• 0 Posts
  • 25 Comments
Joined 8 months ago
cake
Cake day: March 30th, 2026

help-circle






  • Given that this issue has been shared online and is currently getting quite a few visitors, here’s some additional context.

    Rust’s type system is intended to prevent memory unsafety. Upholding this promise is something we take very seriously, which is why we’ve been working on things like the next-generation trait solver, the region constraint rework, and more generally Project Zero. It is a large priority of the Types Team to fix all type system unsoundnesses and to work towards there being a solid foundation to minimize the risk of unknown ones.

    This bug is a P-high issue and would have been P-critical regardless of whether people encountered it in the wild. The reason that it is “only P-high” is that it’s 11 years old. A bug like this which has not been found during the last 11 years cannot actually be that easy to hit.

    Looking at the bug itself, it is also very likely that this unsoundness has not caused memory unsafety by accident. While it looks easy to trigger, to exploit this you need an intentionally malicious Drop implementation.







  • I love ghost’s UI and feature set.

    What complex data format are you taking about? Last time I checked, it was plain markdown in a database (even supporting sqlite).

    What I’d recommend though, is coupling it with a static site generator and only using the ghost server for the administration / authoring (guides). That way, serving the blog to visitors is basically free in terms of resources (at last as low as it gets). You could even push these static builds to a CDN (yes yes, selfhost community, I’m just saying it for completeness)

    It might be some hassle to set this up somehow, but you could even have the container stopped unless you actively need it. You could even run the server application on your computer instead of the server, unless you want to access is from a smartphone/tablet.


    If you really want an alternative to Ghost and don’t need user management and an online WYSIWYG editor, you could go straight to an SSG and feed itraw it markdown files.







  • You would still need to know what you’re looking for, whether that’s an ID (repo name / full IRL) or some (unspecified part of a) repo header. It’s surprising why someone of your skill level asks such an odd, unspecified question. Why do you being up a random idea and ask the community any that’s good or bad? Shouldn’t you offer some arguments as to why you think it’s good from the start, unless it obvious?

    The only advantage I can think of would be to more easily find forks or even the same content on different hosts without having to know / verify possibly differing the repo names. But that brings is to the largest downside: security. Git hosters over namespaced repos with configurable access control. Your idea would be susceptible to impersonation, unless you being signing and some novel way to manage trust and verify signatures. Quite some hassle with little benefits 🤔