More Open Source Security episodes
Published 2 Mar 2026
Duration: 31:06
A modern rewrite of Unix command-line tools using Rust aims for memory safety, performance, and maintainability while achieving high compatibility.
Josh talks to Sylvestre Ledru about the Rust coreutils project. We've been using GNU coreutils for decades now, and the goal of Rust coreutils is to r...
The podcast explores Rust Core Utils, a modern rewrite of fundamental Unix command-line tools like ls, cp, and mv, originally developed in C. The project, revived by Sylvest Ledoux and now included by default in Ubuntu, aims to enhance system utilities using Rusts memory safety, performance, and modern language features. The goal is to create safer, more maintainable tools while preserving compatibility with existing Unix workflows and scripts. Early challenges included addressing script compatibility issues due to undocumented behaviors in GNU Core Utils, but the team achieved 95-96% compatibility through rigorous testing, including running GNUs upstream test suite and contributing improvements to the ecosystem.
The project emphasizes collaboration with GNU to resolve edge cases, such as handling calendar systems and deprecated arguments, while also highlighting Rusts appeal to new developers and its potential to modernize critical infrastructure. Current efforts focus on refining rare corner cases, improving cross-platform support, and ensuring long-term compatibility. Looking ahead, the team aims for broader adoption in Linux distributions and continued community-driven contributions to sustain the projects growth and reliability.
21 Sept 2026 The curl summer of Bliss with Daniel and Stefan
"Explored open-source security challenges, highlighting curl's 'Summer of Bliss' initiative to reduce maintainer burnout, the impact of AI-generated vulnerability reports, and the need for human expertise in security management, while advocating for sustainable practices in open-source development."
14 Sept 2026 CRA vulnerability reporting with Daniel Thompson
"Cyber Resilience Act imposes strict vulnerability reporting rules on manufacturers, raising concerns over inefficiency, ethical disclosures, and industry compliance challenges."
31 Aug 2026 Sovereign Tech Agency with Erik Moller
"Explores the Sovereign Tech Agency's efforts to sustain open-source software as critical infrastructure, emphasizing public investment, digital sovereignty, and strategic funding for projects like *curl* and AI security."
17 Aug 2026 Maintaining EOL Open Source with Commonhaus and HeroDevs
"Explores open-source maintenance challenges, solutions for solo maintainers, and the role of organizations like Common House and HeroDevs in sustaining projects through financial, legal, and administrative support, emphasizing governance, dependency management, and enterprise-community collaboration to ensure long-term sustainability."
10 Aug 2026 Cleanup, Speedup, Levelup open source at e18e
"E18e enhances JavaScript by reducing dependencies, optimizing tools, and improving security, as seen in its work with Storybook, while promoting cleaner code and community collaboration."