3 ms·
I increasingly feel we need to apply more "sledgehammers" to security. If I was running servers with security I cared about, I would use a malloc which cleared
by CJefferson 8y ago
I increasingly feel we need to apply more "sledgehammers" to security. If I was running servers with security I cared about, I would use a malloc which cleared all allocations, and the new llvm/clang flags which clear all stack variables to fix unitanialised problems. Maybe even try turning on the more advanced clang sanitizers, if I could afford the cpu time.
If we, as programmers, want to be respected, we need to make every reasonable effort to improve security.
- cyphar 8y agoI believe OpenBSD does most of these things. The primary problem is that security is a tradeoff -- for instance OpenBSD completely disabled hyperthreading when it was discovered to be fundamentally insecure. That was a 50% performance hit right off the bat -- not everyone can afford to make such a tradeoff.