3 ms·
> It’s not normal for software to be so poorly written, one doubts the claim that a security bug hasn’t been found in over three years. Can you back that claim
by fc417fc802 6mo ago
> It’s not normal for software to be so poorly written, one doubts the claim that a security bug hasn’t been found in over three years.
Can you back that claim up with at least some sort of theory? Because it doesn't match my perception of the real world, nor does it match my mental model of how CVEs happen.
- strenholme 6mo agoYes, I can. https://samboy.github.io/MaraDNS/webpage/DNS.security.comparison.txt https://samboy.github.io/MaraDNS/webpage/DNS.security.compar... Also, my sister post: https://news.ycombinator.com/item?id=48112042 https://news.ycombinator.com/item?id=48112042
- fc417fc802 6mo agoIs that not begging the question? You have asserted X and now you point to a particular track record to back the claim of X up but the track record only serves as valid evidence of X if we already accept your assertion that X is the case.