News for hackers. Stuff that matters.

A comment on Serious Chrome zero-day. Parent comment

Re:Serious Chrome zero-day by fooker on Thursday March 07, 2019 @03:13AM (#19326390)
That's a weird and dishonest point to make here.

You can't write safe $ANYTHING for a codebase this complex. I am yet to see someone who has worked on a codebase this complex disagree. Security issues and crashes in general result from your program interacting with the outside world and something behaving in a way you did not account for.

[ Parent | on HN ]
Re:Serious Chrome zero-day by throwawaymath on Thursday March 07, 2019 @09:37AM (#19328301)
What’s dishonest? No one has said language choice is a silver bullet for all classes of security vulnerabilities. The point under contention is that we have better options for memory corruption vulnerabilities in particular.

In other words we’re not talking about whether or not something will be totally safe, but rather safer. Perfect is the enemy of good.

[ Parent | on HN ]