neprihlásený Piatok, 19. apríla 2024, dnes má meniny Jela
Microsoft začal prepisovať časti Windows v Ruste, chce zvýšiť bezpečnosť

Značky: Windowsbezpečnosť

DSL.sk, 29.4.2023


Spoločnosť Microsoft začala prepisovať prvé časti Windows z kódu v programovacom jazyku C++ na kód v jazyku Rust, ktorý by mal priniesť vyššiu bezpečnosť.

V prezentácii na konferencii BlueHat IL na konci marca o tom informoval David Weston zo spoločnosti.

Operačný systém Windows pozostáva z obrovského množstva zdrojového kódu, v ktorom bolo historicky identifikované obrovské množstvo bezpečnostných zraniteľností, naďalej sú každý mesiac opravované desiatky ďalších zraniteľností a nepochybne sa v ňom stále nachádza množstvo ďalších zraniteľností.

Rust sa podobá na C++, bol ale vytvorený s cieľom riešiť problémy súčasného programovania a jeho dôležitými vlastnosťami sú tak bezpečnosť v oblasti manažmentu pamäte a pri používaní vlákien, efektívne multivláknové programovanie a zároveň pri týchto vlastnostiach aj vysoký výkon. Rust tak okrem iného umožňuje jednoduchšie vytvárať bezpečné programy.

Rust začalo alebo začína používať viacero významných softvérových projektov, okrem iného jadro operačného systému Linux a dominantný webový prehliadač Chrome. V oboch prípadoch ide o počiatočnú podporu, Rust vytvorený pôvodne Mozillou sa už intenzívne používa ale napríklad v prehliadači Firefox.


Prezentácia Davida Westona na BlueHat IL (video: Microsoft)



Využívanie Rustu na programovanie Windows je zatiaľ v počiatočnej fáze, Weston zatiaľ iniciatívu označuje za experimentálnu a prepísanie podstatnej časti Windows do Rustu v blízkej budúcnosti samozrejme nie je možné očakávať.

Microsoft preportoval do Rustu už pomerne veľkú časť DWriteCore, knižnice implementujúcej DirectWrite rozhranie pre výstup textu. Táto knižnica nepatrí medzi základné komponenty Windows, ide o multiplatformovú verziu rozhrania DirectWrite vo Windows App SDK.

V Ruste je v súčasnosti napísaná väčšina kódu tejto knižnice, 152-tisíc riadkov oproti 96-tisíc riadkom v C++. Kód v Ruste je dokonca rýchlejší ako pôvodný kód, v prípade jednej funkčnosti napríklad o 5% až 15%.

Iniciatíva začala už v roku 2020 a kód v Ruste je použitý v štandardne dostupnej verzii knižnice.

Microsoft prepísal do Rustu ale tiež malú časť Win32k GDI, Graphics Device Interface, základného komponentu Windows zabezpečujúceho rozhranie pre grafický výstup. V Ruste je napísaných približne 36-tisíc riadkov zdrojových kódov, kód úspešne zvláda všetky GDI testy a prepísaním do Rustu neprišlo k zníženiu výkonu. Táto verzia zatiaľ nie je nasadená, podľa Westona sa ale má začať v najbližších týždňoch až mesiacoch používať v testovacích verziách Windows vo Windows Insider programe.

V rámci tohto portovania je už aj jedno systémové volanie v jadre Windows implementované kompletne v Ruste.


      Zdieľaj na Twitteri



Najnovšie články:

Špehovacie satelity SpaceX už snímkujú Zem, s vyšším rozlíšením ako doterajšie
Linux si na PC drží podiel 4%
AI výkon tohtoročnej generácie Intel CPU bude vyšší ako 100 teraops/s
Apple bude mať nový seriál o alternatívnom sovietskom vesmírnom programe, predĺžila For All Mankind
Pôsobivého dvojnohého robota Atlas nahradí úplne nová elektrická verzia
O2 spustilo predaj na diaľku. Namiesto eID sa fotí tvár a občiansky, nedá sa objednať eSIM ani predplatenka
Klon populárnej databázy Redis od Linux Foundation k dispozícii v prvej verzii
Helikoptéra na Marse bude zbierať dáta aj po strate komunikácie so Zemou
Vývoj pôsobivého dvojnohého robota prekvapivo končí
Spustená výrobca QLC flash pamäte s viac ako 200 vrstvami


