3 ms·
Useful? Hell, no. Like most technology derived from OSI, it's garbage that has been the source of a huge number of software vulnerabilities.
by fmajid 5y ago
Useful? Hell, no. Like most technology derived from OSI, it's garbage that has been the source of a huge number of software vulnerabilities.
- crest 5y ago~98% of the ASN.1 parsing bugs could have been prevented by generating the parser instead of handwriting yet another recursive descent parser "with a few clever optimisations".
- pjmlp 5y agoBut think about that 1us lost. /s
- fmajid 5y agoReminds me of all the Trotskyists who say Communism has never been discredited because no true Communist regime ever existed, only forms of State Capitalism. Why oh why has no actual ASN.1 parser ever hewed to the self-evident Platonic ideal of machine-generated purity?
- ttybird2 5y agoASN.1 parser generators exist though...
- Matthias247 5y agoThe question around this is whether vulnerabilities show up because the technology is bad or because it’s widely used, triggers interest by researchers, and a certain amount of any implementations will have their set of issues.