2 ms·
You should look into cryptography. It actually is possible to design open systems provably without bugs or single sources of failure. It's possible to build mec
by beeflet 1y ago
You should look into cryptography. It actually is possible to design open systems provably without bugs or single sources of failure. It's possible to build mechanisms of plausible deniability that are largely immune to rubber-hose attacks.
It's also possible to design systems with an intermediate level of security. With your attitude, you might as well leave your house unlocked because any competent locksmith could break in.
- breppp 1y agoI am aware of cryptography, but how does strong cryptography prevents these? https://www.heartbleed.com https://www.heartbleed.com https://www.blackduck.com/blog/understanding-apple-goto-fail-vulnerability-2.html https://www.blackduck.com/blog/understanding-apple-goto-fail...
- beeflet 1y agoSide channels are prevented through security audits. There is not an infinite well of bugs in any codebase that will always be exploitable. Once you patch the bugs, they are patched. You eventually reach a state where there is no more surface area for bugs.
- bongodongobob 1y agoI feel like you've never worked at a company that has decades of tech debt and has more than just a handful of devs.
- breppp 1y agoI'm sorry, that's not aligned with reality. Possible states in a system grow exponentially with lines of codes added and no one can expect or prevent all the failure states leading to security issues