Diskusia:
                               
 

k zvyseniu bezpecnosti windows preukazatelne nic mudre nenapisem, pretoze mi za to M$ neplatia. kupte si antivir
Odpovedať Známka: -6.5 Hodnotiť:
 

dopice.sk/rNv
Odpovedať Známka: -3.3 Hodnotiť:
 

Je úplne logické, že pokiaľ dostatočné množstvo menežérov nadobudne presvedčenie, že ak prechodom z rodného jazyka do angličtiny odrazu sťaby zázrakom prestanú trepať pičoviny, má vízia zvýšenia bezpečnosti zmenou jazyka priekazne podporu na najvyšších miestach.
Odpovedať Známka: 1.8 Hodnotiť:
 

evidentne uz nepomoha pripajat sa IT-ckarom do pocitacov a mobilov a prepinat im nastavenia, hrat sa na zlych a dobrych hackerov, aby si chudaci v EU nakupili kyber-security za 300 miliard EUR od americanov (a o 10 rokov od cinanov ... podla toho s kym si prave kamarat)
Odpovedať Známka: 2.0 Hodnotiť:
 

ale ved to je medzinarodny financny podvod ! mas nejake dokazy ?
Odpovedať Známka: 0.0 Hodnotiť:
 

francuzi su dokaz. haha, uradnikom zakazali vsetko. nam rybkam daj pokoj
Odpovedať Známka: -2.0 Hodnotiť:
 

Takze z 96k->152k riadkov kodu, to znamena, ze najali dalsich indov, ktory robia ich oblubene copy&paste miesto pisania cyklov :) No neviem, ci zrovna to pomoze k stabilite a bezpecnosti takto preportovanych kniznic.
Odpovedať Známka: -2.3 Hodnotiť:
 

aaaale aka bezpecnost ... preco ti neprednastavia vsetko rovno do instalacky ...
taka mala chybicka v appke je celkom dobry kseft pre kazdeho:
- programatorovi zaplati ina strana aby tam nieco ukryl
- ina strana to nejaku dobu pouziva
- spehuju a ak sa da tak nieco zaujimave aj potiahnu
- programatorov kamos to nahlasi a dostane melón
- este to stihnu po celom svete zneuzit na nejaky utok aby sa spravilo bububu , aspon maju robotu bezpecaci
- firmy platia platia
- admini nespia, nakupujú múku

cisty biznis, komu sa nechce, robi appky na android za 1,50 $

Odpovedať Známka: 3.3 Hodnotiť:
 

dalej sa kolobeh spomaluje, ludia nadavaju, ze sa rozhadzuju statne, novinari pisu, zopar firiem brutalne bohatne, neni co vymyslat tak vlada donesie nove kyber zbrane.
vyberu skupinu ludi, pouziju to na nich, zvolia vhodnych kandidatov na blaznov a provokuju ich kym daco nevyvedu
ci lepsi blazon tym vacsie bububu o nebezpecenstve, dalsie peniaze idu obrane a firmam na nakup a predaj vojenskej techniky
vlada buzeruje a buzeruje a robi z ludi blaznov
chudak blazon ide na policiu - da dokazy, okaslu ho
ide na vojensku policiu - okaslu ho, vsetko je vraj vymyslene
popritom uz 5 rokov zaznamenava dokazy s radioamatermi , no trestne oznamenia a vysetrovanie sa stale nejakym sposobom utaji, zahodi, zabudne, ... lebo inak by niekto zhora nemal biznis



Odpovedať Známka: -1.4 Hodnotiť:
 

takze to take dovody si vymyslaju aby potom zakazali telegram alebo podobnu sluzbu ako v brazilii ?
Odpovedať Hodnotiť:
 

hehe, zakazali telegram
Odpovedať Známka: -10.0 Hodnotiť:
 

To už je tak, keď vedia, že pri viacúrovňovej cache je za určitých podmienok copy&paste miesto pisania cyklov priekazne rádovo efektívnejšie.
Odpovedať Známka: -2.5 Hodnotiť:
 

"96k->152k"

Vacsina kniznice DWriteCore je prepisana v Rust. A teda 152k riadkov hrdze. Este im ostava 96k, ktore su stale v C++. Nie ze im takto narastol povodny kod. Ci?
Odpovedať Známka: 3.3 Hodnotiť:
 

"152-tisíc riadkov oproti 96-tisíc riadkom v C++" citaj s porozumenim... ta veta logicky znamena, ze povodne bolo 96k a prepisali to do 152k. Ak to tak nie je, tak autor by sa mal naucit lepsie stylistiku myslim.

