3 ms·

> Think. Be careful. Write good test suites. Run them a lot. It really isn't so hard. This mindset lead to countless security problems and other bugs in all ki

> Think. Be careful. Write good test suites. Run them a lot. It really isn't so hard. This mindset lead to countless security problems and other bugs in all kinds of software. Even now we still find exploits in sudo and openSSL. And the problem wasn't developers leaning back and saying "today I'm going to program carelessly and do a bad job because why the hell not".

zabzonk 5y ago
Do we have good test suites for those programs? If so, could you direct me to the code for them? And of course these are run-once programs (not that excuses them)- I am talking about 24/7 stuff.
- deleted 5y ago
  [deleted]
- kaba0 5y ago
  A run-once program can just as easily compromise the system with a single memory bug and some clever ROP programming.