4 ms·
The other moral here is to stop using memory unsafe languages. It's just so incredibly dumb that we keep making excuses for this.
by xvector 2y ago
The other moral here is to stop using memory unsafe languages. It's just so incredibly dumb that we keep making excuses for this.
- mountainmonk 2y agoDoes Rust make RCE impossible?, I don't think it does. There is the option of not having data and code sharing the same stack, that seems like a better solution to me but that's such an option is not usually talked about.
- saagarjha 2y agoIt makes this kind easy pivot to RCE impossible. Attacks these days are generally more sophisticated than simple buffer overflows, fwiw. Targeting function pointers from a heap overwrite gives the same capabilities.
- hulitu 2y ago> Does Rust make RCE impossible?, I don't think it does. Well, RCE (cargo) is built into it. /s
- hi41 2y agoI think most influential companies such as Microsoft snd Google have said that c and c++ need to be deprecated. I think replacing old code with memory safe languages takes time, effort and money. Hopefully in a decade we can this can be fully done.
- hulitu 2y ago> The other moral here is to stop using memory unsafe languages. It's just so incredibly dumb that we keep making excuses for this Has your "memory safe" language been audited for security ?