Odpovedať Hodnotiť:
 

Neviem kedy ludia konecne prestanu pouzivat Windows… kedy pridu ludia k rozumu.
Odpovedať Známka: 0.5 Hodnotiť:
 

pod Win su napriklad rychlejsie drivers grafik, java aplikacie idu rychlejsie oproti Linux verziam
Odpovedať Známka: -4.3 Hodnotiť:
 

Každý programátor naprieč zemeguľou by mal dostať časť Windows kódu, ktorú by po večeroch prepísal do Rustu. Za to by dostal 1.999 dolárov a onedlho by bol celý Windows prepísaný.
Odpovedať Známka: 2.5 Hodnotiť:
 

myslis tych programatorov, ktorych vytiahli z uradu prace a ucili za EU fondy pisat skriptovy kód ?
Odpovedať Známka: 5.4 Hodnotiť:
 

Na to netreba programátorov. Prepisovanie textu odjakživa robili sekretárky. Výsledná kvalita kódu by sa tým nijako nezhoršila a bolo by to lacnejšie.
Odpovedať Hodnotiť:
 

Čo viem, tak použivaná Mozilla Firefox nie je napísaná v Ruste, ale v C/C++. Čo viem, tak bola prepísaná do Rustu, ale nakoniec sa rozhodlo, že neprejde sa na Rust verziu.
Odpovedať Známka: 6.7 Hodnotiť:
 

A co ted? Dame si Deli nebo co si chtel povedet? Mozilla bezi na C a co jako?
Odpovedať Známka: -7.5 Hodnotiť:
 

To zrychlenie kodu v ruste oproti c mi navodzuje spomienky ze sex s gumou je vacsia rozkos ako naostro. Alebo to je len markwting?
Odpovedať Známka: 4.0 Hodnotiť:
 

Nerešpektovať zrovna v takom prípade doktrínu vyššieho dobra by bolo priekazne popretím princípu rovných príležitostí.
Odpovedať Známka: -2.0 Hodnotiť:
 

Rust vie viac veci robiť v compile time ako c kompilator. Ale ten nárast riadkov kódu znie ako pekne zvýšenie attack surface tak hekeri sa majú na čo tešiť...
Odpovedať Hodnotiť:
 

Dnes som vrtal do rust pipe, zajtra ju mozno este nejak fixnem a potom aplikujem anti-rust email. :)

Odpovedať Známka: 1.4 Hodnotiť:
 

Krasny dovod na zahodenie podpory pre apliacie na nemoderne windows 11, tesíme sa na nove cisielka, a ako sa zacnu robit aj nove aplikacie od piky aby na novych cisielkach isli. Robit apku na win je ako robit apku pre 10 OS naraz :-)
Odpovedať Známka: 5.0 Hodnotiť:
 

vsetci si myslia, ze programator co dostane povedzme 1,5k v cistom / mes. alebo pripad c.2 , ktory predava appky za 2,50 v app store, popritom riesi ucto, odpocty, odvody, nahana biznis, venci psa, nosi decko do skolky, beha do servisu, na stk, nakupovat jogurty, kosi travu, ... ti bude riesit este aj bezpecnost supa-dupa aplikacie na (ani ma nenapada co tam programuju) zbieranie tesco bodov , akurat je rad, ze prisposobil appku novej verzii androidu a slape to na najnovsich samsungoch pricom uzivatelia motoroly a xiaomi mu pisu same negativne recenzie ze im to nejde lebo, ...
Odpovedať Známka: 6.7 Hodnotiť:
 

oprava: to by musel byt iny nadsenec, mozno tak 1 zo 1000
Odpovedať Známka: -3.3 Hodnotiť:
 

som kupil nove audi za 90 tišic a mali v P upgradnut alarm proti kradezi co by ich vyslo tak 10 evri dokopy
Odpovedať Známka: 0.0 Hodnotiť:
 

