3 ms·
Of course they are, anything can be a gateway to inject backdoors, if security is not taken into account. And as mentioned, if what Zig offers is already in Pu
by pjmlp 4mo ago
Of course they are, anything can be a gateway to inject backdoors, if security is not taken into account.
And as mentioned, if what Zig offers is already in Purify, there is hardly any added value over C and C++, without the headaches of a niche language.
- afdbcreid 4mo agoConsidering that you often run the code after you compile it, it might not matter. Anyway, like it or not, most compilers don't consider themselves security sensitive and will not consider malicious code that is able to hijack the compiler a security vulnerability.
- pjmlp 4mo agoKen Thompson won the award for nothing, yeah.
- afdbcreid 4mo agoTotally unrelated; The trusting trust attack was about downloading a malicious compiler because malicious code was injected into it in some early version. (And if you ask me, it was indeed overrated, but that's unrelated).
- pjmlp 4mo agoThat was one way the attack could be done, there are many other ways if the compiler binary can be open for manipulation.