Dirkjan Ochtman
djc.ochtman.nl
Dirkjan Ochtman
@djc.ochtman.nl
Fan of Rust, open source maintainer. Please consider sponsoring my OSS work on GitHub.
Reposted by Dirkjan Ochtman
TIL: serde's borrowing can be treacherous

yossarian.net/til/post/ser...
TIL: serde's borrowing can be treacherous
yossarian.net
December 25, 2025 at 10:01 PM
Last year, I tried to port a 100-line Python scraping library to Rust, and couldn't get it working. Today I had Claude take a whack at it... and it worked on the first attempt.
December 24, 2025 at 11:20 AM
Reposted by Dirkjan Ochtman
Just published a new #rustlang reqwest release candidate: v0.13.0-rc.1.

This has some breaking changes, the biggest was switching to rustls by default.

I'd appreciate if you gave it a spin 🙏

github.com/seanmonstar/...
Release v0.13.0-rc.1 · seanmonstar/reqwest
👀 Discussion here if you give it try, thanks! Main breaking changes rustls is now default instead of native-tls rustls provider defaults to aws-lc instead of ring (rustls-no-provider exists if you...
github.com
December 23, 2025 at 10:03 PM
Reposted by Dirkjan Ochtman
We have built a self-hosted runner system that does virtual machine orchestration under the hood, cutting our CI times by 50-90%, all for barely 400 EUR/month!

Delan Azabani explains it all in her talk: www.youtube.com/watch?v=-W1m...

Transcript and slides: www.azabani.com/2025/12/18/s...
Web engine CI on a Shoestring Budget
YouTube video by Igalia
www.youtube.com
December 23, 2025 at 8:17 AM
If you wanted to replace bincode with something else today, what crate would you pick?
December 16, 2025 at 9:56 PM
We (the rustup team) have published a release candidate for rustup 1.29.0, with a much improved toolchain download experience. Please try it out to give us feedback in advance of the release.

internals.rust-lang.org/t/seeking-be...
Seeking beta testers for rustup v1.29.0
Hi everyone! I'd like to announce on behalf of the rustup team that rustup 1.29.0 beta is now available for testing and we are currently looking for testers. The headline of this release is that rus...
internals.rust-lang.org
December 14, 2025 at 10:33 AM
Reposted by Dirkjan Ochtman
My gift to the rustdoc team: fasterthanli.me/articles/my-...

Merry syntaxmas, everyone!
My gift to the rustdoc team
About two weeks ago I entered a discussion with the docs.rs team about, basically, why we have to look at this: When we could be looking at this: And of course, as always, there are reasons why thi...
fasterthanli.me
December 14, 2025 at 1:01 AM
Interesting Rust semver hazard: if you're not `warn(unnameable_types)`, you could be leaking private dependencies via fields in types that are unnameable but can be reached, and this won't be detected by tools based on rustdoc-types (like cargo-check-external-types).
December 12, 2025 at 9:15 AM
Reposted by Dirkjan Ochtman
Super exciting: Rust is no longer experimental in the Linux Kernel, it is here to stay!!!

lwn.net/Articles/104...
The end of the kernel Rust experiment
The topic of the Rust experiment was just discussed at the annual Maintainers Summit. The cons [...]
lwn.net
December 10, 2025 at 5:13 AM
Earlier this year, LWN.net featured an excellent article named "Linux's missing CRL infrastructure", and today
Canonical announced it will be working with me and @jbp.io over the coming weeks to start bridging the PKI infrastructure gap.

discourse.ubuntu.com/t/addressing...
Addressing Linux's Missing PKI Infrastructure
Earlier this year, LWN featured an excellent article titled “Linux’s missing CRL infrastructure”. The article highlighted a number of key issues surrounding traditional Public Key Infrastructure (PKI)...
discourse.ubuntu.com
December 8, 2025 at 5:08 PM
Reposted by Dirkjan Ochtman
damn why didn’t i think of making a js runtime that segfaults
December 2, 2025 at 6:57 PM
Reposted by Dirkjan Ochtman
With the @openuk.bsky.social Awards coming up, we’re excited that Rustls — a memory-safe TLS library — is shortlisted in two categories, and Creator Joe Birr-Pixton is also recognized individually.

The Rust Foundation is proud to support Rustls through the Rust Innovation Lab 🧡
Rustls Shortlisted for Two 2025 OpenUK Awards - The Rust Foundation
The Rust Foundation is delighted to congratulate Rustls for being shortlisted in the Open Source Software and Security categories of the OpenUK Awards 2025 — and Joe Birr-Pixton, Rustls Creator, for…
rustfoundation.org
December 2, 2025 at 7:45 PM
@bitwarden.bsky.social broke passkey support in their browser extension and after 8 days they have neither released a fix nor rolled back their extension to the previous version (which at least some extension directories allow).

github.com/bitwarden/cl...
`chrome is not defined` on Firefox in v2025.11.1 extension breaks Passkey function · Issue #17598 · bitwarden/clients
Steps To Reproduce Go to https://www.passkeys.io/ Open DevTools See Uncaught ReferenceError: chrome is not defined Notice that passkey request cannot be handled by Bitwarden and fallback to Windows...
github.com
November 30, 2025 at 12:12 PM
Input lag on GitHub is increasingly bad. :(
November 27, 2025 at 8:01 PM
If your cargo-deny runs are failing this morning, it’s because we merged an advisory with v4 CVSS rating which only recently became supported in rustsec 0.31 (released 15 days ago). Fix submitted in github.com/EmbarkStudio..., workaround in github.com/rustsec/advi....
Update rustsec v0.31 by jayvdb · Pull Request #805 · EmbarkStudios/cargo-deny
Fixes #804 See https://github.com/rustsec/rustsec/releases/tag/rustsec%2Fv0.31.0
github.com
November 22, 2025 at 11:26 AM
So is type alias impl trait basically blocked on the next trait solver?
November 19, 2025 at 12:55 PM
Love it when Vander Stoep comes out with another banger showing metrics for all the things Rustaceans feel in their bones.
November 14, 2025 at 6:31 AM
Is there ever a legit use case for `const FOO: AtomicU8: ..`? If not, can we please promote `clippy::declare_interior_mutable_const` to a compiler lint?
November 11, 2025 at 1:25 PM
Hot take: don’t make callback APIs in Rust. Minimize Fn arguments; guard types are almost always a better solution (except in very simple/generic map() combinators).
November 6, 2025 at 5:14 PM
Second time I heard this pitch this week. The problem is that (well-maintained) dependencies take care of the issues you haven’t thought of yet. There is some cost to having dependencies and making sure the dependency graph doesn’t grow too much takes work, but codegen doesn’t seem a great option.
November 1, 2025 at 6:25 PM
deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses

arxiv.org/abs/2506.15648
deepSURF: Detecting Memory Safety Vulnerabilities in Rust Through Fuzzing LLM-Augmented Harnesses
Although Rust ensures memory safety by default, it also permits the use of unsafe code, which can introduce memory safety vulnerabilities if misused. Unfortunately, existing tools for detecting memory...
arxiv.org
October 31, 2025 at 10:48 PM
Reposted by Dirkjan Ochtman
Please don't write your commit messages or PR descriptions with AI. If you didn't bother writing it I'm not sure I can be bothered reading it.
October 28, 2025 at 1:20 PM
New Rust RFC: adding a crates.io Security tab

github.com/rust-lang/rf...
crates.io: Rust Package Registry
crates.io
October 27, 2025 at 12:18 PM