3 ms·
> their intended system design was obviously flawed No, the design was so complex that its flaws were well hidden, and therefore not intended. Quoting C. A. R
by tromp 5y ago
> their intended system design was obviously flawed
No, the design was so complex that its flaws were well hidden, and therefore not intended.
Quoting C. A. R. Hoare:
“There are two ways of constructing a software design: One way is to make it so simple that there are obviously no deficiencies, and the other way is to make it so complicated that there are no obvious deficiencies. The first method is far more difficult.”
- ehvatum 5y ago> No, the design was so complex that its flaws were well hidden, and therefore not intended. That’s no less true for a Chrome sandbox escape. In fact, this Ethereum loan platform’s behavior is encoded in program source codes, just like Chrome. One expects that some exploitable issues in the Chromium code arise not from syntactical but conceptual errors. The code could match a mistaken programmer intent, and this often happens.