News for hackers. Stuff that matters.
Re:Nginx to Be Acquired by F5 Networks by fulafel on Tuesday March 12, 2019 @12:34AM (#19365444)
The replacement should be written in a memory-safe language. Including the TLS library.

"There is more to life than increasing its speed."

Re:Nginx to Be Acquired by F5 Networks by dymk on Tuesday March 12, 2019 @02:27AM (#19365864)
Does it start with an "R" and rhyme with "repeated-so-often-its-been-ground-into-the-dust"?
Re:Nginx to Be Acquired by F5 Networks by fulafel on Tuesday March 12, 2019 @04:02AM (#19366192)
Go has the advantage in having a native mature TLS stack.
Re:Nginx to Be Acquired by F5 Networks by mlindner on Tuesday March 12, 2019 @05:22PM (#19373179)
It's not a memory safe language though.
Re:Nginx to Be Acquired by F5 Networks by otabdeveloper1 on Tuesday March 12, 2019 @06:09AM (#19366682)
> The replacement should be written in a memory-safe language. Including the TLS library.

No. Memory safety is a vanishingly small subset of all bugs and security problems. PHP is memory-safe, for example. Where has that gotten us?

> "There is more to life than increasing its speed."

Not if you're a computer.

Re:Nginx to Be Acquired by F5 Networks by fulafel on Tuesday March 12, 2019 @07:12AM (#19367006)
I'm not sure if you are trolling or not. Just in case: all rce vulns in nginx have been memory safety bugs: https://www.cvedetails.com/vulnerability-list/vendor_id-1004...
Re:Nginx to Be Acquired by F5 Networks by otabdeveloper1 on Tuesday March 12, 2019 @10:04AM (#19368189)
Read what I posted again.

The number of security vulnerabilities due to PHP's crappiness is two orders of magnitude greater than all of nginx vulnerabilities combined.

Yet PHP is a memory-safe language.

Memory safety won't fix anything by itself, it will just shuffle the shit into some other place.

Now if you're claiming that if you take nginx developers and force them to use Rust they'll somehow start writing better code, then that's a valid point. Although I'm in extreme doubt that it is realistic or even true.