5 ms·
Somewhere someone is finding a way to make this a buffer overflow. Wonder how long this will take to get fixed. I totally forgot about Twitter's in-band and SMS
by BorisMelnik 11y ago
Somewhere someone is finding a way to make this a buffer overflow. Wonder how long this will take to get fixed. I totally forgot about Twitter's in-band and SMS features until now.
- tyho 11y agoIt is likely a scala program running, no buffer overflows to be found. In a modern language, you have to be very careless to allow RCE.
- gohrt 11y agobuffer overflow is not the only way to get a RCE. String manipulation and 'eval' (which gives access to system APIs) is a common culprit
- chc 11y agoIs anything like eval commonly used in Scala? That language is static as all get-out.
- deleted 11y ago[deleted]
- eropple 11y agoI've started seeing (and occasionally using) util-eval as a configuration language for Scala, but it's generally pretty rare.
- Dylan16807 11y agoUsing eval is gratuitous carelessness. At least a buffer overflow can be a mistake.