3 ms·
I think the two bullet points they listed for their project (other than using Rust) are often overlooked: - Leaving out less commonly used features so as to re
by cyber_kinetist 3y ago
I think the two bullet points they listed for their project (other than using Rust) are often overlooked:
- Leaving out less commonly used features so as to reduce attack surface
- Developing an extensive test suite which even managed to find bugs in the original sudo
Which are the most important aspects when writing any safety-critical code, even moreso than rewriting in Rust!
- Terretta 3y agoAre those more important than, say: - Proven with Coq, a formal proof management system: https://coq.inria.fr/ https://coq.inria.fr/ See in the real world: https://aws.amazon.com/security/provable-security/ https://aws.amazon.com/security/provable-security/ And check out Computer-Aided Verification (CAV).
- Too 3y agoA formal proof is only as good as its requirements. Leaving out features and reducing complexity is for sure going to be more secure.