Rust Programming News | Prism Hobbies

Rust's Ownership Model Makes Safe Concurrent Programming Practical and Reliable

Rust's borrow checker turns concurrency from a source of dread into a compile-time guarantee, preventing entire classes of race conditions before your code ever runs.

Nina Kowalski•7 min read•07:55 PM

Read Full Article →

More News

Releases

Oxlint Alpha Adds ESLint Plugin Support, Delivers 4.8x Speed Advantage

Oxlint's new ESLint plugin alpha uses a "raw transfer" Rust-JS bridge to hit 21 seconds on the Node.js repo, against ESLint's 1 minute 43 seconds.

Jamie Taylor2m read

Releases

Zerobrew Promises 20x Faster macOS Package Management Using Rust

Zerobrew, announced by Ratatui maintainer Orhun Parmaksız, claims 20x faster warm installs than Homebrew using Rust, Tokio, and APFS clonefiles.

Sam Ortega3m read

Releases

Rust 1.94.0 stable released, stabilizes language features and Cargo tooling

Rust 1.94.0 stabilizes <[T]>::array_windows to yield fixed-size `&[T; N]`, adds Cargo include in .cargo/config.toml, and upgrades Cargo to parse TOML 1.1.

Nina Kowalski3m read

News

RustSec, crates.io remove typosquatting tracings, tracing_checks stealing API keys, installing backdoors

Two typosquat crates, tracings and tracing_checks, stole Polymarket API keys and dropped a Linux backdoor and a hidden Windows executable; crates.io and RustSec removed them under advisories RUSTSEC-2026-0027 and RUSTSEC-2026-0028.

Sam Ortega3m read

Releases

Google launches Rust-based Workspace CLI gws for Gmail, Drive, Sheets

Google’s Rust-based Workspace CLI hit 15.5k stars and #1 on Hacker News, offers auto-discovered Drive/Gmail/Sheets commands and AI agent hooks; install with npm i -g @googleworkspace/cli.

Sam Ortega3m read

Updates

Quinn QUIC Crate Vulnerability Triggers Denial-of-Service Risk in Rust Projects

A denial-of-service flaw in the quinn-proto crate, catalogued as RUSTSEC-2026-0037, puts Rust projects using the Quinn QUIC stack at risk.

Jamie Taylor1m read

News

Five Malicious Rust Crates Disguised as Time Utilities Stole Developer Secrets

Five Rust crates posing as time utilities silently harvested .env secrets, posting them to a lookalike domain that mimicked a trusted time API service.

Nina Kowalski3m read

Analysis

Rust to WebAssembly: A Practical Guide to Toolchains and Workflows

Compiling Rust to WebAssembly unlocks CPU-heavy code for the web; here's how to navigate the toolchain from target selection to wasm-pack and trunk.

Nina Kowalski6m read

Community

Rust In Paris 2026 Conference Set for March 27 at L'Apollo Thétre

Rust In Paris lands at L'Apollo Théâtre on March 27 for a single day of real-world Rust: performance, safety, tooling, and production stories, with tickets at €120.

Sam Ortega2m read

News

Embedded World 2026 Puts Rust in the Spotlight for Automotive Safety Systems

Rust is taking center stage at Embedded World 2026 in Nürnberg, where a session on automotive safety and a live toolchain qualification demo are making the case for production-ready deployment.

Sam Ortega3m read

Releases

Firecrawl unveils Rust-powered PDF Parser v2, 3x faster with Auto, Fast, OCR

Firecrawl's Rust-based PDF Parser v2 claims up to 3x faster extraction and defaults to Auto mode with OCR fallback, plus a maxPages parameter and unified billing (15 tokens = 1 credit).

Jamie Taylor3m read

Community

ROS 2 Rust Working Group Sets March Meeting to Coordinate Client Development

The ROS 2 Rust Working Group scheduled a public coordination meeting for March 9, 2026 UTC to align contributors on Rust client development for ROS 2.

Nina Kowalski2m read

Updates

sudo-rs enables pwfeedback asterisks by default, Ubuntu 26.04 sparks debate

sudo-rs now enables pwfeedback by default, so Ubuntu 26.04 developer builds show asterisks for sudo passwords; admins can restore silence with Defaults !pwfeedback.

Sam Ortega3m read

Analysis

Yoshua Wuyts outlines effects, substructural and refinement types for Rust

Yoshua Wuyts published a long essay on March 5, 2026, arguing Rust should invest in richer effect types, substructural rules like `!Forget`/`!Move`, and refinement types to extend safety and ergonomics.

