Microsoft is Getting Rusty: A Review of Successes and Challenges - Mark Russinovich
Rust Nation UK0 HN recommenders · 2025–2026
46K views · talk · dated · Uploaded 2025-02-26
Mark Russinovich's closing keynote at Rust Nation UK on Microsoft's adoption of Rust, covering security gains, integration challenges, performance results and lessons learned.
Cited for concrete claims about Microsoft's Rust adoption, such as speedups from rewrites and internal C to Rust translation efforts.
1:24:13Micro Men - 720p (2009)
gimpymoo
1:12:27CppCon 2015: Andrei Alexandrescu “std::allocator...”
CppCon
51:18Lexical Scanning in Go - Rob Pike
GoogleFOSSSydney
51:32Behind the Scenes of iOS Security
Black Hat
56:09Project Code Rush - The Beginnings of Netscape / Mozilla Documentary
The Documentary Network
12:01Why Electronic Voting Is Still A Bad Idea
Tom Scott
54:11Ed Catmull, Pixar: Keep Your Crises Small
Stanford Graduate School of Business
51:22USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
USENIX
6 comments from Hacker News
Nevertheless Russinovich actually says something in the lines of "simple rewriting in rust made some our code 5-15% faster (without deliberate optimizations)": [VIDEO]
It is, while at the same time they have changed their point of view on allowing C++ for new projects at Microsoft. I also think Herb Sutter leaving his role at Microsoft might have been related with this. From "Microsoft Azure security evolution: Embrace secure multitenancy, Confidential Compute, and Rust" [LINK] "Decades of vulnerabilities have proven how difficult it is to prevent memory-corrupting bugs when using C/C++. While garbage-collected languages like C# or Java have proven more resilient to these issues, there are scenarios where they cannot be used. For such cases, we’re betting on Rust as the alternative to C/C++. Rust is a modern language designed to compete with the performance C/C++, but with memory safety and thread safety guarantees built into the language. While we are not able to rewrite everything in Rust overnight, we’ve already adopted Rust in some of the most critical components of Azure’s infrastructure. We expect our adoption of Rust to expand substantially over time." From "Windows security and resiliency: Protecting your business" [LINK] "And, in alignment with the Secure Future Initiative, we are adopting safer programming languages, gradually moving functionality from C++ implementation to Rust." Finally, "Microsoft is Getting Rusty: A Review of Successes and Challenges - Mark Russinovich" [VIDEO]
Mark Russinovich recently gave a talk at a UK Rust conference that mentioned Microsoft's internal attempts at large scale C->Rust translation, [VIDEO]
Well, it is kind of in line with company official communication anyway, so this goal is currently a business target, > Decades of vulnerabilities have proven how difficult it is to prevent memory-corrupting bugs when using C/C++. While garbage-collected languages like C# or Java have proven more resilient to these issues, there are scenarios where they cannot be used. For such cases, we’re betting on Rust as the alternative to C/C++. Rust is a modern language designed to compete with the performance C/C++, but with memory safety and thread safety guarantees built into the language. While we are not able to rewrite everything in Rust overnight, we’ve already adopted Rust in some of the most critical components of Azure’s infrastructure. We expect our adoption of Rust to expand substantially over time. -- [LINK] > And, in alignment with the Secure Future Initiative, we are adopting safer programming languages, gradually moving functionality from C++ implementation to Rust. -- [LINK] > We will accelerate and automate threat modeling, deploy CodeQL for code analysis to 100 percent of commercial products, and continue to expand Microsoft’s use of memory safe languages (such as C#, Python, Java, and Rust), building security in at the language level and eliminating whole classes of traditional software vulnerability. -- [LINK] So naturally, there are many people that besides AI KPIs, now have to match their SFI KPIs at Redmond, including Mark Russinovich. "Mark Russinovich, Microsof
If you watch "Microsoft is Getting Rusty: A Review of Successes and Challenges" it appears the whole effort is more on the Azure side, and besides some timid adoption like GDI regions, there is a lukewarm adoption of Rust on Windows side, still pretty much a C and C++ feud. [VIDEO]
You could have checked his conference talk as well, instead of downplaying the interview. "Microsoft is Getting Rusty: A Review of Successes and Challenges - Mark Russinovich" [VIDEO] The only Microsoft divisions that are still all are into C++ is Windows and XBox, and still, C++/WinRT is now in maintenace, the team has moved into windows-rs, WDK now has Rust bindings available.