4 ms·
> But because it's written in C, sudo has experienced many vulnerabilities related to memory safety issues. Or because it's not been developed with enough care
by notorandit 4y ago
> But because it's written in C, sudo has experienced many vulnerabilities related to memory safety issues.
Or because it's not been developed with enough care?
I for one think that there is no unsafe language, only careless programmers.
- actionfromafar 4y agoRight! Like with airplanes, there are no unsafe airplanes, only careless pilots.
- stephc_int13 4y agoThis analogy is completely wrong. The programmer would be the aero engineer, not the pilot. The pilot would be the sysadmin, maybe?
- justin_oaks 4y ago> there is no unsafe language Perhaps you didn't intend it this way, but that implies that there is no difference in safety between languages. This is a patently absurd idea. C is clearly less safe than many languages that don't allow unsafe memory practices.
- rnijveld 4y agoI think your expectations are too high. During our initial exploration we actually managed to talk to Todd Miller, the maintainer of sudo. In our (brief) interactions with him he did not sound cavalier like this at all. Instead I think that a lot of the issues with sudo are more about it being a thirty+ year old program and codebase, and sometimes features turn into bugs and security issues all on their own in such time periods. But then again, C just cannot offer the kinds of protections that Rust can, and mistakes will be made eventually by every human, better to have some protection from your mistakes than none at all.