3 ms·
The "The Dubious Benefits of Safety" is highly naive. I think the author greatly underestimates the ease with which code ends up exposed to attackers. Sure, th
by dale_glass 3y ago
The "The Dubious Benefits of Safety" is highly naive.
I think the author greatly underestimates the ease with which code ends up exposed to attackers. Sure, the author works on some internal thing. But where does the data come from? And data often comes in complex formats. Does the application deal with say, images or zip files? Lots of room for something to go wrong there. Projects that start internal can become part of something exposed to the outside. A modern, large project may have a few dozen dependencies, the quality of each is far from guaranteed.
For crashes, the issue is that in a complex enough project, troubeshooting is often far from trivial. Things often explode in a different place from where the bug was. My hobby project simply doesn't run under Valgrid, it's too slow for the code to run under it.