Nina Kowalski3m read

Updates

Multiple high-severity CVEs in RustDesk allow privilege abuse, MitM across platforms

A March 5 CVE batch and a February 27 SentinelOne analysis detail multiple high-severity RustDesk client flaws, including a CSRF that sets permanent passwords and a Windows symlink bug that reads files as SYSTEM.

Nina Kowalski3m read

Analysis

Cache-line contention makes RwLock five times slower than Mutex

Redstone's author found that on commercial hardware an RwLock made a read-heavy Tensor Cache about 5× slower than a Mutex due to cache-line ping-pong and atomic contention.

Sam Ortega3m read

Updates

Salvo list_html XSS vulnerabilities CVE-2026-22256 and CVE-2026-22257 fixed in 0.88.1

Salvo patched reflected XSS in its directory listing (list_html); CVE-2026-22256 and an Isomer-listed CVE-2026-22257 are fixed in salvo 0.88.1 - update recommended.

Jamie Taylor2m read

News

OpenAI Codex Aggressively Recruits Rust, Full-Stack, Low-Level, Distributed Systems Engineers

OpenAI's Codex team is actively hiring Rust, full-stack, low-level, and distributed-systems engineers across multiple locations including remote, signaling a systems-focused staffing push on March 7, 2026.

Nina Kowalski2m read

Releases

Arti 2.1.0 released, advances relay and RPC development in Rust

Arti 2.1.0 ships with behind-the-scenes relay and RPC work, a derive-deftly configuration overhaul, and an MSRV bump to Rust 1.89.0.

Sam Ortega2m read

Releases

SeaORM Integrates Apache Arrow and ClickHouse for Zero-SQL OLAP Pipelines

SeaORM now pipes data into ClickHouse with zero hand-written SQL, using Apache Arrow as the bridge between Rust entity models and columnar storage.

Nina Kowalski2m read

Updates

Ladybird Browser Adopts Rust to Replace C++ with AI Help

Ladybird's 2026-02-23 post says the project will adopt Rust as C++'s successor, and Andreas Kling used Claude Code and Codex to produce about 25,000 lines of Rust for LibJS.

Jamie Taylor3m read

Updates

Misspecified asm! operand types in opt-in ARMv8 backend caused unsoundness

keccak disclosed a low-severity unsoundness today in its opt-in ARMv8 assembly backend after an asm! block misspecified operand types for operands used as pointers and then mutated.

Jamie Taylor2m read

Releases

Open Analytics Releases Leptodon 1.0.0, a UI Toolkit for Leptos WebAssembly

Open Analytics dropped Leptodon 1.0.0, a stable UI toolkit built specifically for the Leptos WebAssembly frontend framework.

Jamie Taylor1m read

Updates

Multiple Rust crates removed from crates.io after malicious code flags

In the last week (late Feb 2026) multiple crates including polymarkets-rs-clob-client, clob-sdk, tracings, and tracing were removed from crates.io after being flagged for malicious content or for transitively pulling in malicious code.

Nina Kowalski4m read

Releases

Rust Analyzer v0.3.2819 Brings Bug Fixes and Internal Improvements

Rust-analyzer v0.3.2819 landed March 9 with user-facing bug fixes, internal improvements, and fresh first-time contributor patches.

Nina Kowalski1m read

Releases

Rust Coreutils 0.7.0 Arrives With Performance Gains and Compatibility Fixes

Rust Coreutils 0.7.0 landed this week with performance gains and compatibility fixes, marking a meaningful milestone for the uutils project.

Sam Ortega2m read

Releases

Tokio 1.50.0 released, adds APIs, I/O improvements and runtime fixes

Tokio v1.50.0, published March 3, 2026, bundles small API additions, I/O improvements, runtime robustness fixes, and documentation clarifications for async networking developers.

Sam Ortega2m read

Releases

webrtc-rs publishes v0.20.0-alpha.1 ground-up rewrite on Sans-I/O core, runtime-agnostic

webrtc-rs released webrtc v0.20.0-alpha.1 on March 1, 2026, a ground-up async rewrite built as a thin layer on Sans-I/O rtc that supports Tokio (default) and smol via feature flags.

Nina Kowalski2m read

Releases

Ply Ecosystem Releases New CLI Updates for Cross-Platform Rust Apps

The Ply ecosystem pushed multiple plyx CLI releases on March 7, starting from version 0.1.1, advancing its lightweight cross-platform Rust app tooling.

Nina Kowalski2m read