Wuffs Alternatives

wuffs reviews and mentions

• Hermeticity
  1 project | news.ycombinator.com | 8 Sep 2024
• Firefox will consider a Rust implementation of JPEG-XL
  2 projects | news.ycombinator.com | 4 Sep 2024

  Reminder that https://github.com/google/wuffs exists too.

• CrowdStrike debacle provides road map of American vulnerabilities to adversaries
  2 projects | news.ycombinator.com | 20 Jul 2024

  Again, there are safe ways of doing this. For example, Wuffs exists: https://github.com/google/wuffs

  At the very least, big money security software companies should be parsing untrusted content with some kind of rigorouly safe approach, not just squirting it through a big pile of C/C++.

  And don't get me started on the whole concept of undefined behavior in those languages. To quote I. I. Rabi, "Who ordered that?"

• I'm Funding Ladybird Because I Can't Fund Firefox
  7 projects | news.ycombinator.com | 7 Jul 2024

  > Rust was literally invented to solve the security and concurrency issues inherent in using C/C++ for a browser engine.

  Are most browser vulnerabilities not still found in engines like V8? Rust can help with something like last year's buffer overflow in libwebp (although that's overkill when a project like https://github.com/google/wuffs exists), but I'm unclear on how it gets you a better JIT.

• Psion 5mx Emulator
  2 projects | news.ycombinator.com | 22 May 2024

  I was confused about how one can write an emulator in the wuffs language. :-D

  https://github.com/google/wuffs/blob/main/doc/note/hermetici...

• FLaNK-AIM: 20 May 2024 Weekly
  28 projects | dev.to | 20 May 2024
• Wuffs: Wrangling Untrusted File Formats Safely
  6 projects | news.ycombinator.com | 16 May 2024

  It's something around 2x faster than LibPNG in my tests (depending on the PNG file), see timings here: https://github.com/google/wuffs/issues/13#issuecomment-17325...

  So generally Wuffs is great and you should use it to decode your PNGs. There are some downsides: not all of the obscure bit depths and formats that PNG supports are loaded as-is, some are converted to more standard formats.

  Also the Wuffs documentation is a bit hard to understand. It's a litle bit of a mission getting PNG decoding working. You can see my code for that here though:

• Still no love for JPEG XL: Browser maker love-in snubs next-gen image format
  7 projects | news.ycombinator.com | 4 Feb 2024

  Maybe this is what you are looking for:

  https://github.com/google/wuffs

  "Wuffs is a memory-safe programming language (and a standard library written in that language) for Wrangling Untrusted File Formats Safely."

• 4-year campaign backdoored iPhones using possibly the most advanced exploit
  1 project | news.ycombinator.com | 27 Dec 2023

  It could author its format parsers in https://github.com/google/wuffs, and make them BSD-like open source to maximize adoption.

  An even bigger change: It could allow users to choose their iMessage client freely. Why not open up the protocol? I’m sure a security focused client would be popular and in the grand scheme of things easy to author.

  Perhaps they could open up more of the OS and apps. Perhaps their claims about the security of users and the App Store is kind of BS.

• Just about every Windows/Linux device vulnerable to new LogoFAIL firmware attack
  4 projects | news.ycombinator.com | 6 Dec 2023

  This is one of the reasons I'm a big fan of wuffs[0] - it specifically targets dealing with formats like pictures, safely, and the result drops in to a C codebase to make the compat/migration story easy.

  [0] https://github.com/google/wuffs

• A note from our sponsor - SaaSHub
  www.saashub.com | 7 Oct 2024

  SaaSHub helps you find the best software and product alternatives Learn more →