One very interesting question is in what ways is microsoft actively developing using Rust ? 一个非常有趣的问题是,微软正在以何种方式积极使用Rust?
yes , so we 've written about this a little bits . um. in the blog and MSRC and i'm going to go all the way back to the begnning of the talk ,and go back to this graph that i showed here. 是的,所以,我们已经对此进行了一些介绍。比如,在博客和 MSRC (微软安全响应中心)中,我将回到讨论的开始,然后再回到我在此次分享中展示的那张图。
this is actually from the msrc, the microsoft security response center, which is the team in charge of security response at microsoft across all of our products, and about two years ago , they took a look at this graph and got very sad , and said we've been putting a lot of money into making our sofeware safer and which has been working , we have we find a lot more vulnerabilities ourselves instend of bad people finding them , before we do which is good , that's good, but what they wouldn't it be great if this number didn't you know if this didn't exist , and we didn't have to worry about finding them before the bad people did because they just didn't exist in the first place. and so looing at this number where you see 70% of the security vulnerabilities are momory safety related and that from 2006 to 2018 , by the way 2019, was the same . we didn't update the slide but it's the same percentage roughly 70 , the number is just not going down , how can we do this . well, on possible way to do that is adopting the language that where you literally can't write memory safety bugs that could be using c# , and so one aspect of that is let's use more C# , let's use more GC languages , they get rid of these a lot of these issues as well , but we 're writing windows and office , xbox games center microcontrollers , we're writing firmware a lot of these things . C# is just not going to probably be the language that you want to use , because of it's gc and so we need an alternative , so we went out in the world and found Rust as the best alternative that we can adopt , i mean microsoft is slow and big company as most big companies , so we're not going to rewrite everything and rest tomorrow. but little by little more teams are adopting it .
i can't say , i really wish i could say, which teams are adopting it right now . but we 're still not quite ready to make that public , there are a few like azure iot , they write iot devices as well as web servsers that help you manage those devices . they are active open source users of rust , so that's no secret there.
there are other teams inside of microsoft that are using starting to use rust , and really seeing great results with it , and if we could just get my colleagues to write blog posts quicker then you know at some point . we're going to be writing a lot more about that . we start discussing which teams are using it , but i can say not only are we seeing great memory safety advances , we're also seeing perfomance gains which was has been really surprising , now if you were to rewrite some of that code in c++, you know modern c++ , maybe you would see the same improvements but the good thing is that it's not all about memory safety at the expense of something else it's basically just positives that are happening with our adoption of rust , and so it's making the pain of adoption which comes from adopting new tools learning new things , taking on new build system , so forth it's making that worth it . and hopefully we can share more about that in the near future .
还有其他一些团队在使用 Rust ,这些都会在后面陆续通过博客公开出来。ryan只是谈到 Rust 在微软内部的应用虽然刚开始有点痛楚,但都是值得的,因为都收到了非常积极的回报。
原文作者:Rust语言中文社区;如有侵权,请联系管理员删除。