7 ms·
They also address that in their response. It stems from the fact that they use memory-managed programming environments, so they don't have that level of control
by mediocrejoker 8y ago
They also address that in their response. It stems from the fact that they use memory-managed programming environments, so they don't have that level of control over memory.
- kevin_thibedeau 8y agoA competent developer would use native code for these critical areas.
- UncleMeat 8y agoWhy? Native is often riddled with bugs and the threat model of reading the data out of memory is basically irrelevant.
- throwawaymath 8y agoThat's a pretty extraordinary claim, considering that securing native code is highly nontrivial and increases the attack surface of an application significantly.
- ripdog 8y agoIs that still true with Rust?
- regnerba 8y agoThe 1password devs specifically say that the Windows team has been playing around with Rust. So they at least seem to be looking into it and treating it as a real possibility. I don't imagine anything will come from it for a while however.
- steveklabnik 8y agoSupposedly it is already in production, or at least that’s how I read https://twitter.com/sergeygalich/status/1091060842047492096 https://twitter.com/sergeygalich/status/1091060842047492096
- deleted 8y ago[deleted]