5 ms·
Another buffer overflow bug. I’d love to see a running tally of the cost of buffer overflows.
by christophilus 7y ago
Another buffer overflow bug. I’d love to see a running tally of the cost of buffer overflows.
- SteveNuts 7y agoThe number of buffer overflow vulnerabilities is probably starting to overflow itself by now.
- vmchale 7y ago> Another buffer overflow bug. time to shill ATS
- heartbeats 7y agoI don't get why ATS isn't more popular. It's a really cool language.
- pjmlp 7y agoIt is very cool, but the type system is quite complex.
- johnr2 7y ago> I’d love to see a running tally of the cost of buffer overflows. It's probably a lot lower than the cost of never implementing the software in the first place.
- ksk 7y agoWell if they would have written Windows in a dynamic language 26 years ago, nobody would be using it, and the cost would be zero.. :P
- pjmlp 7y agoApparenltly quite a bit, https://msrc-blog.microsoft.com/2019/07/16/a-proactive-approach-to-more-secure-code/ https://msrc-blog.microsoft.com/2019/07/16/a-proactive-appro... 70% exploits leading to a few billions in salaries to everyone involved fixing those holes.
- ThrowawayR2 7y ago> "I’d love to see a running tally of the cost of buffer overflows" Buffer overflows don't even show up in OWASP's list of top 10 vulnerabilities, most of which are language agnostic. Aside from that, a tally of the cost of buffer overflows is dwarfed by a tally of the cost of CPU cycles, RAM, and other system resources wasted by the inefficiency of safe languages and their ecosystems.