22 ms·

We'll just find exploits in the Rust implementation. A moved target is still a target.

• HideousKojima 4y ago
  "A car with seatbelts can still crash, so why bother driving a car that has seatbelts?" The class of error in the article is impossible in Rust unless you explicitly choose to use unsafe.
  • snvzz 4y ago
    >why bother driving a car that has seatbelts The implication openssh has no seatbelts is very wrong. OpenSSH's internal architecture was engineered for robustness, and has privilege separation and sandboxing.
    • HideousKojima 4y ago
      And yet TFA is about yet another vulnerability caused by something that Rust is immune to.
      • deleted 4y ago
        [deleted]
      • 0xbadcafebee 4y ago
        Yet the total number of vulnerabilities is smaller than other Rust-implemented programs, because security fundamentally comes down to the engineer, not how many seatbelts there are.