“Most serious” Linux privilege-escalation bug ever is under active exploit

Re:“Most serious” Linux privilege-escalation bug ever is und... by abysmallyideal on Friday October 21, 2016 @10:51PM (#12766838)

haha, that safety stuff is just training wheels. You can't delegate security. Even if you use some baby-proof "programming language", as a security engineer you still have to verify that the safety works in the condition(s) you're programming for.

[ Parent | on HN ]

Re:“Most serious” Linux privilege-escalation bug ever is und... by pjmlp on Saturday October 22, 2016 @03:05AM (#12767614)

Ahah, I was doing systems programming in Pascal dialects and Modula-2 before having to know C was a requirement.

Of course one always has to validate security, but with C each line of executable line of code is a possibility exploit, which grows exponentially with the amount of developer touching the code and their respective skills and UB knowledge.

[ Parent | on HN ]