3 ms·

Are you looking for a safe way to use your computer? Turn it off. Other than that, I'm not surprised the file in question is C. Even ignoring the fact that it

Are you looking for a safe way to use your computer? Turn it off. Other than that, I'm not surprised the file in question is C. Even ignoring the fact that it was you to get the link. And even ignoring that it's about a security problem... Other than that, from a user perspective, software written in C is among the most reliable software I'm using. I'm looking at Linux, vim, xterm and so much of the infrastructure that I don't even know by name. Some people value "security" more than they value the beauty of a nice, a maintainable, or a practical program. That's ok as far as I'm concerned...

pjmlp 7y ago
The guys attending the Linux Kernel Security Summit seem to think otherwise, plenty of stuff there to entertain yourself.
- jstimpfle 7y ago
  Sure there is. But never be blinded, Linux is very performant and rock solid from an end user's viewpoint. Sometimes it helps putting things into perspective.
  - pjmlp 7y ago
    Indeed, https://msrc-blog.microsoft.com/2019/06/14/prevent-the-impact-of-a-linux-worm-by-updating-exim-cve-2019-10149/ https://msrc-blog.microsoft.com/2019/06/14/prevent-the-impac... https://security.googleblog.com/2019/08/adopting-arm-memory-tagging-extension.html https://security.googleblog.com/2019/08/adopting-arm-memory-... https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Work https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Pr... Seatbelts and helmets are also a nuisance, maybe we should get rid of them, that is my perspective.
    - jstimpfle 7y ago
      If you like random links, here is another one... https://news.ycombinator.com/item?id=21741504 https://news.ycombinator.com/item?id=21741504
      - pjmlp 7y ago
        The difference being that my links have to do with damage C keeps bringing into IT and the respective monetary losses. They are not random, only to those that don't care about improving the quality of our eco-system. Software liability couldn't come soon enough.
        jstimpfle 7y ago
        What do you think are the monetary losses by unmaintainable software, resulting in bad and extremely unsafe practices (not related to memory, but...) like in my link? What do you think are the monetary losses from developers going mentally ill because they don't understand and don't like the shit they're doing?

pjmlp 7y ago

The guys attending the Linux Kernel Security Summit seem to think otherwise, plenty of stuff there to entertain yourself.

jstimpfle 7y ago
Sure there is. But never be blinded, Linux is very performant and rock solid from an end user's viewpoint. Sometimes it helps putting things into perspective.
- pjmlp 7y ago
  Indeed, https://msrc-blog.microsoft.com/2019/06/14/prevent-the-impact-of-a-linux-worm-by-updating-exim-cve-2019-10149/ https://msrc-blog.microsoft.com/2019/06/14/prevent-the-impac... https://security.googleblog.com/2019/08/adopting-arm-memory-tagging-extension.html https://security.googleblog.com/2019/08/adopting-arm-memory-... https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Project/Work https://kernsec.org/wiki/index.php/Kernel_Self_Protection_Pr... Seatbelts and helmets are also a nuisance, maybe we should get rid of them, that is my perspective.
  - jstimpfle 7y ago
    If you like random links, here is another one... https://news.ycombinator.com/item?id=21741504 https://news.ycombinator.com/item?id=21741504
    - pjmlp 7y ago
      The difference being that my links have to do with damage C keeps bringing into IT and the respective monetary losses. They are not random, only to those that don't care about improving the quality of our eco-system. Software liability couldn't come soon enough.
      - jstimpfle 7y ago
        What do you think are the monetary losses by unmaintainable software, resulting in bad and extremely unsafe practices (not related to memory, but...) like in my link? What do you think are the monetary losses from developers going mentally ill because they don't understand and don't like the shit they're doing?