3 ms·

But I thought security vulnerabilities couldn't happen in memory-safe languages!

• qsort 1y ago
  But I thought accidents wouldn't happen if we wear helmets! Clearly they're worthless!
  • cluckindan 1y ago
    Sarcasm aside: wearing a helmet causes riders to take more risks, leading to more accidents. https://www.sciencedirect.com/science/article/pii/S1369847818305941 https://www.sciencedirect.com/science/article/pii/S136984781... I’d still wear one, but also try to be more careful knowing that the helmet provides a false sense of security. I do believe the analogy holds very true with programming habits.
    • cryptonym 1y ago
      Did you read the abstract? It says the exact opposite: > this systematic review found little to no support for the hypothesis bicycle helmet use is associated with engaging in risky behaviour.
      • cluckindan 1y ago
        What! You’re lying!
• junon 1y ago
  This isn't a memory bug.
  • mdaniel 1y ago
    And Helm isn't written in Rust, so their snark was doubly misplaced
    • dilyevsky 1y ago
      Fwiw, Go is also considered memory-safe although not as strict as Rust
• grumpyprole 1y ago
  I would argue that not sanitising strings is analogous to a form of memory unsafety. You take as an input, an opaque blob of bytes that you then pass on to a myriad of other libraries and pieces of code. Nothing is captured in the types other than "String". Mainstream programming languages need to make it easier to define new types and parse strings into them. Rust is very promising in this area, as it features algebraic data types.