Fearless Security with Rust
summary
Rewriting Firefox’s styling component as Quantum CSS in Rust (using Servo) yields measurable security gains: of 69 historical style-component bugs, 51 (≈75%) would be impossible under Rust’s ownership/borrow rules, and 95% of critical security bugs were memory-related so disappear with Rust’s safety and bounds-checked vectors. Rust also prevents data races via ownership and Send/Sync types. One high-rated bug is reintroduced by a disabled test, showing rewrites still require robust testing.
AI-written summary · about
chapters (8)
- 0:00Introduction to Rust
- 3:52Understanding memory safety
- 6:47Ownership and borrow checker
- 11:41Concurrency and thread safety
- 18:53Case study: Quantum CSS
- 26:12Technical migration insights
- 31:00Lessons and conclusions
- 32:30Q&A and closing remarks
related talks
32mThe Story of Stylo: Replacing Firefox's CSS engine with Rust
47mWhat's unique about Rust?
28mToday: Making a browser fast, the story of Firefox Quantum.
11mWhat your browser can teach you about software security
13mlightning talk
53mRust: Reach Further!
01h 05mKeynote - Rust: confident, productive systems programming
40mServo - a browser engine for the 21st century