4 ms·
Ain't gonna lie I thought this tweet >Computer security would be about 80% solved if we just deprecated every technology shown in this graphic. is going to b
by tester756 3y ago
Ain't gonna lie
I thought this tweet
>Computer security would be about 80% solved if we just deprecated every technology shown in this graphic.
is going to be about memory unsafe languages like C, C++ and JIT compilers (web browser) since
>Around 70% of our high severity security bugs are memory unsafety problems (that is, mistakes with C/C++ pointers). Half of those are use-after-free bugs.
https://www.chromium.org/Home/chromium-security/memory-safety/ https://www.chromium.org/Home/chromium-security/memory-safet...
>Figure 1: ~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues
https://msrc.microsoft.com/blog/2019/07/a-proactive-approach-to-more-secure-code/ https://msrc.microsoft.com/blog/2019/07/a-proactive-approach...
Also HN title is editorialized.
- tracker1 3y agoLarge reason why MS has been embracing Rust recently... IIRC, they have their first rust based dll replacement in testing now. May take a while to see even half of it shift over though.
- sedatk 3y agoYes, Rust has finally made it to Windows kernel: https://twitter.com/esesci/status/1679215711183605760 https://twitter.com/esesci/status/1679215711183605760
- CyberRage 3y agoVast majority of malware doesn't use any exploits, let alone something like a zero-day Most of malware, logically, abuse common features within the operating system