2 ms·

Parent point was that such CVE could be fixed in Rust super cheaply (free) because code is maintained. If I have to reinstall the whole system to fix CVE in Ru

by megous 3y ago

Parent point was that such CVE could be fixed in Rust super cheaply (free) because code is maintained. If I have to reinstall the whole system to fix CVE in Rust stdlib in a brave new world where everything is written in Rust, then it's certainly not free fix.

nequo 3y ago
I actually think you're right. Apologies. I also don't see deploying a glibc fix as particularly costly.
jacquesm 3y ago
But we don't live in that brave new world and we're talking about now, not some hypothetical.