the story about bitcoin and macros in rust?
Macros are compiled as a binary and executed as part of the build process in rust. So you're running code during the build process that a dependency may have injected a crypto miner into that sends the coin to the author. Or worse, it installs a Trojan horse on your PC while you're compiling.
And all that without even running the compiled application. It's just another entry for supply chain attacks.
@@nextlifeonearthit’s been a while and can’t remember the context but makes sense what you are saying. Now, since I can’t remember the talk much or this point if you don’t mind me asking what came to my mind now is, how is compile time any different? Thanks 🙏
@@kanji_nakamoto comptime in zig is not code execution at compile time but, but expression evaluation. So, it's not compiled into a separate binary, it's basicly simply interpreted. No injecting bitcoin miners into that :).
@@maxcross5454 Cheers! Interesting that Rust is used loads in blockchain projects and other sensitive data projects
it's calling duck typing or structural typing 20:00
This would be soooo much better if I could hear the questions (or the speakers learn to repeat the question for the benefit of those watching the video).