Communications of the ACM

Where Rust Ends and the Kernel Begins

Choosing Rust for a security-critical microkernel feels obvious on paper. Replace C with Rust and whole classes of memory ...