3 ms·
I feel like “written in a memory-safe language” is a fair selling point, especially when we are talking about a tool designed to accept completely untrusted dat
by owenmarshall 3y ago
I feel like “written in a memory-safe language” is a fair selling point, especially when we are talking about a tool designed to accept completely untrusted data from the network and keep you safe from attackers with significant resources.
- chasil 3y agoAll of the "boring crypto" has been written in C. https://cr.yp.to/talks/2015.10.05/slides-djb-20151005-a4.pdf https://cr.yp.to/talks/2015.10.05/slides-djb-20151005-a4.pdf Unfortunately, Java encryption libraries are far from boring. https://www.bleepingcomputer.com/news/security/bouncy-castle-crypto-authentication-bypass-vulnerability-revealed/ https://www.bleepingcomputer.com/news/security/bouncy-castle... https://www.cvedetails.com/vulnerability-list/vendor_id-7637/Bouncycastle.html https://www.cvedetails.com/vulnerability-list/vendor_id-7637...
- Avamander 3y agoPeople have done a lot of things, the track record so far has shown that to be a terrible idea.