News for hackers. Stuff that matters.
Re:WebAssembly: Mozilla Won by braveo on Thursday June 01, 2017 @10:10AM (#14460323)
Are these category of bugs a constant problem in FF?
Re:WebAssembly: Mozilla Won by steveklabnik on Thursday June 01, 2017 @11:16AM (#14460949)
They're a constant problem in all browsers. Take last year's Pwn2Own for example: http://blog.trendmicro.com/pwn2own-day-2-event-wrap/

Demonstrated a successful code execution attack against Safari to gain root privileges using an use-after-free vulnerability in Safari and an out-of-bounds vulnerability in Mac OS X.

Demonstrated a successful code execution attack against Microsoft Edge in the SYSTEM context using an uninitialized stack variable vulnerability in Microsoft Edge

Demonstrated a successful code execution vulnerability against Microsoft Edge in the SYSTEM context using an out-of-bounds vulnerability in Microsoft Edge and a buffer overflow vulnerability in the Kernel.

etc. Highlights mine. All of these are prevented in safe Rust.

Re:WebAssembly: Mozilla Won by paulmlewis on Thursday June 01, 2017 @10:30AM (#14460541)
They're a big enough problem that they created Rust to deal with them.
Re:WebAssembly: Mozilla Won by NiLSPACE on Thursday June 01, 2017 @10:14AM (#14460360)
Some of these bugs could've been prevented with Rust: https://www.mozilla.org/en-US/security/advisories/mfsa2017-0...
Re:WebAssembly: Mozilla Won by wpietri on Thursday June 01, 2017 @10:31AM (#14460547)
Do you have any evidence that's why users are switching away?

My general belief is that general-audience users don't care at all about bugs like those. Which is why we have so very many of them, and have for decades.

Re:WebAssembly: Mozilla Won by pygy_ on Thursday June 01, 2017 @10:44AM (#14460663)
Rust's fearless concurrency[0] allows devs to write and refactor performant parallel code without the risk of introducing bugs, enabling them to ship upgrades faster.

It's the same benefit you get from strong, static types in a large project vs one with dynamic/weak types, but for another category of bugs. In large projects, it makes a difference.

---

0. Hopefully you'll forget the meme ;-)

Re:WebAssembly: Mozilla Won by MisterBastahrd on Thursday June 01, 2017 @10:50AM (#14460709)
I switched away from Firefox because at the time it was bloated, buggy, and slow. I haven't switched back because I am more familiar with Google's developer tools.
Re:WebAssembly: Mozilla Won by NiLSPACE on Thursday June 01, 2017 @10:37AM (#14460605)
I don't, but a marketing campaign saying "using modern safe techniques" might get a little traction.
Re:WebAssembly: Mozilla Won by braveo on Friday June 02, 2017 @09:06AM (#14469533)
That isn't what I asked, I asked if this class of problem is truly causing a lot of harm.

Software stabilizes over time, you find problems and then you fix them. How often are these class of bugs causing catastrophic issues?

That's really the important question.