Vo výpočte povinností chýba platba za komunálny odpad!
Odpovedať Známka: 10.0 Hodnotiť:
 

Kto tieto debilné jazyky ako Rust či Python vymýšla?
Odpovedať Známka: -2.0 Hodnotiť:
 

Asi niekto kto si váži svoje duševné zdravie takže nič pre teba
Odpovedať Známka: 2.5 Hodnotiť:
 

To sa ťahá už od zmätenia jazykov pri stavbe babylonskej veže.
Odpovedať Známka: 8.5 Hodnotiť:
 

Nože nám ozrejmi, aké jazyky obľubujú praví muži™ ako ty.
Odpovedať Známka: 3.3 Hodnotiť:
 

Jazýčky.
Odpovedať Známka: 8.0 Hodnotiť:
 

ono tie jazyky su stale rovnake, len sa odoberaju zatvorky, znaky, a ked pridu na to ze to tam chyba, tak ich v inom jazyku zase pridavaju naspat. a samozrejme premenuju funkcie , aby si sa v tom tazsie orientoval
Odpovedať Známka: 10.0 Hodnotiť:
 

Presne toto urobil Apple ked prestal podporovat Objective-C a nahradil ho nelogickym, chaotickym a neprehladnym jazykom Swift.
Odpovedať Známka: 7.1 Hodnotiť:
 

A prečo potom taký jazyk nájde niekde nejaké uplatnenie. Aj Python je dosť divný, najmä ak v ňom máte niekoho učiť programovať. Zlatý BASIC, to aj najväčší blb pochopil, prípadne Pascal.
Odpovedať Známka: 10.0 Hodnotiť:
 

Jasne, kazdy poriadny jazyk potrebuje hlavne go to do stredu procedury.
Odpovedať Hodnotiť:
 

Ty si asi dobry BASIC asi este nevidel.
Odpovedať Hodnotiť:
 

Thank you a lot for giving everyone an extremely splendid possiblity to read articles and blog posts from here. It can be very nice and also full of a lot of fun for me and my office friends to search your web site on the least 3 times per week to read the fresh stuff you will have. And of course, we are certainly satisfied with your incredible thoughts you serve. Some two ideas in this article are in truth the most suitable we have all had.
[url=http://www.goldengooseoutletus.com]golden goose outlet[/url]
Odpovedať Hodnotiť:
 

I am glad for writing to make you know what a wonderful experience my wife's child encountered browsing your site. She picked up several things, not to mention how it is like to have an awesome helping spirit to have most people really easily know just exactly some tricky subject areas. You really exceeded our own expectations. Thanks for delivering such good, trusted, revealing and also cool thoughts on your topic to Evelyn.
[url=http://www.yeezysneakers.us.org]yeezy shoes[/url]
Odpovedať Hodnotiť:
 

I want to express some appreciation to this writer for rescuing me from this particular condition. After looking through the search engines and meeting solutions that were not productive, I assumed my life was gone. Living without the solutions to the problems you've solved all through your posting is a crucial case, and those which could have adversely damaged my career if I hadn't encountered your blog. Your expertise and kindness in taking care of every part was precious. I don't know what I would've done if I had not discovered such a solution like this. I can also now relish my future. Thanks for your time so much for your specialized and results-oriented help. I will not be reluctant to propose the blog to any individual who desires direction on this subject matter.
[url=http://www.hermes-outlet.us.org]hermes bag outlet[/url]
Odpovedať Hodnotiť:
 

I intended to draft you a little bit of remark just to say thanks once again just for the striking suggestions you have contributed here. It's extremely generous of people like you to provide publicly all that a few people could have supplied for an ebook to help with making some profit for themselves, primarily seeing that you could possibly have tried it if you ever considered necessary. The strategies also acted like a fantastic way to be aware that other people online have the identical dream like my own to grasp significantly more when it comes to this problem. I think there are many more pleasurable instances ahead for folks who check out your site.
[url=http://www.goldengooseofficial.com]ggdb shoes[/url]
Odpovedať Hodnotiť:
 

