News for hackers. Stuff that matters.
Re:Chrome 0-day exploit used in Operation WizardOpium by pjmlp on Saturday November 02, 2019 @05:00AM (#21426616)
We should start by retiring C.

It doesn't matter if userspace is fully safe, when the basement looks like a Swiss cheese of security.

Re:Chrome 0-day exploit used in Operation WizardOpium by willtim on Saturday November 02, 2019 @06:08AM (#21426805)
Maybe. I'm happy to run any formally verified C as my basement, for example the seL4 kernel, or for C to be used as an intermediate language. Especially as there should be less code at the bottom of the stack. But C++ seems worse, it's a far more complex language, designed and built to try and scale C to building applications. This creates a far larger attack surface.