4 ms·
There is a big difference between being having vulnerabilities and being valuable attack surface. Again, I am not saying that cat and others do not provide atta
by staticassertion 6y ago
There is a big difference between being having vulnerabilities and being valuable attack surface. Again, I am not saying that cat and others do not provide attack surface, or even valuable attack surface, only that step 1 is not "rewrite cat".
Generally "cat" is not exposed to the internet, and if you're running a service and you said "I'm concerned about local attackers using cat" it's probably a lot easier to just put the service into some sort of environment (container, sandbox, user, whatever) that doesn't give access to cat.
- numbsafari 6y ago> step 1 is not "rewrite cat" Totally agree on this point. In fact, I think it’s brash for the rust armada to think that the borrow checker alone is going to help replace 20+ years of maintenance on these kinds of tools, which often crufty, and gnarled by the sands and whims of generations that preceded us.
- staticassertion 6y agoAs a member of the Rust Armada I can tell you that I don't believe that rewriting cat in rust is something I consider a high priority.