3 ms·
But it's even scarier: it's written in C. I don't want to defend this tool, but OpenSSH is written in C as well :).
by schipplock 4y ago
But it's even scarier: it's written in C.
I don't want to defend this tool, but OpenSSH is written in C as well :).
- 0___0 4y agoTwo Cs don't make it Rust
- jbotz 4y agoOpenSSH doesn't try to parse untrusted text input that can be fairly easily manipulated by an attacker (i.e. in this case the logs). That's something that should be scary in any language, but C is definitely one of the worst choices possible for this particular task.