4 ms·
so google can fix it for 99% cases with ulimit or similar windows thing. problem solved
by sswam 15y ago
so google can fix it for 99% cases with ulimit or similar windows thing. problem solved
- jrockway 15y agoNo, Google can fix by not letting programs downloaded from the Internet write to arbitrary memory locations. Actually, you can fix it, too: chromium is open source.
- jsprinkles 15y agoActually, you can fix it, too: chromium is open source. Good to see this tired claim getting its play in this thread. I wondered how long it would be until it showed up. I think everyone who says "go fix it, it's open-source" should instead be required to come back with a diff within 24 hours.
- jrockway 15y agoPeople are quick to demand bug fixes or better security, but they never seem interested in actually doing the work. I don't use Chrome or Windows, so I have almost negative personal interest in this story. However, some people probably do use Chrome and Windows, and those people's demands should be tempered by reality. If they didn't find this bug, why did they expect Google to? I think everyone who says "go fix it, it's open-source" should instead be required to come back with a diff within 24 hours. I think everyone should be required to give me a pony.
- jsprinkles 15y agoThe person you replied to did not demand anything but instead theorized about a way to fix it. I love how you assert that literally anybody could check out Chromium and fix the sandbox, a sensitive security-essential part of the browser, with very little effort required to appreciate the source and all of the moving parts.
- jrockway 15y agoI love how you assert that literally everybody is too dumb to understand computer programs that they use.
- jsprinkles 15y agoNot dumb, there's just a lot of skills assumed to work on the security components of a modern Web browser. I would never claim that I could turn around and fix this bug as an outside developer. Words in my mouth.
- jrockway 15y agoIn my opinion, this is one step away from sacrificing a virgin to make it rain. We should control our own software destiny and not just hope other people will do it for us.