The Rust Security Response WG was notified that Cargo did not respect the umask when extracting crate archives on UNIX-like systems. If the user downloaded a crate containing files writeable by any local user, another local user could exploit this to change the source code compiled and executed by the current user.

The Foundation is planning to hire a technical editor / project manager for somewhere between 6 and 9 months.

Following the odyssey mentioned in https://lemmyrs.org/post/87787 and the discussion with users.rust-lang.org mods, I have concluded that the simplest and most sustainable way to solve this is a GitHub org where companies can post jobs and regular Rust developers on GitHub participate in moderation. GitHub provides different models of content structure and isn't restrained by what's possible in a Lemmy or Discourse thread.

To that end, I welcome anyone interested in moderating job posts to comment here for an invite to the org.