4 ms·
This, ladies and gentlemen, is why C gives me the willies. And why this happens: http://www.cvedetails.com/vulnerability-list/year-2016/month-1/January.html ht
by grabcocque 11y ago
This, ladies and gentlemen, is why C gives me the willies. And why this happens:
http://www.cvedetails.com/vulnerability-list/year-2016/month-1/January.html http://www.cvedetails.com/vulnerability-list/year-2016/month...
- pjmlp 11y agoNot that it would eliminate security exploits caused by logical bugs, but most those exploits were already taken care of with Burroughs Algol variant (1961), Modula-2 (1978), Cedar (1981), Ada (1983), .... but oh well.
- benbenolson 11y agoThose are due to programmer error. The fact that C doesn't lie to you means that it takes a bit more experience to program properly; as with all things, with great power comes great responsibility. You don't blame the gun for killing people, you blame the person for shooting it.
- legulere 11y agoNot even the very best C programmers will write memory safe code. When you write C you will write exploitable code, no matter who you are. Don't blame the programmer for stepping onto a mine in the minefield, blame the minefield.
- whyever 11y ago> Those are due to programmer error. How does that help? Almost all security vulnerabilities are due to programmer error. > You don't blame the gun for killing people, you blame the person for shooting it. It's more like choosing between a gun that makes it really easy to shoot yourself in the foot by accident and one that is safer.