7 ms·

Can anyone explain why a security product needs a local HTTP server, or why it needs endpoints at all, let alone 70? WTF it would have components written in No

by bsg75 11y ago

Can anyone explain why a security product needs a local HTTP server, or why it needs endpoints at all, let alone 70? WTF it would have components written in Node or JavaScript?

detaro 11y ago
in regards to your second question: Why wouldn't you write components in a modern, generally well-sandboxed safe language? (Of course you shouldn't break the sandbox to do so, but using JS in general is not a bad thing)
- bsg75 11y ago
  I guess my (potentially old-school) thinking is that for something that needs to be a solid as a security layer, integrated with the OS, I would only consider memory and type-safe languages.
  - golergka 11y ago
    Type unsafety of js can lead to exceptions, not buffer overflows.
  - detaro 11y ago
    This seems to be a relatively stand-alone app, not connected to the main scanning engine. And I'd say they probably use C or C++ for most other things, which isn't exactly safer.