4 ms·
You are however replying to thread where a Dropbox engineer calls it "a right of passage" to introduce such bugs to their codebase. Which suggests that it is by
by nicoburns 1y ago
You are however replying to thread where a Dropbox engineer calls it "a right of passage" to introduce such bugs to their codebase. Which suggests that it is by no means unheard of for these problems to crop up in real-world code.
- samus 1y agoDoesn't Dropbox write a lot of Python extensions in C for speedup?
- pclmulqdq 1y agoExcuse me, but in this thread we are bashing go, not making logical arguments.
- ioasuncvinvaer 1y agoWhat is the argument?
- pclmulqdq 1y agoThat Dropbox is very happy with unsafe languages despite the top-level comment.
- blub 1y agoMany FAANG & co engineers are overrated. If every new hire is introducing concurrency bugs in a Golang codebase, refactor, do better review and maybe use concurrency questions instead of leetcode. I’ll take tptacek’s word over most FAANG type on such topics if we’re doing appeals to authority. The guy is very practical, unlike the Rust community which is incredibly focused on theoretical correctness instead of real-world experiences.
- tptacek 1y agoAgain: introducing surprising correctness bugs? Crashing programs? Absolutely. I don't know how many different ways I can say that my concern here is the misuse of a security term of art. Dropbox engineers do not have as a rite of passage introducing or finding RCE vulnerabilities in Go code. Would that it were so! My job would be much more interesting.
- zozbot234 1y ago> correctness bugs? Crashing programs? Absolutely. Denial of service can absolutely be a security issue, as can any correctness bug if it leads to unintended behavior or corrupted data.
- tptacek 1y agoIf that's where we're at, where unhandled exceptions are the security issues we're hanging on, I'll consider my argument won.