6 ms·

> This bug would not happen by not using C FTFY

• wepple 5y ago
  Really not a value-add contribution. A lot of software that has existed forever is written in C by unpaid volunteers; are you planning to rewrite it in rust? Further, snark could be made about how this will have near zero security impact yet there’s a far more serious bug (log4j) which has already had significant cost and follows endless patterns of Java developers embedding logic flow in untrusted data. “Just don’t use Java lol” etc Edit: Hahaha, hey David. Had no idea that was you.
  • baby 5y ago
    Who is this :D mason?
• cnmlsx 5y ago
  Come on. As 0xbadcafebee hinted at, you can practically write OCaml in C if you wish to. And good luck dealing with timing attacks, secure data deletion and overflow behavior in other languages.
  • api 5y ago
    All those are pretty easy in Rust.
    • jupp0r 5y ago
      Rust software is bug free by design /s.
      • ketralnis 5y ago
        Nobody is making that argument. It's about what the language/libraries guide you to naturally.
      • minitech 5y ago
        Rust software is free of entire classes of bugs by default, by design, and the language lends itself to patterns that eliminate even more.
        • hulitu 5y ago
          The only issue is that Rust programmers do not do anything usefull. The only place i heard Rust is used is in Firefox. So, if Rust is so good, will be nice to see some real world uses.
          • baby 5y ago
            LOOOL
        • jupp0r 5y ago
          Sure, but none of the classes of bugs you mention contain Log4Shell.