3 ms·
Heartbleed was duplicated in Rust. Very often breaches can be found to be in cloud permission configurations. There are many business-rules-level vulnerabilit
by wglb 6y ago
Heartbleed was duplicated in Rust.
Very often breaches can be found to be in cloud permission configurations.
There are many business-rules-level vulnerabilities.
The following post will give some insight: https://www.nccgroup.com/us/about-us/newsroom-and-events/blog/2009/november/ninja-threat-modeling/ https://www.nccgroup.com/us/about-us/newsroom-and-events/blo...
- lisper 6y ago> Heartbleed was duplicated in Rust. There's a big difference between intentionally duplicating a known flaw in a safe language an unintentionally producing a new exploitable flaw in a safe language.
- wglb 6y agoThe point is not whether or not it is intentional, but to illustrate that many vulnerabilities exist that don't depend on memory unsafety.