I definitely wanted to develop a word so as to appreciate you for these lovely points you are placing on this website. My time intensive internet investigation has at the end of the day been honored with good quality points to go over with my co-workers. I 'd tell you that many of us site visitors actually are truly lucky to live in a fine site with many special individuals with valuable techniques. I feel very blessed to have used your webpages and look forward to really more fun moments reading here. Thank you once again for all the details.
[url=http://www.goldengoosesale.us.org]golden goose[/url]
Odpovedať Hodnotiť:
 

I wish to express some thanks to the writer just for bailing me out of this particular trouble. After searching throughout the internet and meeting tricks which are not beneficial, I assumed my entire life was done. Existing without the approaches to the problems you have resolved as a result of the posting is a crucial case, and ones which could have in a negative way damaged my career if I had not discovered the website. Your talents and kindness in playing with the whole lot was vital. I am not sure what I would've done if I had not come upon such a step like this. I am able to now relish my future. Thank you very much for this expert and sensible guide. I will not hesitate to endorse your web sites to any individual who would like guide about this topic.
[url=http://www.goldengoosesale.us.org]golden goose[/url]
Odpovedať Hodnotiť:
 

I wish to express my appreciation to you just for bailing me out of this particular circumstance. Right after checking through the internet and coming across recommendations which were not beneficial, I believed my entire life was gone. Existing without the approaches to the issues you've sorted out through your main website is a serious case, as well as ones which could have in a negative way affected my career if I hadn't noticed your site. Your actual mastery and kindness in maneuvering all things was excellent. I am not sure what I would have done if I hadn't discovered such a point like this. I'm able to at this point look forward to my future. Thanks for your time so much for this professional and result oriented help. I won't think twice to recommend your web sites to anyone who should receive guidance about this situation.
[url=http://www.kyrie8shoes.com]kyrie 8[/url]
Odpovedať Hodnotiť:
 

I would like to point out my gratitude for your kindness in support of men and women that absolutely need assistance with this important area of interest. Your real dedication to getting the message up and down had been surprisingly good and has empowered women just like me to realize their dreams. Your own invaluable publication means this much to me and even more to my peers. Regards; from each one of us.
[url=http://www.paulgeorgeshoes.us.com]pg 4[/url]
Odpovedať Hodnotiť:
 

I wanted to write down a small note in order to thank you for the stunning ideas you are posting on this site. My time intensive internet research has at the end of the day been paid with good content to talk about with my friends and classmates. I would claim that we site visitors actually are undoubtedly endowed to dwell in a very good website with so many special professionals with helpful concepts. I feel rather grateful to have discovered your web site and look forward to tons of more pleasurable minutes reading here. Thank you once again for a lot of things.
[url=http://www.kd14shoes.com]kd 14[/url]
Odpovedať Hodnotiť:
 

I needed to put you that little bit of note to say thanks as before for those pretty knowledge you have shown at this time. This has been really pretty generous of people like you to present extensively all a few individuals might have marketed for an ebook to generate some cash on their own, mostly now that you could possibly have done it in case you decided. These guidelines also worked as a good way to realize that some people have the same interest much like my very own to see lots more with respect to this condition. I know there are some more pleasant instances up front for many who read carefully your site.
[url=http://www.off-whiteclothing.us.com]off white t shirt[/url]
Odpovedať Hodnotiť:
 

I precisely wanted to say thanks once again. I am not sure what I would have taken care of without the type of solutions contributed by you relating to such question. It had been an absolute troublesome case for me, nevertheless looking at the professional tactic you solved the issue made me to weep for delight. I will be grateful for this assistance and then believe you really know what an amazing job that you're carrying out training people today thru your web site. More than likely you've never met any of us.
[url=http://www.yeezy-shoes.us.org]adidas yeezy[/url]
Odpovedať Hodnotiť:
 

