undefined | Better HN

Better HN

Top Best Ask Show New Jobs

0 pointspjmlp13y ago0 comments

- Make it easy to write buffer exploits

0 pointspjmlp13y ago0 comments

- Make it easy to write buffer exploits

0 comments

6 comments · 2 top-level

lihaoyi13y ago· 2 in thread

- Off-by-one errors should be security vulnerabilities, rather than just crashes

DennisP13y ago

Can't say I agree. You tend to find crashes pretty quickly. Security vulnerabilities tend to be found later in much more embarrassing ways.

jff13y ago

I'm pretty sure he was joking, in the same spirit as the comment one level up.

wslh13y ago· 2 in thread

And the software that protects from them.

pjmlpOP13y ago

A language that allows buffer exploits cannot by definition protect you from them, because the tooling is unsound.

wslh13y ago

Yes it can, the proof is the security software that is written to do that in C/C++. Nobody is saying that the protection will protect you over all possible buffer exploits.

1 more reply

j / k navigate · click thread line to collapse