Blog series on underhandedness and our resistance to it.

[erickt]

In order to keep up momentum with underhanded, we'd like to start a blog series on underhandedness, and how we're trying to resist against it. We brainstormed out some possible subjects and guest authors. Anyone know of any other projects?

• Implement example from Non-underhanded example submission #9, announce irc channel #rust-underhanded
• quickcheck - @BurntSushi?
• afl - @frewsxcv?
• Using valgrind and rust
• clippy - @Manishearth?
• Undefined behavior and compiler fuzzing - @regehr?
• rustc's resistance to undefined behavior
• using unsafe safely - @gankro?

Would any of you be interested in writing something up, or know of another person or subject that'd be interesting for our players? If you've already written up things on this, would you be interested in us re-posting or linking to your work?

[Manishearth]

I can do something for clippy. Keep reminding me.

[frewsxcv]

I wouldn't mind doing a blog post for afl.rs, but I'm not too happy with the workflow for it. It requires Docker so that we can reliably link with compatible versions of LLVM. So I'm not sure it'd be a good candidate to show off from this list.

[Manishearth]

If you can put up a dockerfile so that it's super easy to set up that doesn't sound like it would be a problem.

[frewsxcv]

There is a Dockerfile pushed to Docker Hub which is used in the afl.rs setup and tutorial.

[erickt]

@frewsxcv: Great! I think your docs actually seem pretty sufficient for our purposes. I think it's okay if the workflow is a tad grungy because you can also throw in a "call-to-action" to get the readers to help think about better ways of doing this. For example, could you make a cargo-afl script like the cargo-clippy script? That'd let you cut down on a lot of the overhead, and you'd just have to get people to install docker.