Needed to draft you that very small remark in order to thank you again considering the spectacular things you have contributed on this website. It's so incredibly generous of you to allow freely all that many individuals would have marketed for an e book in order to make some money on their own, especially since you could possibly have tried it if you considered necessary. These secrets also served as the great way to know that most people have similar desire just like my very own to know a lot more regarding this condition. I know there are millions of more pleasant instances ahead for individuals that find out your blog.
[url=http://www.hermesbagsonline.com]hermes birkin[/url]
Odpovedať Hodnotiť:
 

My wife and i ended up being now joyful when Louis managed to conclude his studies because of the ideas he made when using the weblog. It's not at all simplistic just to happen to be freely giving information and facts that many some people might have been making money from. And we discover we have the website owner to thank for that. The type of illustrations you've made, the simple website menu, the relationships you can aid to instill - it's mostly spectacular, and it's really facilitating our son in addition to the family reckon that this subject matter is pleasurable, and that is wonderfully vital. Many thanks for all the pieces!
[url=http://www.jordanshoesstore.us.com]jordan shoes[/url]
Odpovedať Hodnotiť:
 

I simply wanted to develop a small comment so as to thank you for those precious hints you are writing at this website. My extended internet investigation has now been compensated with good quality facts to exchange with my company. I 'd declare that most of us site visitors are truly lucky to live in a perfect site with so many wonderful individuals with great concepts. I feel very much privileged to have used the web site and look forward to plenty of more excellent moments reading here. Thanks once again for a lot of things.
[url=http://www.chromeheartstoreonline.com]chrome hearts[/url]
Odpovedať Hodnotiť:
 

Needed to send you this bit of note in order to give thanks as before for the wonderful suggestions you have shown on this website. It is quite pretty open-handed with people like you to grant easily precisely what most people would've sold as an electronic book to get some profit for their own end, certainly given that you might have done it if you decided. These tactics also worked to be a great way to recognize that most people have a similar desire similar to my very own to understand a little more with reference to this issue. Certainly there are many more fun times ahead for individuals that take a look at your blog post.
[url=http://www.off-whiteclothing.us.org]off white[/url]
Odpovedať Hodnotiť:
 

I intended to compose you that little remark just to say thanks yet again over the nice suggestions you've documented in this case. It's so extremely generous of people like you to grant freely what a few individuals would have made available for an e book to help with making some bucks for themselves, particularly considering the fact that you might have tried it if you ever considered necessary. Those guidelines also worked as the fantastic way to fully grasp other people have the identical eagerness much like my own to realize great deal more with reference to this matter. I believe there are thousands of more fun moments in the future for many who examine your website.
[url=http://www.sbdunk.us]nike dunks[/url]
Odpovedať Hodnotiť:
 

I precisely needed to say thanks again. I am not sure the things I could possibly have sorted out in the absence of the type of concepts shared by you over this industry. It seemed to be the horrifying difficulty for me personally, but being able to see this expert manner you dealt with the issue took me to cry for joy. I am just thankful for the service as well as expect you recognize what an amazing job that you're undertaking teaching others with the aid of a web site. Probably you haven't encountered all of us.
[url=http://www.fearofgodessential.com]fear of god essentials[/url]
Odpovedať Hodnotiť:
 

I simply wished to thank you very much all over again. I do not know the things that I might have tried in the absence of the actual tips and hints shared by you directly on my topic. It was a very fearsome circumstance for me, but discovering a specialized technique you resolved the issue made me to jump with happiness. Now i am grateful for this work and thus hope you recognize what a great job you happen to be carrying out training people today through the use of your blog. I am sure you haven't come across all of us.
[url=https://www.off-whiteonline.com]off white[/url]
Odpovedať Hodnotiť:
 

I have to show some thanks to the writer just for bailing me out of this type of dilemma. Right after looking throughout the the net and finding suggestions which are not helpful, I was thinking my life was well over. Living without the answers to the issues you've sorted out all through your blog post is a critical case, as well as those which might have badly damaged my entire career if I hadn't encountered your website. Your good skills and kindness in touching all the things was useful. I'm not sure what I would have done if I hadn't discovered such a stuff like this. It's possible to at this moment look ahead to my future. Thanks a lot so much for this specialized and result oriented help. I won't hesitate to suggest your blog post to anyone who requires care about this subject.
[url=http://www.bape.us.org]bape outlet[/url]
Odpovedať Hodnotiť:

Pridať komentár