3 ms·
No, decent programmers know that no one is perfect and so they design systems so that even when the most experienced programmers ever make a mistake that mistak
by tokyodude 8y ago
No, decent programmers know that no one is perfect and so they design systems so that even when the most experienced programmers ever make a mistake that mistake is less likely to cause an exploit. This is the entire premise of Chrome's architecture. Check the CVEs and you'll see there's the same number of bugs as every other browser but around 10x less code exploits because it's designed under the premise that bugs happen.
- nineteen999 8y agoA decent programmer or team of programmers can select a good architecture, and also not pretend that it is okay to treat a 4096-byte buffer as if it were 4097 bytes long.
- pas 8y agoChrome did the as fast as they could sandboxing because they has no better alternative, because we lack better libraries for parsing. Decent programmers also try to err on the side of safety, use the right tool for the job, and so on. And writing parsers should not be done directly, instead the parser code should be generated by a battle tested library/framework. (Or via using parser combinators, etc.)