5 ms·
The comments show why most people shouldn't be writing security-critical software in C: They think they know the language's pitfalls when in reality they only k
by Kristine1975 11y ago
The comments show why most people shouldn't be writing security-critical software in C: They think they know the language's pitfalls when in reality they only know some of them.
Use memset_s! The compiler isn't allowed to remove calls to it: http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1381.pdf http://www.open-std.org/jtc1/sc22/wg14/www/docs/n1381.pdf
- bcook 11y agoNobody knows all of any language's pitfalls. Even the greatest programmer with the safest language will still code security vulnerabilities.
- sitkack 11y agoHow many fallacies is this and what are they?
- yeukhon 11y agoUsing the wrong library or function call, exposing stacktrace to end-user, doesn't actually handle error code properly so things blow up and leak information. You will know it when you see one.
- leni536 11y agoPerfectionist Fallacy Assuming that the only option on the table is perfect success, then rejecting anything that will not work perfectly. 'What's the point of these anti-drunk driving ad campaigns? People are still going to drink and drive no matter what.' Shared From Logical Defence Application
- sitkack 11y agoexcellent! https://en.wikipedia.org/wiki/Nirvana_fallacy https://en.wikipedia.org/wiki/Nirvana_fallacy