3 ms·
does this "vulnerability" disclosure and its ongoing fix support the idea that more people are looking at the code and finding faults, before they get exploited
by 2Gkashmiri 4y ago
does this "vulnerability" disclosure and its ongoing fix support the idea that more people are looking at the code and finding faults, before they get exploited in the wild, making the software "better"? as opposed to blindly claiming "unhackable" argument, the software is getting better?
- greggarious 4y agoNothing is unhackable but at least you have the right to patch open source projects.
- simne 4y agoProperly used formal verification, could make unhackable software, but expensive, because of this used rarely. For example, I know people, who made formal verification of their soft for power plants.
- cvwright 4y agoIt’s definitely making the software better. See the MSC3917 document linked by Arathorn. They have put a lot of effort into thinking about the threat models and how to address each them. Is it perfect? Well, no. But it’s a hard problem and they are making meaningful progress.