8 ms·

"Rewrite It In Rust" should be the default, pre-set comment to every article about every vulnerability

• tyingq 9y ago
  Maybe every memory access related one. I assume rust still allows you to pass untrusted user input around, for example.
  • zlynx 9y ago
    Oh yeah. Cross site scripting and SQL injections are still perfectly easy to write in Rust. You can accept a web POST and pass it directly, unquoted, to a local shell too.
  • runn1ng 9y ago
    Rust solves every vulnerability ever made
• fetbaffe 9y ago
  https://github.com/ansuz/RIIR https://github.com/ansuz/RIIR
• setq 9y ago
  Well no not really. Vulnerabilities exist outside the realms of the language implementations. There are poorly designed protocols and access controls to contend with as well. I'd argue there are a lot more of those classes of problems out there. The ones enabled by programming languages are merely easier to find as you don't have to understand the precise problem domain of the application for each one found.
• rurban 9y ago
  Using a safe language would help even more. Safer than C != Safe.