4 ms·
>This allows you to not only produce a much smaller attack surface Why does this reduce your attack surface? Can the functions in the library, unrelated to the
by closeparen 1y ago
>This allows you to not only produce a much smaller attack surface
Why does this reduce your attack surface? Can the functions in the library, unrelated to the ones you're using, be triggered by user input somehow?
- j-pb 1y agoIt's about the functions you _do_ call. Those probably have larger scope beyond your specific use case. Worse they have to support the superposition of various use-cases of their users. Let's say you got a library to do arbitrary unicode string verification, but your code only ever works with strings of a short bounded length (e.g. 32 byte), an LLM could write you vectored verification instructions for that.